Commit graph

124 commits

Author SHA1 Message Date
Luca Deri
6551cd51da Added check for ignoring private IPs in blacklists 2024-04-04 12:38:39 +02:00
Alfredo Cardigliano
13814d66e7 Check if unable to open list 2024-03-06 09:46:04 +01:00
Matteo Biscosi
06d38b586c Removed no more used code 2024-02-20 17:32:21 +00:00
Matteo Biscosi
fbed062686 Included lua_trace to requires 2024-02-15 16:31:47 +00:00
Matteo Biscosi
dbf4bf2a2b Removed useless imports in lua code upping the memory usage 2024-02-15 15:21:40 +00:00
Luca Deri
9c9d06785b Reworked blacklists reload 2024-02-13 00:16:14 +01:00
Luca Deri
7d6b49fbfb Added lists_utils.reloadListsNow() 2024-02-11 22:16:45 +01:00
Luca Deri
5202f25383 Indent 2024-02-08 17:13:09 +01:00
Matteo Biscosi
80b5b9fb3c Added category renaming cleanup at startup 2024-01-31 10:15:13 +00:00
Luca Deri
bb7e60920b Added check when a category list file is missing from filesystem 2024-01-13 11:35:30 +01:00
Luca Deri
85f29042ec Reworked behavioural exception handling 2024-01-12 17:13:06 +01:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
Nicolo Maio
aa6d712b2a Add IPsum with the new blacklist format for IP occurrences. (#8154) 2024-01-10 12:26:59 +01:00
Luca Deri
3fc883df5b Fixes blacklist count for #8078 2023-12-07 17:37:56 +01:00
Luca Deri
8d44b7fa87 Reduced memory and trhead usage
Added missing HTTP server thread naming
Added --limit-resources to tell ntopng to reduce memory usage (useful for systems with limited resources)
2023-11-30 18:23:28 +01:00
Matteo Biscosi
966969c536 Fixes incorrect check on blacklists 2023-11-20 11:38:56 +00:00
Luca Deri
4f2664e9a8 Fix for the new Stratosphere IPS format 2023-11-02 14:30:24 +01:00
Alfredo Cardigliano
8f05378caf Change message level for empty lists to avoid breaking tests 2023-10-27 09:58:38 +02:00
Matteo Biscosi
8a8420e99e Fixes ntop.isshutdown function not exists 2023-10-26 13:54:29 +00:00
Matteo Biscosi
8ee13833ca Fixes blacklists num_hits missing 2023-10-03 09:08:28 +00:00
Luca
43132f5889 Implemented blacklist stats 2023-10-03 08:50:42 +02:00
Luca Deri
2416b7b904 Changed key path to avoid polluting the configuration with stats 2023-04-27 17:45:25 +02:00
Nicolò Maio
1a5ead7dbe
Update category check. (#7240) (#7253)
* Update category check. (#7240)

* Fix btn active colour. (#7246)
2023-02-22 18:41:10 +01:00
Luca
c2b81fdaa3 Increased MAX_TOTAL_DOMAIN_RULES to 200000
Implements #7241
2023-02-22 16:14:51 +01:00
Luca Deri
6bd3b75fc4 Added fix for handling invalid host formats in lists (those with :) 2022-12-16 22:02:59 +01:00
Alfredo Cardigliano
5aedbf96d3 Log bad IPs in lists using a normal level instead of warning 2022-11-18 09:09:18 +01:00
Luca Deri
6f2096d1cc timeseries dump changes for introducing custom callback 2022-09-28 23:49:13 +02:00
MatteoBiscosi
bf8fba8cf0 Removed no more used require 2022-09-13 17:57:40 +02:00
Luca Deri
7992446d9e Implements Local Hosts BlackList Check #6858 2022-09-09 22:51:12 +02:00
Luca Deri
704d4c31fe Fixed typo 2022-08-16 18:00:22 +02:00
Luca Deri
ac90e492a0 Added Stratosphere Labs Blacklist support 2022-08-16 17:56:24 +02:00
Alfredo Cardigliano
db99adaebe Set a dummy list name __gui__ for categories configured via GUI 2022-07-18 18:08:34 +02:00
Alfredo Cardigliano
fb8e748679 Handle ndpi failures loading host lists. Print failing entries 2022-07-18 15:23:45 +02:00
Luca
5e8769b1b5 Reworked builtin lists
- they are now defined in httpdocs/misc/lists in JSON formt
- built-in lists (ntop maintained) are stored in httpdocs/misc/lists/nultin
- custom lists go into httpdocs/misc/lists/custom
2022-07-11 19:18:16 +02:00
MatteoBiscosi
ffa48647ef Added ThreatFox malware list (#6341) 2022-05-20 17:54:21 +02:00
MatteoBiscosi
b2094f32eb Fixes nil name given to loading category 2022-05-06 09:56:29 +02:00
MatteoBiscosi
71cb504bac Added check to empty category list 2022-05-04 22:11:45 +02:00
Luca Deri
4397fae2e3 Added nDPI custom category file for IP-based categories 2022-04-26 14:44:03 +02:00
Luca Deri
f8c06f82f5 Removed firehol level 1 as it puts in the blacklist private and bogon addresses 2022-03-06 18:43:05 +01:00
Luca Deri
14b68e2568 Updated the malware/domain lists with new entries from abuse.ch and firehol 2022-03-02 12:40:35 +01:00
Alfredo Cardigliano
c8f879ee0c Add offline check setting up lists 2022-02-18 15:53:28 +01:00
Luca Deri
47b04d557e Disabled JA3 checkas it leads to false positivies 2022-01-20 22:24:48 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
Luca Deri
b8206953a4 Feodo Tracker Botnet C2 IP Blocklist is not reloaded 4 times/day 2021-12-02 14:42:20 +01:00
Luca Deri
f98c2abba7 Disabling 'Snort IP Block List' download by default 2021-10-21 08:29:36 +02:00
Alfredo Cardigliano
bb297048c7 Add connectivity check at startup. If offline, check hourly. 2021-07-09 15:45:04 +02:00
Simone Mainardi
536423553f Fixes load of custom categories
Fixes #5578
2021-06-29 11:38:28 +02:00
Simone Mainardi
a160ccf2d6 Refactors callback to check #defines (c++) 2021-06-16 15:56:07 +02:00
Simone Mainardi
40f5c4e821 Refactors {flow,host}callbacks into {flow,host}checks (C++) 2021-06-16 15:27:38 +02:00
lucapruneti
fc7efc2a0c
issue_5404_download_alert_format-inconsistent (#5433)
* Change host alert function name to json

* Refactored *_alert_store function with format_json, added csv format tohost alert

* Added .vscode directory to gitignore

* Refactor alert_store:to_csv function to single loop format

* Removed no_data value for no records in alert csv download

* Implemented csv export for alerts

* Merge with dev

* Removed row_id alert field to be exported in csv

* Refactored alert/*/list.lua with simple decision value format construct

* Refactored alerts csv export

* Fix removed output test files

* Added alert csv export for subdocuments

* Modified gitignore
2021-06-04 08:49:31 +02:00