Commit graph

651 commits

Author SHA1 Message Date
emanuele-f
2c53dda60b Fix slack alerts notifications 2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea Optimizes oldest alerts cleanup 2017-05-03 12:41:36 +02:00
Simone Mainardi
4eeae18cef Adds alert notes and descriptions 2017-05-02 22:13:43 +02:00
Simone Mainardi
d85302d80f Fixes host activity alert 2017-05-02 17:19:06 +02:00
emanuele-f
a5e528047d Use a single redis key to read all host anomalies configuration 2017-05-02 15:38:39 +02:00
emanuele-f
9aa7b31552 Add SafeSearch and Global DNS in traffic bridge preferences. 2017-05-02 12:47:33 +02:00
Luca Deri
24f0808c23 Merge pull request #1197 from emanuele-f/password_change
Force default admin password change
2017-05-02 12:14:48 +02:00
Luca Deri
1c532234ce Reworked childSafe display 2017-05-01 23:15:57 +02:00
emanuele-f
dc86847467 Remove frequent pool re-initialization 2017-05-01 00:50:55 +02:00
emanuele-f
21594b834d Separate syn/flow attacker and victim alert thresholds 2017-04-30 20:07:58 +02:00
Emanuele Faranda
8b8974e56c Alerts improvements (#1204)
* Implement flow flood alert

* Remove alerts general settings

* Implement global threshold alerts for hosts, networks and interfaces

* Implement global anomaly alert configuration, lua side

* Make the global thresholds not bound to the interface

* Implement global anomaly alert configuration, C side

* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
Emanuele Faranda
a9bcb8b5de Merge pull request #1203 from danielmeyer/ldap-search-validation
LDAP search_path parameter allows spaces
2017-04-29 12:05:32 +02:00
emanuele-f
a53ec8b131 Force the release of expired alerts 2017-04-28 16:30:23 +02:00
Daniel Meyer
0ac9dff8cd Validation mode for search_path parameter updated to support paths containing spaces. 2017-04-28 09:08:48 -04:00
emanuele-f
f516d7edb8 Fix flow alert explorer validation error 2017-04-28 12:30:30 +02:00
emanuele-f
bf803803da Hide children safe for non-inline interfaces 2017-04-28 11:08:41 +02:00
emanuele-f
011b7f5cdf Force default admin password change 2017-04-27 21:15:58 +02:00
emanuele-f
f344f55116 Add children safe host pool option 2017-04-27 16:24:28 +02:00
emanuele-f
01816f3e7d Add category name in flashstart graphs 2017-04-27 15:24:14 +02:00
emanuele-f
cc3191bc4f Remove flapping-checking code in alert counter 2017-04-27 11:13:40 +02:00
emanuele-f
8b72607c38 Migrate interface alerts to lua logic 2017-04-27 11:07:04 +02:00
emanuele-f
426032426b Expose the traffic profile validation function 2017-04-26 23:05:31 +02:00
Emanuele Faranda
7d8d26efdc Merge pull request #1182 from emanuele-f/alerts_with_cache
Alerts with cache
2017-04-26 20:32:46 +02:00
valentina
4dfa9cb2f3 Changed calls from sudowrapper to run script (nbox integration) 2017-04-26 19:09:39 +02:00
emanuele-f
d6469510ee Add startup alert engine and use it for MYSQL open files limit check 2017-04-26 18:12:40 +02:00
emanuele-f
63402a848d Invalidate cache on alerts delete 2017-04-26 18:04:11 +02:00
emanuele-f
22d9d3ad2c Fix single alert delete 2017-04-26 17:10:05 +02:00
emanuele-f
5e663675f2 Fix flows shown in interface alert configuration 2017-04-26 16:16:12 +02:00
Simone Mainardi
57b592c905 Fixes invalid use of alert engine 2017-04-26 16:09:55 +02:00
emanuele-f
1545dcb73e Host Flows alert becomes a threshold alert 2017-04-26 15:50:54 +02:00
emanuele-f
4afe4328eb Enable SYN flood/victim alert generation 2017-04-26 11:23:23 +02:00
emanuele-f
bae63434c1 Implement engaged alerts cache 2017-04-24 17:24:31 +02:00
emanuele-f
52cdd7382a Fix wrong ajax field used in time quota 2017-04-24 15:30:01 +02:00
emanuele-f
b83a93c6a5 Add preference to enable VLAN rrd dump and display VLAN rrd graphs 2017-04-24 13:00:24 +02:00
Simone Mainardi
7b13e2e6a1 Adds an engine id to the engaged alerts 2017-04-24 12:22:47 +02:00
emanuele-f
eb167e8dee Fix localization key collision causing blank historical explorer page 2017-04-23 17:21:23 +02:00
Simone Mainardi
c8c4505d9c Adds VLANs lua getters 2017-04-23 14:20:04 +02:00
emanuele-f
43b3a7f078 Fix AlertCounter based host alerts 2017-04-22 19:48:09 +02:00
emanuele-f
04e01c24b0 Re-enable alerts generation. Use structured format functions. 2017-04-22 18:58:32 +02:00
emanuele-f
bfd2759eeb Move global status to local status 2017-04-22 17:09:23 +02:00
emanuele-f
a4a7f0d12f Restructure code to use the upcoming alerts cache 2017-04-22 15:20:43 +02:00
emanuele-f
5892319880 Update in-memory hosts alert configuration when the configuration changes
Also fixes invalid redis key used to check host alerts trigger
2017-04-20 19:09:52 +02:00
Simone Mainardi
9fb24219e4 Passes host detected anomalies to lua 2017-04-20 18:50:05 +02:00
emanuele-f
0a1a6c0a2b Remove alert rearming logic 2017-04-20 12:08:13 +02:00
Simone Mainardi
a43636bdb0 Fixes AS stats in the GUI 2017-04-20 11:56:33 +02:00
emanuele-f
a51a57283d flows_stats localization 2017-04-20 00:18:32 +02:00
Simone Mainardi
5014669d12 Implements Autonomous Systems hash table 2017-04-19 23:19:16 +02:00
emanuele-f
d31b5da32a Complete historical explorer localization 2017-04-19 18:09:41 +02:00
Luca
33f81e1f68 Small code rework in callback utils 2017-04-19 08:59:08 +02:00
emanuele-f
a10d6c4f7d Fix login issue with special characters.
The special characters were URL encoded during HTTP request and saved in URL encoded form.
The login used the unencoded password instead, and this resulted in a password hash mismatch which prevented user login.

Now the password hash is calculated on the unencoded password.
2017-04-14 18:20:36 +02:00