Commit graph

106 commits

Author SHA1 Message Date
Luca Deri
ee6b67ed0c Added support for nDPI's NDPI_BINARY_DATA_TRANSFER 2024-04-09 10:35:49 +02:00
Luca Deri
f26d56959c Renamed HostBlackHoleContactsAlert to HostScannerAlert 2024-04-08 18:35:49 +02:00
Nicolò Maio
2deb42a7a2
Add the blackhole contacts alerts and update the scan detection alert. (#8290) 2024-03-28 08:55:45 +01:00
Nicolo Maio
4e9d324236 Add traffic profiles rules. (#7839) 2024-03-01 15:18:08 +01:00
Matteo Biscosi
88e5d26afe Removed no more used checks (#8235) 2024-02-27 05:49:44 -05:00
Matteo Biscosi
af9011684b Moved host traffic checks to unused 2024-02-27 05:30:20 -05:00
Luca Deri
2ee2c180a5 Removed alerts no longer necessary as they have been replaced by local traffic rules 2024-02-21 22:54:22 +01:00
Nicolo Maio
df2e4bd12a Add VLAN rules. (#8193) 2024-02-06 17:47:15 +01:00
Nicolo Maio
d537a71781 Add usage metric in SNMP devices rules. 2024-01-19 11:15:19 +01:00
Nicolo Maio
b3c573498f Reworked SNMP interfaces average usage and replaced the interface load alert with the interface average usage alert (#8168) 2024-01-17 12:41:59 +01:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
Matteo Biscosi
ed4ab2836f Added system alert in case of ntopng failure (#8040) 2023-11-22 10:22:22 +00:00
Luca Deri
17a843b47e Added NDPI_MALWARE_HOST_CONTACTED support! 2023-10-18 00:08:29 +02:00
Luca Deri
d1761ba70c Updated with latest nDPi risks 2023-09-11 15:19:37 +02:00
Nicolo Maio
7d3696c076 Add host pools and networks in Local Traffic Rules. (#7754) 2023-08-17 17:45:32 +02:00
Matteo Biscosi
3ca4ad98ae Added vulnerability issues alert (#7717) 2023-08-04 13:24:27 +00:00
Alfredo Cardigliano
823757f0a1 Typo 2023-07-31 09:44:52 +02:00
Matteo Biscosi
fcd6102ad0 Reworked behavior analysis alerts 2023-06-16 14:32:02 +00:00
Luca Deri
e86cd0f2ce added Modbus Invalid Transition Alert 2023-06-05 00:53:27 +02:00
Luca Deri
4a13dc41d5 Implemented Modbus exceptions 2023-06-01 22:53:59 +02:00
Alfredo Cardigliano
2434ae9e76 Cleanup deprecated code 2023-05-18 18:36:25 +02:00
Nicolo Maio
5bf92eec23 Add backend endpoint to handle checks. (#7446) 2023-05-15 16:12:17 +00:00
Luca Deri
96e10b12a5 Added stub for RareDestination check/alert implementation #6416 and #6417 2023-03-22 15:11:53 +01:00
Matteo Biscosi
fc82eff56b Updated alert to NDPI_NUMERIC_IP_HOST 2023-03-02 15:18:40 +00:00
Nicolò Maio
cf8a89a7e1
Add lowerbound and upperbound choice and percentage threshold on host rules. (#6855) (#7238)
* Add lowerbound and percentage threshold on host rules. (#6855)

* Add interface rules. (#6855)

* Added ability to blacklist hosts via Lua API

* Not supposed to be committed

* Method signature change to be called it also from a lua host script

* Fix empty string heck

* Add param check

* Add example listing alerts

* Fix params check

* Fix alert raw queris

* Removed debug code

* MacOS changes

* Updated (C)

* Warning fixes

* Removed sprintf calls

* Added rx_only_hosts classification

* https://github.com/ntop/ntopng/issues/7233; extend datatable component to allow external vue components in table menu bar

* Update dist: https://github.com/ntop/ntopng/issues/7233; extend datatable component to allow external vue components in table menu bar

* Remove obsoleted comment

* Minor GUI fix. (#6855)

* Fix on alert format. (#6855)

* Minor fix. (#6855)

* Update doc. (#6855)

---------

Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
Co-authored-by: Luca Deri <deri@ntop.org>
Co-authored-by: Alfredo Cardigliano <cardigliano@ntop.org>
Co-authored-by: uccidibuti <vannucci@ntop.org>
2023-02-21 14:37:09 +01:00
Nicolò Maio
6d2ee3d599
Add network issue alert (#6691) (#7228)
* Add network issues alert. (#6691)

* Fix alert subtype. (#6691)

* Update default values. (#6691)

* Minor fix. (#6691)
2023-02-14 05:40:06 -05:00
MatteoBiscosi
ddb55b4d7e Updated ndpi alerts (#7200) 2023-02-09 18:46:37 +01:00
Nicolò Maio
7162045cdd
Add VLAN bidirectional traffic alert (#7126) (#7194)
* Add VLAN bidirectional traffic alert (#7126)

* Add alert description. (#7126)
2023-02-03 10:33:25 +01:00
Alfredo Cardigliano
73af3fa521 Add support for external (REST) host alerts (#7170) 2023-01-26 15:34:54 +01:00
Luca Deri
8acaf30b2e Enhancement to support NDPI_TCP_ISSUES flow risk 2023-01-24 23:11:25 +01:00
Luca Deri
ccd8890e54 Fixed bug that reported wrong DNS information 2023-01-23 19:18:17 +01:00
Luca Deri
f718854bce Improved report of periodic flows
Updated nDPI flow risks list
2022-12-31 18:08:21 +01:00
Luca Deri
21101c43f1 Added detection of periodic flows and exported it as flow risk in both flows and alerts 2022-12-30 19:48:26 +01:00
Luca Deri
c42fdd60c9 Added traffic volume alert 2022-12-19 23:17:44 +01:00
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
MatteoBiscosi
63aacc9ec9 Fixes incorrect flow alert key 2022-11-28 12:09:51 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
MatteoBiscosi
2e27e21cc8 Added SNMP flood check (#5905) 2022-11-23 12:14:42 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
Luca Deri
80db634bfe Implemented skeleton of CustomFlowLuaScriptAlert check 2022-11-19 20:31:24 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
Luca
0aa60f5001 Added support for HTTP Obsolete HTTP server flow risk 2022-10-04 22:34:21 +02:00
Luca Deri
7992446d9e Implements Local Hosts BlackList Check #6858 2022-09-09 22:51:12 +02:00
MatteoBiscosi
d6471d8dac Added device connection/disconnection alert (#6801) 2022-08-05 10:46:18 +02:00
MatteoBiscosi
3db8cc6cc8 Added check when SNMP traffic changes (#6144) 2022-07-20 12:42:41 +02:00
MatteoBiscosi
7f49e1cb04 Added SNMP interface error alert (#6747) 2022-07-15 17:11:14 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Luca Deri
5de07dc827 Added support for nDPI unidirectional traffic risk 2022-06-20 00:46:51 +02:00
Luca Deri
9d364c69b4 Fixed TCP with no answer alert definition 2022-06-07 13:11:35 +02:00