Commit graph

339 commits

Author SHA1 Message Date
MatteoBiscosi
3509b3b74b Added dns fragmented alert 2022-05-31 18:34:22 +02:00
MatteoBiscosi
167cf6484a Updated ndpi flow risk alerts 2022-05-31 17:15:21 +02:00
MatteoBiscosi
e2ad021161 Fixes external link (#6626) 2022-05-27 16:23:26 +02:00
MatteoBiscosi
e9147aa37d Implemented connection failed alert (#6622) 2022-05-27 10:45:25 +02:00
MatteoBiscosi
6921aa9dce Fixes external link url proto not correctly used (#6626) 2022-05-25 12:52:56 +02:00
MatteoBiscosi
65284b6929 Fixes Score Network alert (#6366) 2022-05-17 11:26:00 +02:00
MatteoBiscosi
c1e6f01d53 Fixes suspicious DGA domain nil value 2022-05-17 11:26:00 +02:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
Luca Deri
cdbb0e5380 Implements #6598 2022-05-15 16:57:48 +02:00
Luca Deri
7c038e29da Implemented IEC104 Invalid Command Transition check/alert 2022-05-11 23:16:45 +02:00
MatteoBiscosi
e81f97d02d Fixes https dga domain url (#6583) 2022-05-11 16:50:08 +02:00
MatteoBiscosi
37820b4940 Added dga domain URL check (#6583) 2022-05-10 17:16:10 +02:00
MatteoBiscosi
2bcf7c8dfa Added Suspicious Entropy alert (#6563) 2022-05-04 22:11:44 +02:00
Luca
160279e5eb Fix for blacklisted flow 2022-04-29 11:49:53 +02:00
MatteoBiscosi
79528b58bc Fixed actrive monitoring table broken (#6548) 2022-04-26 16:39:56 +02:00
Luca Deri
8f75df9797 Blacklist name is now shown in blacklisted flows alerts 2022-04-26 14:56:15 +02:00
Luca Deri
3081d8d63b Added alert for SNMP MAC detection/disappear 2022-04-09 14:41:07 +02:00
Luca Deri
5128af7329 Fixed SNMP apert information 2022-04-09 12:04:44 +02:00
MatteoBiscosi
5e1725a256 Fixes SNMP alerts minor problems 2022-04-08 17:16:20 +02:00
Alfredo Cardigliano
673a7cf971 Add alert gateway_unreachable 2022-04-07 19:33:52 +02:00
MatteoBiscosi
ff43144aea Fixes incorrect suspicious DGA domain alert msg 2022-03-23 16:19:27 +01:00
MatteoBiscosi
25f78c075a Added Active Monitoring and SNMP categories (#6334) 2022-02-21 12:59:45 +01:00
Luca Deri
1fe96bc73b Initial work for implementing host/port scan detection (#6327) (#6328) 2022-02-20 23:17:04 +01:00
Matteo Biscosi
7439f589d7 Fixed alert no activity on interface not correctly working (#6291) 2022-02-08 14:35:26 +01:00
Matteo Biscosi
59754483c9 Removed plugin from ntopng and migrated all of them 2022-02-03 17:23:03 +01:00
Matteo Biscosi
4200342555 Fixes description duration not formatted (#6249) 2022-01-27 13:07:47 +01:00
Matteo Biscosi
795125c814 Added alert to network discovery (#6218) 2022-01-19 16:17:30 +01:00
Alfredo Cardigliano
17d756c622 Fix require 2022-01-18 15:04:34 +01:00
MatteoBiscosi
147e77636b Added victim and client/server to threshold alert (#5997) 2022-01-07 16:28:05 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
Luca Deri
9fcdb68fdf Removed duplicated line 2021-12-29 19:04:29 +01:00
MatteoBiscosi
185d5e3f38 Fixes unknown process notification alert (#6147) 2021-12-20 11:12:55 +01:00
MatteoBiscosi
4528e5a660 Added Broadcast non-UDP traffic alert and minor fixes to apexcharts 2021-12-17 13:33:11 +01:00
Alfredo Cardigliano
81206a9b70 Cleanup datatable js 2021-11-24 15:11:03 +01:00
Marco Tranchida
98aa892aab
Implementazione nuovo check, progetto GR (#6074)
* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Update en.lua

* Update en.lua

* Update ntop_typedefs.h

* Update HostChecksStatus.h

* Update PktThreshold.cpp
2021-11-18 17:15:07 +01:00
MatteoBiscosi
a8ab396570 Added references to useful infos regarding score anomaly (#5996) 2021-11-02 16:27:07 +01:00
Simone Mainardi
a406391502 Implement stateful SNMP alert to detect too many MACs on non-trunk
Addresses #5893
2021-10-20 12:21:59 +02:00
Simone Mainardi
a63c1dc957 Adds interface throughput check 2021-10-15 14:46:59 +02:00
MatteoBiscosi
fda446fb7c Added ICMP flood alert (#5904) 2021-10-07 11:42:22 +02:00
Simone Mainardi
886537299c Adds traces for (string expected, got light userdata) exceptions 2021-10-07 10:48:09 +02:00
Simone Mainardi
48be233fea Fixes alert_periodicity_changed failing to load graph_map_utils 2021-10-07 10:46:18 +02:00
Simone Mainardi
0987014edb Fixes alert_lateral_movement exceptions on certain versions 2021-10-07 10:43:11 +02:00
Simone Mainardi
08b011acd8 Fixes possible attempts to call nil values in alert defs.
Fixes #5951
2021-10-04 12:24:07 +02:00
Simone Mainardi
cd36f86a2f Simplifies Lua risks (avoids an extra table to be in sync) 2021-10-01 16:32:14 +02:00
MatteoBiscosi
4b197ca2cc Changed alert name (#5805) 2021-10-01 15:52:51 +02:00
Simone Mainardi
9aa1df0296 Removes unused local variables 2021-10-01 11:27:42 +02:00
Simone Mainardi
6da5283ae2 Removes package.path changes possibly causing nil indexing 2021-10-01 11:24:10 +02:00
MatteoBiscosi
1ab8bbe2cd Fixes attempt to index a nil value (global 'dirs') 2021-10-01 11:02:13 +02:00
Simone Mainardi
4509027c1c Fixes attempt to index a nil value (global 'dirs') 2021-10-01 10:27:38 +02:00
Simone Mainardi
63a5df06f6 Implement IPS activities logging (e.g., block, unblock)
Addresses #5900
2021-09-20 16:59:35 +02:00