Commit graph

225 commits

Author SHA1 Message Date
Simone Mainardi
17bfc850b1 Fixes XSS in dissected HTTP URLs, TLS certs, and DNS names
Fixes possible XSS due to forged HTTP urls such as

curl -u admin:admin1 "http://devel:3000/</a><script>alert(1);</script><a>"

Similar attacks could have been performed with TLS certs and DNS names
2020-06-03 19:03:55 +02:00
Simone Mainardi
49e49e0ed6 Unifies host_details.lua generation
Addresses #3977
2020-05-26 12:50:47 +02:00
Simone Mainardi
058f2a32be Uses nDPI-calculated risks for TLS alerts 2020-05-15 11:54:18 +02:00
Simone Mainardi
79c48e2039 Adds localization for flow risks 2020-05-13 20:01:06 +02:00
Simone Mainardi
1e03a59af8 Fixes flow risks in flow_details page 2020-05-13 12:34:47 +02:00
Luca Deri
d29492a89e Added support for flow risk reported by nDPI 2020-05-12 00:34:46 +02:00
Luca Deri
698265c4fb Added TLS issuerDN, subjectDN 2020-05-07 19:06:13 +02:00
Luca Deri
0a644150d9 Added check for preventing lua errors when showing TLS flow pages 2020-05-07 15:11:27 +02:00
Alfredo Cardigliano
823af75000 Propagate and print in flow details AS src/dst/prev/next from collected flows 2020-04-30 10:09:26 +00:00
Simone Mainardi
0a9a7015e0 Unifies status_id and status_key 2020-04-15 14:29:03 +02:00
Simone Mainardi
e487427aab Refactors alert_utils and enterprise_alert_utils
Addresses #3720

Alerts Refactor: alert_utils as module

Alerts Refactor: notify_ntopng_start and notify_ntopng_stop

Alerts Refactor: processAlertNotifications

Alerts Refactor: checkStoreAlertsFromC

Alerts Refactor: formatAlertNotification

Alerts Refactor: notification_timestamp_rev

Alerts Refactor: formatAlertMessage

Alerts Refactor: getConfigsetAlertLink

Alerts Refactor: alertNotificationActionToLabel

Alerts Refactor: flushAlertsData

Alerts Refactor: disableAlertsGeneration

Alerts Refactor: newAlertsWorkingStatus and other

Alerts Refactor: drawAlerts

Alerts Refactor: drawAlertTables

Alerts Refactor: printAlertTables

Alerts Refactor: checkDeleteStoredAlerts

Alerts Refactor: getUnpagedAlertOptions

Alerts Refactor: getTabParameters

Alerts Refactor: getAlerts

Alerts Refactor: getNumAlerts

Alerts Refactor: performAlertsQuery

Alerts Refactor: sec2granularity

Alerts Refactor: granularity2id

Alerts Refactor: granularity2sec

Alerts Refactor: alertEngineLabel

Alerts Refactor: alertEngine

Alerts Refactor: alertEngineRaw

Alerts Refactor: alertTypeDescription

Alerts Refactor: alertType

Alerts Refactor: alertTypeLabel

Alerts Refactor: alertTypeRaw

Alerts Refactor: alertSeverity

Alerts Refactor: alertSeverityLabel

Alerts Refactor: alertSeverityRaw

Alerts Refactor: get_make_room_keys

Alerts Refactor: enterprise_alert_utils
2020-04-10 14:03:20 +02:00
gabryon99
ce0e3d2d11 fix for system view 2020-03-24 12:39:08 +01:00
gabryon99
7479582210 fix system view and add rtt host from host_details 2020-03-23 17:38:22 +01:00
emanuele-f
b0520ee189 Improve localization support
- nDPI categories are now localized (see getCategoryLabel)
- Add some missing localization in plugins/user scripts pages
2020-03-03 18:26:14 +01:00
Luca Deri
14202b7c9b Layout fix 2020-02-17 16:42:17 +01:00
Luca Deri
5f9a63f0fb Updated TLS versions 2020-02-17 16:39:35 +01:00
Luca Deri
8786c9fb30 Added support for ALPN and Client Supported TLS Protocols reported by nDPI 2020-02-17 16:29:24 +01:00
Simone Mainardi
dffd0a7a60 Fixes TCP and IP flow details tables 2020-02-11 12:15:01 +01:00
emanuele-f
7105cb8a65 Add score and user script config link into the flow details additional status 2020-02-07 20:02:19 +01:00
emanuele-f
5882926b0b Host score increment fix for PCAP dump interfaces 2020-02-07 11:32:22 +01:00
Simone Mainardi
33df10f20c Fixes flow peers names visualization 2020-02-03 18:00:55 +01:00
emanuele-f
4f6788fb58 New page_utils api to handle sidebar subitems selection 2020-01-30 11:53:13 +01:00
emanuele-f
6fa5f071e8 Add user script edit config icon into the flow details 2020-01-27 10:47:31 +01:00
Luca Deri
6cd4097118 Added fix to avoid long DNS names 2020-01-26 19:19:03 +01:00
Simone Mainardi
9185e940ec Fixes TLS certificates visualization in flow_details.lua
Fixes #3262
Fixes #3263
2020-01-21 11:34:48 +01:00
emanuele-f
6edecb12cb Score visualization improvements 2020-01-15 15:27:45 +01:00
Simone Mainardi
5a378a9bd2 Adds ICMP unreachable information also for inactive flows
Fixes #3206
2020-01-10 11:57:17 +01:00
Luca Deri
170bc60f19 Updated (C) 2020-01-08 23:52:51 +01:00
Luca
2d63ae8024 Certificate validity fix 2020-01-07 16:57:12 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Luca
92ea3cf5a0 TLS certificate improvements 2020-01-02 09:36:31 +01:00
Simone Mainardi
29095ac4af Fixes bytes expressed with decimals 2019-12-20 12:25:19 +01:00
Simone Mainardi
dacaa7e3db Migrates font-awesome 5 fa to fas 2019-12-18 11:50:02 +01:00
Simone Mainardi
0eb75bf884 Uses new localization for icmp types and codes 2019-12-18 10:49:38 +01:00
Simone Mainardi
8f52113bbb Minor cleanup 2019-12-13 11:42:00 +01:00
Simone Mainardi
37f54a5090 Fixes font-awesome 5 external link
Fixes #3125
2019-12-13 10:18:20 +01:00
Simone Mainardi
7402bbdd14 FontAwesome 5 migration 2019-12-09 15:11:37 +01:00
Simone Mainardi
e2eef6e778 Bootstrap migration nEdge if_stats page 2019-12-05 12:39:48 +01:00
Simone Mainardi
f79bd4869b Bootstrap migration flow details navbar 2019-12-05 09:27:48 +01:00
Simone Mainardi
6d36e7cb76 Bootstrap migration btn-default to btn-secondary 2019-12-05 09:27:47 +01:00
Simone Mainardi
2639d49e4a Bootstrap migration progress bars 2019-12-05 09:27:47 +01:00
Simone Mainardi
14db3bb11f Bootstrap migration labels to badges 2019-12-05 09:27:46 +01:00
Alfredo Cardigliano
e38835a603 Rename SSL to TLS (fix #3013) 2019-11-15 12:40:01 +01:00
Alfredo Cardigliano
d10dfc7762 Deferred flow alerts insertion through a redis queue. Removed alerts DB select when printing flow details. 2019-10-31 12:53:23 +01:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
63ce367f8b Fixes flow process trees 2019-10-16 19:30:31 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
emanuele-f
7a14a9cf11 Improvements in status definition API 2019-10-16 10:33:19 +02:00
emanuele-f
b217909966 Split flow status definitions in multiple files 2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
b390fddcf2 Flow details rowspan fix 2019-10-15 16:55:26 +02:00