Commit graph

5432 commits

Author SHA1 Message Date
Alfredo Cardigliano
0aa9c899df Fix debug trace 2022-05-18 10:42:25 +02:00
MatteoBiscosi
65284b6929 Fixes Score Network alert (#6366) 2022-05-17 11:26:00 +02:00
MatteoBiscosi
c1e6f01d53 Fixes suspicious DGA domain nil value 2022-05-17 11:26:00 +02:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
MatteoBiscosi
7f81cc45a1 Added mirrore traffic toast (#6600) 2022-05-16 12:33:22 +02:00
MatteoBiscosi
bde099b236 Fixes url not correct (#6601) 2022-05-16 11:30:36 +02:00
Luca Deri
b0158f89c2 Reworked MAC/IP Reassociation alert used to detect spoofind and MITM (Man In The Middle) Attacks 2022-05-15 19:17:18 +02:00
Luca Deri
cdbb0e5380 Implements #6598 2022-05-15 16:57:48 +02:00
Luca Deri
7c038e29da Implemented IEC104 Invalid Command Transition check/alert 2022-05-11 23:16:45 +02:00
MatteoBiscosi
e81f97d02d Fixes https dga domain url (#6583) 2022-05-11 16:50:08 +02:00
Alfredo Cardigliano
d248d2a158 Handle IPv4 vs IPv6 columns when writing to the flow alerts table using a view 2022-05-11 16:16:23 +02:00
Alfredo Cardigliano
7025b3dd5b Fix string to numeric IP conversion in flow alerts 2022-05-11 15:46:39 +02:00
MatteoBiscosi
7e9b3579c5 Added info ordering into historical view (#6587) 2022-05-11 14:47:13 +02:00
Alfredo Cardigliano
addecb93e8 Move info field out of the json for flow alerts 2022-05-11 09:47:52 +02:00
MatteoBiscosi
37820b4940 Added dga domain URL check (#6583) 2022-05-10 17:16:10 +02:00
uccidibuti
ff14e60c3d Alerts: Add Top Protocols Dropdown menu #6582: enable top protocols even if clickhouse is disabled 2022-05-10 16:24:27 +02:00
uccidibuti
6a0a60047c Alerts: Add Top Protocols Dropdown menu #6582 2022-05-10 16:12:15 +02:00
MatteoBiscosi
fa0578c8a9 Added filter for second host in flows (#2722) 2022-05-10 12:45:50 +02:00
Alfredo Cardigliano
8d5ddda7d4 Fix flow alert delete with clickhouse view (add IS_ALERT_DELETED flag) 2022-05-10 09:46:21 +02:00
Alfredo Cardigliano
103ffcf370 Fix columns type conversion for flow alerts view 2022-05-09 18:42:03 +02:00
Alfredo Cardigliano
8651e089a1 Handle write operation on flow alerts with clickhouse view 2022-05-09 17:49:48 +02:00
Alfredo Cardigliano
2f0ba125da Add support for 'write' columns which differ from 'view' columns when building where conditions 2022-05-09 14:37:13 +02:00
MatteoBiscosi
524378cccd Changed alert drops description (#6575) 2022-05-09 11:47:01 +02:00
Alfredo Cardigliano
5308864593 Fix flow alert delete backend with clickhouse view (#6567) 2022-05-06 12:16:28 +02:00
MatteoBiscosi
b2094f32eb Fixes nil name given to loading category 2022-05-06 09:56:29 +02:00
MatteoBiscosi
71cb504bac Added check to empty category list 2022-05-04 22:11:45 +02:00
MatteoBiscosi
2bcf7c8dfa Added Suspicious Entropy alert (#6563) 2022-05-04 22:11:44 +02:00
Luca Deri
0ceb25eaac Fixed invalid ICMP info field format 2022-05-03 23:16:14 +02:00
MatteoBiscosi
a338bcd448 Added ICMP type and code formatting to alerts (#6560) 2022-05-03 11:33:30 +02:00
MatteoBiscosi
e6716342ba Added ICMP mapping (#6560) 2022-05-03 11:05:46 +02:00
Luca Deri
a28d4f4886 Added error code in flow alerts 2022-05-02 16:18:05 +02:00
Luca Deri
3c660a513a Host redirect URL now contains the hostname and not the IP, if present 2022-05-02 10:57:36 +02:00
Alfredo Cardigliano
fc11f0cfa1 Add logout button to nedge captive portal if logged in. Fix login. 2022-04-29 18:55:25 +02:00
Alfredo Cardigliano
8a8805167a Fix alert exclusion with clickhouse view (#6556) 2022-04-29 16:33:54 +02:00
Alfredo Cardigliano
515af750b6 Fix remove of flow alerts when using clickhouse view 2022-04-29 16:16:34 +02:00
Luca
e1808c2ed6 Disabled trace 2022-04-29 13:47:11 +02:00
uccidibuti
91b67b2941 Fix client zoneinfo 2022-04-29 11:57:15 +02:00
Luca
160279e5eb Fix for blacklisted flow 2022-04-29 11:49:53 +02:00
MatteoBiscosi
e058583a77 Fixes nil granularity 2022-04-29 10:59:58 +02:00
Luca Deri
61d33f673a Improved hosts map 2022-04-27 22:42:33 +02:00
Alfredo Cardigliano
b277be68f2 Add support for Active Monitoring selection in recipients 2022-04-27 17:07:53 +02:00
Luca Deri
b2f20317b8 Reworked host map 2022-04-27 16:37:26 +02:00
MatteoBiscosi
af41fc37ab Unified endpoints and recipient page (#6541) 2022-04-27 16:34:16 +02:00
MatteoBiscosi
51ad48fdd4 Fixes status icons not consistent (#6545) 2022-04-27 11:21:04 +02:00
Luca Deri
6526a495bb Speedtest update (#6547) 2022-04-26 21:07:53 +02:00
uccidibuti
ab24d05ab9 Timezone Not in Sync with ntopng #6492 2022-04-26 19:13:01 +02:00
Alfredo Cardigliano
0204d4734a Implement acknowledge for flow alerts using the historical flows table 2022-04-26 17:23:25 +02:00
MatteoBiscosi
79528b58bc Fixed actrive monitoring table broken (#6548) 2022-04-26 16:39:56 +02:00
MatteoBiscosi
59069bf4bd Fixes live flows not having alert badge 2022-04-26 15:49:35 +02:00
Luca Deri
8f75df9797 Blacklist name is now shown in blacklisted flows alerts 2022-04-26 14:56:15 +02:00