Commit graph

65 commits

Author SHA1 Message Date
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
MatteoBiscosi
39aaaf58da Moved the TCP packets issues alert to default disabled 2022-11-28 12:16:12 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
MatteoBiscosi
372c54294e Disabled check by default 2022-11-21 16:04:17 +01:00
Luca Deri
80db634bfe Implemented skeleton of CustomFlowLuaScriptAlert check 2022-11-19 20:31:24 +01:00
MatteoBiscosi
b6692f3fea Added TCP Packets issues check (#6899) 2022-11-16 11:28:16 +01:00
MatteoBiscosi
db32c0c67a Moved tcp issues generci alert 2022-11-11 12:41:42 +01:00
MatteoBiscosi
4ee36c721f Removed still not implemented check (#6977) 2022-11-11 12:26:34 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
MatteoBiscosi
eda4cfb088 Added severity to ntopng checks table 2022-10-20 10:34:37 +02:00
MatteoBiscosi
692ae0bfcc Added critical and emergency status to alerts 2022-10-19 10:18:51 +02:00
MatteoBiscosi
4728baed14 Fixes inconsistent naming in ntopng (#6716) 2022-10-17 12:52:47 +02:00
MatteoBiscosi
533af346ff Re-enabled ip/mac reassignment alert (#6825) 2022-08-24 11:49:20 +02:00
MatteoBiscosi
1775233197 Updated device connection alert (#6801) 2022-08-08 11:37:33 +02:00
MatteoBiscosi
d6471d8dac Added device connection/disconnection alert (#6801) 2022-08-05 10:46:18 +02:00
MatteoBiscosi
687d508daa Fixes IEC alerts triggered even when disabled (#6682) 2022-07-19 11:14:25 +02:00
MatteoBiscosi
3681ca34dc Added ndpi http suspicious content alert mapping 2022-07-15 11:40:20 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Alfredo Cardigliano
69f639c16b Fix FQDN validation in unexpected dns check (fix #4869) 2022-06-17 13:13:54 +02:00
MatteoBiscosi
f341dff696 Removed duplicated require 2022-06-13 19:25:43 +02:00
MatteoBiscosi
a20d2dba58 Changed interface thpt alert 2022-06-10 11:45:31 +02:00
MatteoBiscosi
3509b3b74b Added dns fragmented alert 2022-05-31 18:34:22 +02:00
MatteoBiscosi
167cf6484a Updated ndpi flow risk alerts 2022-05-31 17:15:21 +02:00
MatteoBiscosi
91c9b5d04d Moved host mac reassociation alert 2022-05-31 11:31:42 +02:00
MatteoBiscosi
e9147aa37d Implemented connection failed alert (#6622) 2022-05-27 10:45:25 +02:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
Luca Deri
b0158f89c2 Reworked MAC/IP Reassociation alert used to detect spoofind and MITM (Man In The Middle) Attacks 2022-05-15 19:17:18 +02:00
Luca Deri
7c038e29da Implemented IEC104 Invalid Command Transition check/alert 2022-05-11 23:16:45 +02:00
MatteoBiscosi
524378cccd Changed alert drops description (#6575) 2022-05-09 11:47:01 +02:00
MatteoBiscosi
2bcf7c8dfa Added Suspicious Entropy alert (#6563) 2022-05-04 22:11:44 +02:00
Luca Deri
c430f9d6e6 Updated scan detection code (work in progress) 2022-02-21 10:39:29 +01:00
Luca Deri
269e9da142 (C) Update 2022-02-20 23:17:50 +01:00
Luca Deri
1fe96bc73b Initial work for implementing host/port scan detection (#6327) (#6328) 2022-02-20 23:17:04 +01:00
MatteoBiscosi
57a85de50e Cleaned up the code from plugin_utils 2022-02-11 12:07:23 +01:00
Matteo Biscosi
7439f589d7 Fixed alert no activity on interface not correctly working (#6291) 2022-02-08 14:35:26 +01:00
Matteo Biscosi
d304f02b91 Moved collector checks logic 2022-02-07 12:51:50 +01:00
Matteo Biscosi
b3594647a1 Fixes unexpected new device unused code (#6273) 2022-02-03 18:16:01 +01:00
Matteo Biscosi
a7c6016162 Moved too many drops plugin 2022-02-03 17:28:55 +01:00
Matteo Biscosi
59754483c9 Removed plugin from ntopng and migrated all of them 2022-02-03 17:23:03 +01:00
Matteo Biscosi
d990f2bb77 Example rework of plugin interface/slow_purge.lua 2022-02-03 17:23:02 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
MatteoBiscosi
4528e5a660 Added Broadcast non-UDP traffic alert and minor fixes to apexcharts 2021-12-17 13:33:11 +01:00
Simone Mainardi
ac0969eddc Additional fixes for PktThresholdAlert 2021-11-18 18:30:25 +01:00
Marco Tranchida
98aa892aab
Implementazione nuovo check, progetto GR (#6074)
* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Update en.lua

* Update en.lua

* Update ntop_typedefs.h

* Update HostChecksStatus.h

* Update PktThreshold.cpp
2021-11-18 17:15:07 +01:00
MatteoBiscosi
3f4a1a0e49 Changed ICMP flood per minute description (#5904) 2021-10-07 11:48:29 +02:00
MatteoBiscosi
fda446fb7c Added ICMP flood alert (#5904) 2021-10-07 11:42:22 +02:00
MatteoBiscosi
4b197ca2cc Changed alert name (#5805) 2021-10-01 15:52:51 +02:00
Simone Mainardi
ba64aad551 Introduces the IPS/IDS cat. to further classify checks
Addresses #5899
2021-09-20 11:55:47 +02:00