vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 23:49:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
18274 commits 26 branches 19 tags 446 MiB
Commit graph

74 commits

Author SHA1 Message Date
Luca Deri
21101c43f1 Added detection of periodic flows and exported it as flow risk in both flows and alerts 2022-12-30 19:48:26 +01:00
Luca Deri
c42fdd60c9 Added traffic volume alert 2022-12-19 23:17:44 +01:00
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
MatteoBiscosi
63aacc9ec9 Fixes incorrect flow alert key 2022-11-28 12:09:51 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
MatteoBiscosi
2e27e21cc8 Added SNMP flood check (#5905) 2022-11-23 12:14:42 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
Luca Deri
80db634bfe Implemented skeleton of CustomFlowLuaScriptAlert check 2022-11-19 20:31:24 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
Luca
0aa60f5001 Added support for HTTP Obsolete HTTP server flow risk 2022-10-04 22:34:21 +02:00
Luca Deri
7992446d9e Implements Local Hosts BlackList Check #6858 2022-09-09 22:51:12 +02:00
MatteoBiscosi
d6471d8dac Added device connection/disconnection alert (#6801) 2022-08-05 10:46:18 +02:00
MatteoBiscosi
3db8cc6cc8 Added check when SNMP traffic changes (#6144) 2022-07-20 12:42:41 +02:00
MatteoBiscosi
7f49e1cb04 Added SNMP interface error alert (#6747) 2022-07-15 17:11:14 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Luca Deri
5de07dc827 Added support for nDPI unidirectional traffic risk 2022-06-20 00:46:51 +02:00
Luca Deri
9d364c69b4 Fixed TCP with no answer alert definition 2022-06-07 13:11:35 +02:00
MatteoBiscosi
68671222bd Added DHCP starvation alert (#6659) 2022-06-06 17:39:12 +02:00
MatteoBiscosi
e9147aa37d Implemented connection failed alert (#6622) 2022-05-27 10:45:25 +02:00
MatteoBiscosi
65284b6929 Fixes Score Network alert (#6366) 2022-05-17 11:26:00 +02:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
Luca Deri
7c038e29da Implemented IEC104 Invalid Command Transition check/alert 2022-05-11 23:16:45 +02:00
MatteoBiscosi
2bcf7c8dfa Added Suspicious Entropy alert (#6563) 2022-05-04 22:11:44 +02:00
Luca Deri
3081d8d63b Added alert for SNMP MAC detection/disappear 2022-04-09 14:41:07 +02:00
Alfredo Cardigliano
673a7cf971 Add alert gateway_unreachable 2022-04-07 19:33:52 +02:00
Luca Deri
269e9da142 (C) Update 2022-02-20 23:17:50 +01:00
Luca Deri
c724f0fbb2 Implemented spider/bot detection risk 
Fixes for double flag visualization
 2022-02-17 21:06:44 +01:00
MatteoBiscosi
57a85de50e Cleaned up the code from plugin_utils 2022-02-11 12:07:23 +01:00
Luca
66450d4811 Added support for NDPI_ERROR_CODE_DETECTED security risk 2022-02-03 14:56:51 +01:00
Luca
d1a31b5b1f Added IDN risk handling 2022-02-03 11:57:14 +01:00
Luca Deri
0eec59aa2e Added support for NDPI_TLS_CERTIFICATE_ABOUT_TO_EXPIRE flow risk 2022-01-26 09:54:34 +01:00
Matteo Biscosi
795125c814 Added alert to network discovery (#6218) 2022-01-19 16:17:30 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
Luca Deri
3dcad5296b Added support for nDPI possible exploit detection used to detect Log4J/Log4Shell exploits 2021-12-23 21:47:37 +01:00
Simone Mainardi
e89fe31dc1 Comments 2021-12-22 17:48:03 +01:00
MatteoBiscosi
4528e5a660 Added Broadcast non-UDP traffic alert and minor fixes to apexcharts 2021-12-17 13:33:11 +01:00
Simone Mainardi
ac0969eddc Additional fixes for PktThresholdAlert 2021-11-18 18:30:25 +01:00
Simone Mainardi
a014ce46a6 Fixes cleanup of old alerts when stored in Clickhouse 
Addresses #6066
 2021-11-10 16:50:44 +01:00
Simone Mainardi
a406391502 Implement stateful SNMP alert to detect too many MACs on non-trunk 
Addresses #5893
 2021-10-20 12:21:59 +02:00
MatteoBiscosi
7c10fba84b Implements ICMP flood check (#5904) 2021-10-07 11:40:51 +02:00
MatteoBiscosi
4b197ca2cc Changed alert name (#5805) 2021-10-01 15:52:51 +02:00
Simone Mainardi
63a5df06f6 Implement IPS activities logging (e.g., block, unblock) 
Addresses #5900
 2021-09-20 16:59:35 +02:00
Luca Deri
4cddc6c280 Added DNS fragment and packet too long alerts 2021-09-17 16:31:02 +02:00
Simone Mainardi
aecc1e3e65 Adds HTTP susp. content risk as example 
Addresses #5743
 2021-09-15 16:13:14 +02:00
Simone Mainardi
fef7723445 Implements dynamic loading of flow risk alerts in Lua 
Addresses #5743
 2021-09-15 13:57:43 +02:00
Simone Mainardi
4b55e02899 Reworks check for Obsolete SSH that was not handling cli and srv 
Addresses #5861
 2021-09-10 11:58:46 +02:00
MatteoBiscosi
c15b62407c Separated Score Threshold and Anomaly alert (#5845) 2021-09-07 11:38:48 +02:00
Francesco Amodeo
de27966413
Implemented countries host check (#5713) 
* Added check and alert implementation

* Fixed size of estimation and some typo

* Added HLL counters and DES structure
Co-authored-by: Paolo Junior Mollica <p.mollica@studenti.unipi.it>

* fixes according comments of PR

* decreased memory footprint

* resolved conflicts

* fixed HostCheckID

* Removed wrongly committed file

Co-authored-by: paolo-junior-mollica <paolo.junior.mollica@gmail.com>
Co-authored-by: Matteo Biscosi <49585191+MatteoBiscosi@users.noreply.github.com>
 2021-08-25 15:50:07 +02:00
Gaetano Barresi
f650a3700a
Domain Names host check (#5723) 
* Adding/modifying .cpp for Domain Names host check

* Adding/modifying .h/.lua for Domain Names host check

* minor synstax fix

* dns_contacts

Co-authored-by: Stefano Russo <55586218+D0kken@users.noreply.github.com>
Co-authored-by: Stefano Russo <s.russo41@studenti.unipi.it>
 2021-08-25 11:22:41 +02:00