Commit graph

104 commits

Author SHA1 Message Date
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
Luca Deri
9bdff1b170 Improved custom flow script alert 2022-11-23 17:04:01 +01:00
Luca Deri
a687b9280a Implemented custom script check 2022-11-23 11:11:45 +01:00
MatteoBiscosi
ef01259354 Fixes flow checks not found 2022-11-21 10:59:55 +01:00
MatteoBiscosi
4bc150e7c9 Removed debug tprint 2022-11-16 11:33:11 +01:00
MatteoBiscosi
b6692f3fea Added TCP Packets issues check (#6899) 2022-11-16 11:28:16 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
MatteoBiscosi
4728baed14 Fixes inconsistent naming in ntopng (#6716) 2022-10-17 12:52:47 +02:00
Alfredo Cardigliano
93dd74d906 Fix telegram notifications (fix #6915) 2022-10-03 12:29:23 +02:00
MatteoBiscosi
3681ca34dc Added ndpi http suspicious content alert mapping 2022-07-15 11:40:20 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Alfredo Cardigliano
df2829d409 Improve iec_invalid_transition format function (#6682) 2022-06-10 16:17:08 +02:00
MatteoBiscosi
b7a61835ba Fixes dns large packets alert incorrectly triggered (#6674) 2022-06-10 10:34:03 +02:00
MatteoBiscosi
ba20719d4a Fixes suspicious dga domain url not formatted 2022-06-09 18:19:03 +02:00
MatteoBiscosi
9622209308 Minor fixes to alerts 2022-06-09 18:12:04 +02:00
MatteoBiscosi
8214173ecd Various changes to alerts (#6675) 2022-06-09 12:26:25 +02:00
MatteoBiscosi
4d037e911b Possible fix for #6670 2022-06-08 17:59:10 +02:00
Luca Deri
9d364c69b4 Fixed TCP with no answer alert definition 2022-06-07 13:11:35 +02:00
MatteoBiscosi
3509b3b74b Added dns fragmented alert 2022-05-31 18:34:22 +02:00
MatteoBiscosi
167cf6484a Updated ndpi flow risk alerts 2022-05-31 17:15:21 +02:00
MatteoBiscosi
e2ad021161 Fixes external link (#6626) 2022-05-27 16:23:26 +02:00
MatteoBiscosi
e9147aa37d Implemented connection failed alert (#6622) 2022-05-27 10:45:25 +02:00
MatteoBiscosi
6921aa9dce Fixes external link url proto not correctly used (#6626) 2022-05-25 12:52:56 +02:00
MatteoBiscosi
c1e6f01d53 Fixes suspicious DGA domain nil value 2022-05-17 11:26:00 +02:00
Luca Deri
cdbb0e5380 Implements #6598 2022-05-15 16:57:48 +02:00
Luca Deri
7c038e29da Implemented IEC104 Invalid Command Transition check/alert 2022-05-11 23:16:45 +02:00
MatteoBiscosi
e81f97d02d Fixes https dga domain url (#6583) 2022-05-11 16:50:08 +02:00
MatteoBiscosi
37820b4940 Added dga domain URL check (#6583) 2022-05-10 17:16:10 +02:00
MatteoBiscosi
2bcf7c8dfa Added Suspicious Entropy alert (#6563) 2022-05-04 22:11:44 +02:00
Luca
160279e5eb Fix for blacklisted flow 2022-04-29 11:49:53 +02:00
MatteoBiscosi
79528b58bc Fixed actrive monitoring table broken (#6548) 2022-04-26 16:39:56 +02:00
Luca Deri
8f75df9797 Blacklist name is now shown in blacklisted flows alerts 2022-04-26 14:56:15 +02:00
MatteoBiscosi
ff43144aea Fixes incorrect suspicious DGA domain alert msg 2022-03-23 16:19:27 +01:00
Matteo Biscosi
4200342555 Fixes description duration not formatted (#6249) 2022-01-27 13:07:47 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
MatteoBiscosi
4528e5a660 Added Broadcast non-UDP traffic alert and minor fixes to apexcharts 2021-12-17 13:33:11 +01:00
Simone Mainardi
886537299c Adds traces for (string expected, got light userdata) exceptions 2021-10-07 10:48:09 +02:00
Simone Mainardi
48be233fea Fixes alert_periodicity_changed failing to load graph_map_utils 2021-10-07 10:46:18 +02:00
Simone Mainardi
0987014edb Fixes alert_lateral_movement exceptions on certain versions 2021-10-07 10:43:11 +02:00
Simone Mainardi
cd36f86a2f Simplifies Lua risks (avoids an extra table to be in sync) 2021-10-01 16:32:14 +02:00
MatteoBiscosi
4b197ca2cc Changed alert name (#5805) 2021-10-01 15:52:51 +02:00
Simone Mainardi
6da5283ae2 Removes package.path changes possibly causing nil indexing 2021-10-01 11:24:10 +02:00
MatteoBiscosi
1ab8bbe2cd Fixes attempt to index a nil value (global 'dirs') 2021-10-01 11:02:13 +02:00
Simone Mainardi
4509027c1c Fixes attempt to index a nil value (global 'dirs') 2021-10-01 10:27:38 +02:00
Simone Mainardi
b01f8e50b8 Fixes TLS version for obsolete TLS alerts via ZMQ
Addresses #5860
2021-09-13 10:21:33 +02:00
Simone Mainardi
5f70c1eff7 Implements support for obsolete client SSH version
Addresses #5861
2021-09-10 12:32:42 +02:00
Simone Mainardi
4b55e02899 Reworks check for Obsolete SSH that was not handling cli and srv
Addresses #5861
2021-09-10 11:58:46 +02:00
MatteoBiscosi
b82cbe76c9 Reduced length of suspicious dga domain (#5804) 2021-08-26 12:15:19 +02:00
MatteoBiscosi
70e32fd566 Changed redirect icon loc. and added redirect to SuspiciousDgaDomain alert (#5806) 2021-08-26 10:51:12 +02:00