Commit graph

322 commits

Author SHA1 Message Date
Luca
86f39b3c81 Fixed frequency report 2022-12-21 12:44:55 +01:00
Luca Deri
6ee4c25f81 Improve traffic volume alert 2022-12-20 19:34:15 +01:00
Luca Deri
c42fdd60c9 Added traffic volume alert 2022-12-19 23:17:44 +01:00
MatteoBiscosi
91e4d16f06 Reworked host ports details page 2022-12-01 16:56:11 +01:00
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
Luca Deri
9bdff1b170 Improved custom flow script alert 2022-11-23 17:04:01 +01:00
MatteoBiscosi
2e27e21cc8 Added SNMP flood check (#5905) 2022-11-23 12:14:42 +01:00
Luca Deri
a687b9280a Implemented custom script check 2022-11-23 11:11:45 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
MatteoBiscosi
ef01259354 Fixes flow checks not found 2022-11-21 10:59:55 +01:00
MatteoBiscosi
4bc150e7c9 Removed debug tprint 2022-11-16 11:33:11 +01:00
MatteoBiscosi
b6692f3fea Added TCP Packets issues check (#6899) 2022-11-16 11:28:16 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
MatteoBiscosi
4728baed14 Fixes inconsistent naming in ntopng (#6716) 2022-10-17 12:52:47 +02:00
Alfredo Cardigliano
93dd74d906 Fix telegram notifications (fix #6915) 2022-10-03 12:29:23 +02:00
Luca Deri
7992446d9e Implements Local Hosts BlackList Check #6858 2022-09-09 22:51:12 +02:00
MatteoBiscosi
c330724455 Last fixes to connection/disconnection alert (#6801) 2022-08-08 17:40:33 +02:00
MatteoBiscosi
1775233197 Updated device connection alert (#6801) 2022-08-08 11:37:33 +02:00
MatteoBiscosi
d6471d8dac Added device connection/disconnection alert (#6801) 2022-08-05 10:46:18 +02:00
MatteoBiscosi
3db8cc6cc8 Added check when SNMP traffic changes (#6144) 2022-07-20 12:42:41 +02:00
MatteoBiscosi
7f49e1cb04 Added SNMP interface error alert (#6747) 2022-07-15 17:11:14 +02:00
MatteoBiscosi
3681ca34dc Added ndpi http suspicious content alert mapping 2022-07-15 11:40:20 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Alfredo Cardigliano
df2829d409 Improve iec_invalid_transition format function (#6682) 2022-06-10 16:17:08 +02:00
MatteoBiscosi
b7a61835ba Fixes dns large packets alert incorrectly triggered (#6674) 2022-06-10 10:34:03 +02:00
MatteoBiscosi
ba20719d4a Fixes suspicious dga domain url not formatted 2022-06-09 18:19:03 +02:00
MatteoBiscosi
9622209308 Minor fixes to alerts 2022-06-09 18:12:04 +02:00
MatteoBiscosi
8214173ecd Various changes to alerts (#6675) 2022-06-09 12:26:25 +02:00
MatteoBiscosi
4d037e911b Possible fix for #6670 2022-06-08 17:59:10 +02:00
Luca Deri
9d364c69b4 Fixed TCP with no answer alert definition 2022-06-07 13:11:35 +02:00
MatteoBiscosi
68671222bd Added DHCP starvation alert (#6659) 2022-06-06 17:39:12 +02:00
MatteoBiscosi
3509b3b74b Added dns fragmented alert 2022-05-31 18:34:22 +02:00
MatteoBiscosi
167cf6484a Updated ndpi flow risk alerts 2022-05-31 17:15:21 +02:00
MatteoBiscosi
e2ad021161 Fixes external link (#6626) 2022-05-27 16:23:26 +02:00
MatteoBiscosi
e9147aa37d Implemented connection failed alert (#6622) 2022-05-27 10:45:25 +02:00
MatteoBiscosi
6921aa9dce Fixes external link url proto not correctly used (#6626) 2022-05-25 12:52:56 +02:00
MatteoBiscosi
65284b6929 Fixes Score Network alert (#6366) 2022-05-17 11:26:00 +02:00
MatteoBiscosi
c1e6f01d53 Fixes suspicious DGA domain nil value 2022-05-17 11:26:00 +02:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
Luca Deri
cdbb0e5380 Implements #6598 2022-05-15 16:57:48 +02:00
Luca Deri
7c038e29da Implemented IEC104 Invalid Command Transition check/alert 2022-05-11 23:16:45 +02:00
MatteoBiscosi
e81f97d02d Fixes https dga domain url (#6583) 2022-05-11 16:50:08 +02:00
MatteoBiscosi
37820b4940 Added dga domain URL check (#6583) 2022-05-10 17:16:10 +02:00
MatteoBiscosi
2bcf7c8dfa Added Suspicious Entropy alert (#6563) 2022-05-04 22:11:44 +02:00
Luca
160279e5eb Fix for blacklisted flow 2022-04-29 11:49:53 +02:00
MatteoBiscosi
79528b58bc Fixed actrive monitoring table broken (#6548) 2022-04-26 16:39:56 +02:00
Luca Deri
8f75df9797 Blacklist name is now shown in blacklisted flows alerts 2022-04-26 14:56:15 +02:00
Luca Deri
3081d8d63b Added alert for SNMP MAC detection/disappear 2022-04-09 14:41:07 +02:00