Simone Mainardi
25785fca62
Groups together flow alerts for the same flow in a counter variable
...
This is to mitigate the number of alerts and implements #2515
2019-04-19 16:14:06 +02:00
emanuele-f
dfc9de74a0
Host pools gui fixes and improvements
...
- Fix selectable "Not Assigned" pool in manage pools
- Hide "Unassigned Devices" tab for interfaces without macs
- Add note in "Unassigned Devices" to explain the list shown
Fixes #2486
2019-04-19 12:43:53 +02:00
emanuele-f
ebc5251a7f
Use fully qualified name for retention policy based queries
2019-04-17 15:31:56 +02:00
Francesco Staccini
1d9b35be42
ARP Map ( #2540 )
...
* arp matrix graph and fix
* bug fix
* graph fix
* bug fix
* tests on arp graph
* merged heatmap.js and map.js
* graph dinamic resize
* minor fix
* graph dinamic width
* graph performance improvement
* clean code
* fix manual refresh
* message for empty graph
* clean code
* more clean
* update arpMap and host details
* migrate to v4.min version of d3.js
2019-04-17 13:23:10 +02:00
emanuele-f
d5d551853c
Do not account the Unknown protocol in the Unspecified category
...
Such protocol should not modified by the used see (78a20a166 ).
Fix #2536
2019-04-16 17:17:31 +02:00
emanuele-f
53cbcc79c2
Fix timeseries menu selection with inactive entries
...
Fix #2537
2019-04-16 16:57:20 +02:00
Simone Mainardi
ce5d7d8400
Adds Portuguese/Brazilian localization file
...
Work Courtesy of Alexandre Giovaneli
2019-04-16 10:11:28 +02:00
emanuele-f
eddcc59d4c
Fix possible script failure when protos.txt is not readable
2019-04-12 17:32:46 +02:00
Simone Mainardi
ddd3015db1
Implements alerts mitigation for stored alerts
2019-04-12 16:20:55 +02:00
emanuele-f
0968bb15bd
Fix rename error
2019-04-12 10:43:52 +02:00
emanuele-f
fa4330bbfd
Implement alert for IP addresses assigned outside the configured DHCP ranges
2019-04-11 17:01:39 +02:00
emanuele-f
14a9d83a30
Move local broadcast domain preference to the interface settings and show warnings
...
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
emanuele-f
2aeeb63142
Implmenent host total flows timeseries.
...
"host:flows" data will be dropped in favor of "host:active_flows", which has separated client and server counters
Closes #2528
2019-04-10 18:22:41 +02:00
emanuele-f
21f202ccb2
Implement protos.txt editing via the gui.
...
Editor is only enabled if the -p option is specified.
Also added an hook in the flow to easily add domain.
Closes #1837
2019-04-10 16:16:39 +02:00
Salvatore Costantino
1768d0b121
Modified ARP time series ( #2520 )
2019-04-09 15:28:29 +02:00
emanuele-f
acdd80767e
Remove getGraphMenuEntries function
2019-04-08 18:36:30 +02:00
Simone Mainardi
db44a554c9
RTP in flow details fixes
2019-04-08 18:28:45 +02:00
Salvatore Costantino
76dded229a
Added ICMP ECHO time series ( #2518 )
...
* Added ICMP ECHO time series
* added icmp echo time series
2019-04-08 16:10:30 +02:00
Salvatore Costantino
f27f137c09
Added TCP packets time series ( #2516 )
2019-04-08 15:30:45 +02:00
Salvatore Costantino
dd24d2a932
Removed net unreachable counters ( #2517 )
2019-04-05 21:32:37 +02:00
Simone Mainardi
d7342798ca
Improves SSL certificates mismatch alerts
...
Implements #2510
2019-04-05 18:21:54 +02:00
Simone Mainardi
b4f849a51d
Domain in blacklisted alerts
2019-04-05 18:02:23 +02:00
emanuele-f
387543f8e9
Fix top talkers when mac address is used as LBD hosts ID
2019-04-05 17:49:22 +02:00
Alfredo Cardigliano
a892c825c0
toggle_ids_alerts liny
2019-04-05 15:55:53 +02:00
Simone Mainardi
a85b7cd398
Improves description of blacklisted flow alerts
...
Implements #2511
2019-04-05 15:40:33 +02:00
emanuele-f
bcf1d9c123
Add ad lists
2019-04-05 12:41:04 +02:00
emanuele-f
68eee30d03
Add support for disabled menu entries
2019-04-05 10:29:08 +02:00
emanuele-f
316ad4a9bd
Add temporary fix for host:contacts schema change
2019-04-04 16:52:43 +02:00
emanuele-f
2c2abae146
Improve error message in InfluxDB multiqueries
2019-04-04 16:52:43 +02:00
Alfredo Cardigliano
3f442f28b0
Rendering signature/severity for ids alerts
2019-04-04 16:31:13 +02:00
Alfredo Cardigliano
7ce1150a69
IDS flow alerts notification
2019-04-04 16:03:48 +02:00
Alfredo Cardigliano
96954bdabb
new ids alert type and configuration
2019-04-04 11:02:01 +02:00
Salvatore Costantino
3bb830d23e
Fix active contacts time series ( #2506 )
...
* Fix active contacts time series
* Fix active contacts time series
2019-04-04 09:33:09 +02:00
Simone Mainardi
f827d8c700
Changes to DNS timeseries to show queries and replies together
2019-04-03 19:15:28 +02:00
SalvatoreCostantino
27fcedf9ff
Added TCP time series
2019-04-02 16:22:39 +02:00
Salvatore Costantino
a121b6a4f8
Added ARP requests time series ( #2496 )
2019-04-01 16:11:37 +02:00
Salvatore Costantino
5ec5a8e9c8
Added UDP packets time series ( #2488 )
2019-04-01 16:10:35 +02:00
Simone Mainardi
5e5ad77cec
Implements broadcast domain too large alerts
2019-04-01 14:20:57 +02:00
Simone Mainardi
23c5d92b10
Proper validation of base64-encoded license keys
2019-03-29 20:02:54 +01:00
Salvatore Costantino
c8a95d9476
Added dns time series ( #2487 )
2019-03-28 19:14:51 +01:00
emanuele-f
ad77797482
Fix flow status formatting when no flowstatus_info is available
2019-03-28 11:59:14 +01:00
Salvatore Costantino
58becaeebe
Added host and net unreachable counters ( #2483 )
...
* Added host and net unreachable counters
* Added host and net unreachable counters
* Added host and net unreachable counters
2019-03-27 21:44:47 +01:00
emanuele-f
4b2a95ecb4
Add redis flag to debug RRD operations
2019-03-27 15:28:25 +01:00
emanuele-f
4203d8a1c6
Enable influxdb data rollup to speedup queries
...
Also bind influxdb retention of CQ to the default retention
2019-03-27 12:42:54 +01:00
emanuele-f
dee4685141
Implement batched listSeries to reduce the number of HTTP requests
2019-03-27 10:49:51 +01:00
Alfredo Cardigliano
34509abce7
Safety check in case of no filter
2019-03-27 10:28:41 +01:00
Alfredo Cardigliano
ca2e11bc0b
Anomalous -> Misbehaving Flows ( fixes #2386 )
2019-03-26 19:36:40 +01:00
Simone Mainardi
41383aa51b
Revert "Added new time series ( #2481 )"
...
This reverts commit 0e785d58f9 .
2019-03-26 09:16:15 +01:00
Salvatore Costantino
0e785d58f9
Added new time series ( #2481 )
2019-03-25 21:29:36 +01:00
Simone Mainardi
3fcb15cda2
Handles TCP flags via nProbe
2019-03-25 20:31:13 +01:00