Commit graph

1851 commits

Author SHA1 Message Date
emanuele-f
4f32f927c8 Add function to get the exporter interface identifier 2019-04-29 17:39:15 +02:00
emanuele-f
a2d30d4935 Remove TCP flags from zmq eBFP interfaces 2019-04-29 15:50:39 +02:00
emanuele-f
8e546e904d Add event exporters charts 2019-04-29 15:11:01 +02:00
emanuele-f
cdcac0e6a2 Add event exporter traffic timeseries 2019-04-29 14:15:32 +02:00
emanuele-f
b82cae8457 Display docker container name 2019-04-29 13:30:37 +02:00
emanuele-f
b01f104a36 Move process information into client/server column 2019-04-29 12:09:44 +02:00
emanuele-f
939ca8c166 Implement eBPF flows view and improve containers/pods pages 2019-04-26 15:34:53 +02:00
emanuele-f
fdc7772519 Implement simplified flows page with container filter 2019-04-26 10:44:44 +02:00
emanuele-f
61c160a085 Fix reverted condition 2019-04-24 19:26:46 +02:00
emanuele-f
6ea942715b Add pod/containers timeseries export 2019-04-24 19:18:41 +02:00
emanuele-f
6fb921d68a Implement Pods and Containers page 2019-04-24 18:46:07 +02:00
emanuele-f
5e54c3c372 Properly handle pre-computed "Other" in top talkers
Fixes duplicate other entry and link
Fixes #2545
2019-04-23 11:35:59 +02:00
Simone Mainardi
25785fca62 Groups together flow alerts for the same flow in a counter variable
This is to mitigate the number of alerts and implements #2515
2019-04-19 16:14:06 +02:00
emanuele-f
dfc9de74a0 Host pools gui fixes and improvements
- Fix selectable "Not Assigned" pool in manage pools
- Hide "Unassigned Devices" tab for interfaces without macs
- Add note in "Unassigned Devices" to explain the list shown

Fixes #2486
2019-04-19 12:43:53 +02:00
emanuele-f
ebc5251a7f Use fully qualified name for retention policy based queries 2019-04-17 15:31:56 +02:00
Francesco Staccini
1d9b35be42 ARP Map (#2540)
* arp matrix graph and fix

* bug fix

* graph fix

* bug fix

* tests on arp graph

* merged heatmap.js and map.js

* graph dinamic resize

* minor fix

* graph dinamic width

* graph performance improvement

* clean code

* fix manual refresh

* message for empty graph

* clean code

* more clean

* update arpMap and host details

* migrate to v4.min version of d3.js
2019-04-17 13:23:10 +02:00
emanuele-f
d5d551853c Do not account the Unknown protocol in the Unspecified category
Such protocol should not modified by the used see (78a20a166).

Fix #2536
2019-04-16 17:17:31 +02:00
emanuele-f
53cbcc79c2 Fix timeseries menu selection with inactive entries
Fix #2537
2019-04-16 16:57:20 +02:00
Simone Mainardi
ce5d7d8400 Adds Portuguese/Brazilian localization file
Work Courtesy of Alexandre Giovaneli
2019-04-16 10:11:28 +02:00
emanuele-f
eddcc59d4c Fix possible script failure when protos.txt is not readable 2019-04-12 17:32:46 +02:00
Simone Mainardi
ddd3015db1 Implements alerts mitigation for stored alerts 2019-04-12 16:20:55 +02:00
emanuele-f
0968bb15bd Fix rename error 2019-04-12 10:43:52 +02:00
emanuele-f
fa4330bbfd Implement alert for IP addresses assigned outside the configured DHCP ranges 2019-04-11 17:01:39 +02:00
emanuele-f
14a9d83a30 Move local broadcast domain preference to the interface settings and show warnings
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
emanuele-f
2aeeb63142 Implmenent host total flows timeseries.
"host:flows" data will be dropped in favor of "host:active_flows", which has separated client and server counters

Closes #2528
2019-04-10 18:22:41 +02:00
emanuele-f
21f202ccb2 Implement protos.txt editing via the gui.
Editor is only enabled if the -p option is specified.
Also added an hook in the flow to easily add domain.

Closes #1837
2019-04-10 16:16:39 +02:00
Salvatore Costantino
1768d0b121 Modified ARP time series (#2520) 2019-04-09 15:28:29 +02:00
emanuele-f
acdd80767e Remove getGraphMenuEntries function 2019-04-08 18:36:30 +02:00
Simone Mainardi
db44a554c9 RTP in flow details fixes 2019-04-08 18:28:45 +02:00
Salvatore Costantino
76dded229a Added ICMP ECHO time series (#2518)
* Added ICMP ECHO time series

* added icmp echo time series
2019-04-08 16:10:30 +02:00
Salvatore Costantino
f27f137c09 Added TCP packets time series (#2516) 2019-04-08 15:30:45 +02:00
Salvatore Costantino
dd24d2a932 Removed net unreachable counters (#2517) 2019-04-05 21:32:37 +02:00
Simone Mainardi
d7342798ca Improves SSL certificates mismatch alerts
Implements #2510
2019-04-05 18:21:54 +02:00
Simone Mainardi
b4f849a51d Domain in blacklisted alerts 2019-04-05 18:02:23 +02:00
emanuele-f
387543f8e9 Fix top talkers when mac address is used as LBD hosts ID 2019-04-05 17:49:22 +02:00
Alfredo Cardigliano
a892c825c0 toggle_ids_alerts liny 2019-04-05 15:55:53 +02:00
Simone Mainardi
a85b7cd398 Improves description of blacklisted flow alerts
Implements #2511
2019-04-05 15:40:33 +02:00
emanuele-f
bcf1d9c123 Add ad lists 2019-04-05 12:41:04 +02:00
emanuele-f
68eee30d03 Add support for disabled menu entries 2019-04-05 10:29:08 +02:00
emanuele-f
316ad4a9bd Add temporary fix for host:contacts schema change 2019-04-04 16:52:43 +02:00
emanuele-f
2c2abae146 Improve error message in InfluxDB multiqueries 2019-04-04 16:52:43 +02:00
Alfredo Cardigliano
3f442f28b0 Rendering signature/severity for ids alerts 2019-04-04 16:31:13 +02:00
Alfredo Cardigliano
7ce1150a69 IDS flow alerts notification 2019-04-04 16:03:48 +02:00
Alfredo Cardigliano
96954bdabb new ids alert type and configuration 2019-04-04 11:02:01 +02:00
Salvatore Costantino
3bb830d23e Fix active contacts time series (#2506)
* Fix active contacts time series

* Fix active contacts time series
2019-04-04 09:33:09 +02:00
Simone Mainardi
f827d8c700 Changes to DNS timeseries to show queries and replies together 2019-04-03 19:15:28 +02:00
SalvatoreCostantino
27fcedf9ff Added TCP time series 2019-04-02 16:22:39 +02:00
Salvatore Costantino
a121b6a4f8 Added ARP requests time series (#2496) 2019-04-01 16:11:37 +02:00
Salvatore Costantino
5ec5a8e9c8 Added UDP packets time series (#2488) 2019-04-01 16:10:35 +02:00
Simone Mainardi
5e5ad77cec Implements broadcast domain too large alerts 2019-04-01 14:20:57 +02:00