Commit graph

66 commits

Author SHA1 Message Date
Luca
86f39b3c81 Fixed frequency report 2022-12-21 12:44:55 +01:00
Luca Deri
6ee4c25f81 Improve traffic volume alert 2022-12-20 19:34:15 +01:00
Luca Deri
c42fdd60c9 Added traffic volume alert 2022-12-19 23:17:44 +01:00
MatteoBiscosi
91e4d16f06 Reworked host ports details page 2022-12-01 16:56:11 +01:00
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
MatteoBiscosi
2e27e21cc8 Added SNMP flood check (#5905) 2022-11-23 12:14:42 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
Luca Deri
1fe96bc73b Initial work for implementing host/port scan detection (#6327) (#6328) 2022-02-20 23:17:04 +01:00
MatteoBiscosi
147e77636b Added victim and client/server to threshold alert (#5997) 2022-01-07 16:28:05 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
Alfredo Cardigliano
81206a9b70 Cleanup datatable js 2021-11-24 15:11:03 +01:00
Marco Tranchida
98aa892aab
Implementazione nuovo check, progetto GR (#6074)
* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Update en.lua

* Update en.lua

* Update ntop_typedefs.h

* Update HostChecksStatus.h

* Update PktThreshold.cpp
2021-11-18 17:15:07 +01:00
MatteoBiscosi
a8ab396570 Added references to useful infos regarding score anomaly (#5996) 2021-11-02 16:27:07 +01:00
MatteoBiscosi
fda446fb7c Added ICMP flood alert (#5904) 2021-10-07 11:42:22 +02:00
Simone Mainardi
6da5283ae2 Removes package.path changes possibly causing nil indexing 2021-10-01 11:24:10 +02:00
MatteoBiscosi
a1e4e21c01 Removed threshold configuration from Score Anomaly check (#5845) 2021-09-07 11:45:16 +02:00
MatteoBiscosi
c15b62407c Separated Score Threshold and Anomaly alert (#5845) 2021-09-07 11:38:48 +02:00
MatteoBiscosi
37267ab935 Removed not used DES structure and Fixed non working alert (#5713) 2021-08-25 16:45:16 +02:00
Francesco Amodeo
de27966413
Implemented countries host check (#5713)
* Added check and alert implementation

* Fixed size of estimation and some typo

* Added HLL counters and DES structure
Co-authored-by: Paolo Junior Mollica <p.mollica@studenti.unipi.it>

* fixes according comments of PR

* decreased memory footprint

* resolved conflicts

* fixed HostCheckID

* Removed wrongly committed file

Co-authored-by: paolo-junior-mollica <paolo.junior.mollica@gmail.com>
Co-authored-by: Matteo Biscosi <49585191+MatteoBiscosi@users.noreply.github.com>
2021-08-25 15:50:07 +02:00
MatteoBiscosi
5df881478d Fixes domain names contacts alert not working 2021-08-25 12:34:38 +02:00
Gaetano Barresi
f650a3700a
Domain Names host check (#5723)
* Adding/modifying .cpp for Domain Names host check

* Adding/modifying .h/.lua for Domain Names host check

* minor synstax fix

* dns_contacts

Co-authored-by: Stefano Russo <55586218+D0kken@users.noreply.github.com>
Co-authored-by: Stefano Russo <s.russo41@studenti.unipi.it>
2021-08-25 11:22:41 +02:00
Simone Mainardi
805b99f03c Adds search by tcp flags in SYN scan alert 2021-08-02 18:43:08 +02:00
Simone Mainardi
92b5f90690 Updates alert flow links for anomaly-based alerts 2021-07-30 15:49:48 +02:00
Simone Mainardi
820e497253 Unifies epoch-related variables in Lua and JS 2021-07-30 15:38:06 +02:00
Simone Mainardi
f563447bd9 Host alert label fixes 2021-07-30 12:51:02 +02:00
Simone Mainardi
7ba9cf0dc5 Adds TCP flag filters in historical flows drilldown 2021-07-28 18:37:43 +02:00
Simone Mainardi
de576aa999 Implements historical floww search function for all host alerts
Addresses #5326
2021-07-28 18:16:32 +02:00
Simone Mainardi
b6913c946d Implements skeleton to drilldown historical flows from alerts
Addresses #5326
2021-07-28 17:19:44 +02:00
Simone Mainardi
5fe995ecfe Implements host check for NTP traffic 2021-07-27 12:19:52 +02:00
MatteoBiscosi
596ecf87ad Fixes threshold put to 0 for score anomaly (#5657) 2021-07-13 09:53:18 +02:00
MatteoBiscosi
7a04146a00 Added threshold to score anomaly (#5657) 2021-07-12 13:02:31 +02:00
MatteoBiscosi
6549d19a99 Fixes alert formatting broken (#5536) 2021-06-21 16:16:22 +02:00
MatteoBiscosi
7f9cf7a181 Removed debug print 2021-06-18 15:27:42 +02:00
MatteoBiscosi
89071f0a9a Fixes alert score/flow anomaly description (#5522) 2021-06-18 15:19:08 +02:00
Luca Deri
c76cce1c4f Renamed Host Ban to Dangerous Host 2021-06-09 22:54:17 +02:00
Matteo Biscosi
756966c62b Added nProbe license and maintenance infos to iface 2021-05-31 12:28:41 +02:00
Matteo Biscosi
4e5e72bc12 Removed debug print 2021-05-25 19:15:35 +02:00
Matteo Biscosi
211fc3eb9f Implements policy endpoint and fixed Dangerous Host alert 2021-05-24 16:39:30 +02:00
Matteo Biscosi
bcc717689f Partially Implements traffic blocking (#5387) 2021-05-21 18:40:49 +02:00
Matteo Biscosi
83ff018198 Added fixed len to score anomaly alert category percentage 2021-05-17 18:27:36 +02:00
Matteo Biscosi
bc80a86d73 Added score breakdown to score anomaly alert
Implements #5339
2021-05-17 18:24:01 +02:00
Matteo Biscosi
020b1fd539 Removed confusing icons from alerts/hosts/flows tables 2021-05-17 15:51:10 +02:00
Matteo Biscosi
fdf8fbadb8 Fixes Host/Flow anomaly description
Implements #5337
Implements #5333
2021-05-17 14:53:20 +02:00
Simone Mainardi
286d2cfdbc Fixes descriptions for host alerts 2021-05-05 16:40:31 +02:00
Alfredo Cardigliano
fd977d4924 Cleanup alert on score (lua) 2021-05-05 16:26:46 +02:00
gabryon99
e455fbbeca fixed icons size 2021-05-04 12:20:25 +02:00
Alfredo Cardigliano
8dd0f903a1 Move host log alerts to host alerts. Fix syslog alerts. 2021-05-03 17:37:18 +02:00
Simone Mainardi
2278926da4 Merge branch 'alerts-store' into dev 2021-04-26 19:59:30 +02:00