Luca Deri
|
ee6b67ed0c
|
Added support for nDPI's NDPI_BINARY_DATA_TRANSFER
|
2024-04-09 10:35:49 +02:00 |
|
Luca Deri
|
f26d56959c
|
Renamed HostBlackHoleContactsAlert to HostScannerAlert
|
2024-04-08 18:35:49 +02:00 |
|
Nicolò Maio
|
2deb42a7a2
|
Add the blackhole contacts alerts and update the scan detection alert. (#8290)
|
2024-03-28 08:55:45 +01:00 |
|
Nicolo Maio
|
4e9d324236
|
Add traffic profiles rules. (#7839)
|
2024-03-01 15:18:08 +01:00 |
|
Matteo Biscosi
|
88e5d26afe
|
Removed no more used checks (#8235)
|
2024-02-27 05:49:44 -05:00 |
|
Matteo Biscosi
|
af9011684b
|
Moved host traffic checks to unused
|
2024-02-27 05:30:20 -05:00 |
|
Luca Deri
|
2ee2c180a5
|
Removed alerts no longer necessary as they have been replaced by local traffic rules
|
2024-02-21 22:54:22 +01:00 |
|
Nicolo Maio
|
df2e4bd12a
|
Add VLAN rules. (#8193)
|
2024-02-06 17:47:15 +01:00 |
|
Nicolo Maio
|
d537a71781
|
Add usage metric in SNMP devices rules.
|
2024-01-19 11:15:19 +01:00 |
|
Nicolo Maio
|
b3c573498f
|
Reworked SNMP interfaces average usage and replaced the interface load alert with the interface average usage alert (#8168)
|
2024-01-17 12:41:59 +01:00 |
|
Luca Deri
|
55870e97b9
|
(C) Update
|
2024-01-12 11:44:18 +01:00 |
|
Matteo Biscosi
|
ed4ab2836f
|
Added system alert in case of ntopng failure (#8040)
|
2023-11-22 10:22:22 +00:00 |
|
Luca Deri
|
17a843b47e
|
Added NDPI_MALWARE_HOST_CONTACTED support!
|
2023-10-18 00:08:29 +02:00 |
|
Luca Deri
|
d1761ba70c
|
Updated with latest nDPi risks
|
2023-09-11 15:19:37 +02:00 |
|
Nicolo Maio
|
7d3696c076
|
Add host pools and networks in Local Traffic Rules. (#7754)
|
2023-08-17 17:45:32 +02:00 |
|
Matteo Biscosi
|
3ca4ad98ae
|
Added vulnerability issues alert (#7717)
|
2023-08-04 13:24:27 +00:00 |
|
Alfredo Cardigliano
|
823757f0a1
|
Typo
|
2023-07-31 09:44:52 +02:00 |
|
Matteo Biscosi
|
fcd6102ad0
|
Reworked behavior analysis alerts
|
2023-06-16 14:32:02 +00:00 |
|
Luca Deri
|
e86cd0f2ce
|
added Modbus Invalid Transition Alert
|
2023-06-05 00:53:27 +02:00 |
|
Luca Deri
|
4a13dc41d5
|
Implemented Modbus exceptions
|
2023-06-01 22:53:59 +02:00 |
|
Alfredo Cardigliano
|
2434ae9e76
|
Cleanup deprecated code
|
2023-05-18 18:36:25 +02:00 |
|
Nicolo Maio
|
5bf92eec23
|
Add backend endpoint to handle checks. (#7446)
|
2023-05-15 16:12:17 +00:00 |
|
Luca Deri
|
96e10b12a5
|
Added stub for RareDestination check/alert implementation #6416 and #6417
|
2023-03-22 15:11:53 +01:00 |
|
Matteo Biscosi
|
fc82eff56b
|
Updated alert to NDPI_NUMERIC_IP_HOST
|
2023-03-02 15:18:40 +00:00 |
|
Nicolò Maio
|
cf8a89a7e1
|
Add lowerbound and upperbound choice and percentage threshold on host rules. (#6855) (#7238)
* Add lowerbound and percentage threshold on host rules. (#6855)
* Add interface rules. (#6855)
* Added ability to blacklist hosts via Lua API
* Not supposed to be committed
* Method signature change to be called it also from a lua host script
* Fix empty string heck
* Add param check
* Add example listing alerts
* Fix params check
* Fix alert raw queris
* Removed debug code
* MacOS changes
* Updated (C)
* Warning fixes
* Removed sprintf calls
* Added rx_only_hosts classification
* https://github.com/ntop/ntopng/issues/7233; extend datatable component to allow external vue components in table menu bar
* Update dist: https://github.com/ntop/ntopng/issues/7233; extend datatable component to allow external vue components in table menu bar
* Remove obsoleted comment
* Minor GUI fix. (#6855)
* Fix on alert format. (#6855)
* Minor fix. (#6855)
* Update doc. (#6855)
---------
Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
Co-authored-by: Luca Deri <deri@ntop.org>
Co-authored-by: Alfredo Cardigliano <cardigliano@ntop.org>
Co-authored-by: uccidibuti <vannucci@ntop.org>
|
2023-02-21 14:37:09 +01:00 |
|
Nicolò Maio
|
6d2ee3d599
|
Add network issue alert (#6691) (#7228)
* Add network issues alert. (#6691)
* Fix alert subtype. (#6691)
* Update default values. (#6691)
* Minor fix. (#6691)
|
2023-02-14 05:40:06 -05:00 |
|
MatteoBiscosi
|
ddb55b4d7e
|
Updated ndpi alerts (#7200)
|
2023-02-09 18:46:37 +01:00 |
|
Nicolò Maio
|
7162045cdd
|
Add VLAN bidirectional traffic alert (#7126) (#7194)
* Add VLAN bidirectional traffic alert (#7126)
* Add alert description. (#7126)
|
2023-02-03 10:33:25 +01:00 |
|
Alfredo Cardigliano
|
73af3fa521
|
Add support for external (REST) host alerts (#7170)
|
2023-01-26 15:34:54 +01:00 |
|
Luca Deri
|
8acaf30b2e
|
Enhancement to support NDPI_TCP_ISSUES flow risk
|
2023-01-24 23:11:25 +01:00 |
|
Luca Deri
|
ccd8890e54
|
Fixed bug that reported wrong DNS information
|
2023-01-23 19:18:17 +01:00 |
|
Luca Deri
|
f718854bce
|
Improved report of periodic flows
Updated nDPI flow risks list
|
2022-12-31 18:08:21 +01:00 |
|
Luca Deri
|
21101c43f1
|
Added detection of periodic flows and exported it as flow risk in both flows and alerts
|
2022-12-30 19:48:26 +01:00 |
|
Luca Deri
|
c42fdd60c9
|
Added traffic volume alert
|
2022-12-19 23:17:44 +01:00 |
|
MatteoBiscosi
|
cde463a324
|
Added RST scan alert (#5903)
|
2022-11-30 17:01:49 +01:00 |
|
MatteoBiscosi
|
63aacc9ec9
|
Fixes incorrect flow alert key
|
2022-11-28 12:09:51 +01:00 |
|
Luca Deri
|
71fbbdbf58
|
Implemented custom host script (WIP)
|
2022-11-24 12:34:14 +01:00 |
|
MatteoBiscosi
|
2e27e21cc8
|
Added SNMP flood check (#5905)
|
2022-11-23 12:14:42 +01:00 |
|
MatteoBiscosi
|
71bb0efbc2
|
Added DNS flood alert (#5905)
|
2022-11-22 11:13:02 +01:00 |
|
Luca Deri
|
80db634bfe
|
Implemented skeleton of CustomFlowLuaScriptAlert check
|
2022-11-19 20:31:24 +01:00 |
|
MatteoBiscosi
|
7bfc2fdde4
|
Fixes Flow risks not defined (#6939)
|
2022-10-21 13:37:08 +02:00 |
|
Luca
|
0aa60f5001
|
Added support for HTTP Obsolete HTTP server flow risk
|
2022-10-04 22:34:21 +02:00 |
|
Luca Deri
|
7992446d9e
|
Implements Local Hosts BlackList Check #6858
|
2022-09-09 22:51:12 +02:00 |
|
MatteoBiscosi
|
d6471d8dac
|
Added device connection/disconnection alert (#6801)
|
2022-08-05 10:46:18 +02:00 |
|
MatteoBiscosi
|
3db8cc6cc8
|
Added check when SNMP traffic changes (#6144)
|
2022-07-20 12:42:41 +02:00 |
|
MatteoBiscosi
|
7f49e1cb04
|
Added SNMP interface error alert (#6747)
|
2022-07-15 17:11:14 +02:00 |
|
MatteoBiscosi
|
755c90e0c2
|
Changed from UDP unidirection to unidirectiont traffic
|
2022-06-21 15:11:54 +02:00 |
|
MatteoBiscosi
|
4f8c5c6cec
|
Moved UDP unidirection to nDPI alerts
|
2022-06-21 11:37:46 +02:00 |
|
Luca Deri
|
5de07dc827
|
Added support for nDPI unidirectional traffic risk
|
2022-06-20 00:46:51 +02:00 |
|
Luca Deri
|
9d364c69b4
|
Fixed TCP with no answer alert definition
|
2022-06-07 13:11:35 +02:00 |
|