Commit graph

614 commits

Author SHA1 Message Date
Simone Mainardi
6ae7664de0 Fixes missing interface and host score timeseries
Fixes #5300
2021-05-12 17:17:57 +02:00
Alfredo Cardigliano
66e1d63349 Set the host alerts link to the engaged alerts if any, historical otherwise (fix #5301) 2021-05-10 09:50:52 +02:00
Simone Mainardi
7dea0f7f35 Implements alert badges on top of the alerts page 2021-05-07 11:16:05 +02:00
Alfredo Cardigliano
bca2040742 Add link to the past alerts fom the host 2021-04-27 14:54:38 +02:00
Simone Mainardi
281dd3a8b4 Fixes host alert link in presence of VLANs 2021-04-27 14:25:57 +02:00
Simone Mainardi
2278926da4 Merge branch 'alerts-store' into dev 2021-04-26 19:59:30 +02:00
Simone Mainardi
c7082a4647 Implements new alerts database and drilldown
alert store skeleton

Alert database type changes

Implement alert store for host alerts. All alert store skeletons.

Fix class method access

Enable tracing

Implements simple queries for host alerts

Implement flow alert store

Fixes escaping of INSERT queries

Flow alerts database schema fixes

Adds escaping for alert JSON in flows and hosts

Implements queries .select() for alerts store

Adds limit and offset to perform paginated queries

Adds new REST getter for flow alerts

Name changes alert_severity to severity, alert_json to json

Fixes alert message not shown

Implement active monitoring alerts store

Implements sort of queries in the new dataabase

Changes alert_type to alert_id

Implement mac alerts store

Fixes flow alert messages

Implement system alerts store

Implement snmp alert store

Add missing items to the flow alerts

Add missing items to the host alerts

Add missing items to the mac alerts

Implements COUNT aplerts api

Add device_name to snmp alerts

add flow alerts templates

updated gitignore

fix for missing order field

add families defined in `alert_store_schema.sql`

Reworks and simplifies alert store subclasses

Implements REST API to fetch alert timeseries

Fixes date in flow REST api

Host alert json fix

Add get/host/alert/list.lua

Move alert/list.lua to alert/past/list.lua

Add alert/past/list.lua for all alert families

Add entity_id to system table to identify the alert type based on <alert_id, entity_id>

Add missing field

Implements facilities to query engaged alerts via REST

Handle both historical and past alerts in alert/list.lua

Fix count

Update params of select_historical

Implement method to add family-specific filters

Add alert/ts.lua for all alert families

Implements facilities and REST endpoints to delete alerts

Implements ordering of alert queries

Fix add_order_by group_by

Rest API tests update

Tests output update

Remove debug trace

Use alert_id instead of type. Add more flow alert info.

Update http lint

Format obsolete tlv version alerts. Add more host info.

Add row_id to list of alerts

Fix selection of engaged alerts

Add test for mac alerts (bcast domains)

Removes attempt to format alerts as flow alerts

Fixes interface selection for active monitoring

Update test output with rest changes

Add more fields to be ignores

Set alert count to 1 for the time being

add bar timeseries chart

add apexcharts

improvements on timeseries bar chart

registered chart callbakcs

working on alert page

fix for date format

Fixes acrive monitoring REST API

Fixes alignment of grouped alert data

Additional fix for alert histogram

remove useless if

formatting alerts page

fixes on flows alert stats table

rename local networks to device

format host pagie in alert_stats

add tag support for hosts and flow

implemented single delete action

add release modal

Fixes format of threshold cross interface alerts

Fixes wrong increase of dropped alerts

Implements exclusion list for invalid dns queries

Reworks exclusions lists for hosts and flows

Addresses #5212
Addresses #5113

Adds host alert keys in host callbacks definitions

Adds alert ids to flow callbacks

fix for not working button (#5215)

Fixes reported timeseries name

removed any additional button inside chart's toolbar (#5200)

Add tables for interfaces, networks, users to the schema. Skeleton alert_store classes

fixed broken range picker layout in firefox (#5199)

Alert insert fixes

Add more info to network alerts

Add rest endpoint for interface, network, user alerts

Fix endpoint selection in alerts_stats

Unifies columns between engaged and past alerts

Fixes Missing mandatory 'alert_granularity'

Minor fixes for missing alert_severity

Fixes arithmetic on a nil value (field 'last_seen')

Fixes get/system/alert/list.lua

use tstamp for column names (#5221)

Implements host alert formatter

Add alerts_store format_record_common

Use common format_record for am, system alerts

Use common format_record for all alerts

Fixes formatting of alerts of all types

Fixes nil in function 'hostinfo2label'

fixes on disable modal

add pages for network, user and interface endpoint (#5224)

Set alert_entity in all classes

Unifies influxdb alerts into system alerts

Addresses #5224

Unifies process alerts into system alerts

Addresses #5224

Cleanup unused periodicActivityEntity

Unifies category lists alerts into system alerts

Addresses #5224

Aligns new alert enums

Addresses #5224

Fixes alert page links

Fixes insertion of interface alerts

Implement filters for Host alerts

Fixes active monitoring alerts not triggering

Implement filters on flow alerts

Fixes for internal alerts timestamp and subtype

implements disable for the alerts

formatted alert disable label

Add address and device type to mac alert records

fix for delete alert toggle

Fix access to entity_val in alert_unexpected_new_device

add mac address and device type inside table

Fixes for new alert fields not handled

Fixes alert_definitions to handle new fields

Add ip/port to snmp alert records

Implements deletion of stored flow alerts

Add alert_name to all alert records via rest. Fix duration.

fixes for snmp tab

Implements delete of past host alerts

Add name to snmp alert records

fixes on system tab

Fix Date column

fixes link

Update menu

Fixes bad argument #3 to 'format' in snmp alerts

updated interface link

new alerts url for host (#5228)

Fixes sort of engaged alert

Minor cleanup

Fixes data returned for local network alerts

Fix duration for one shot. Note.

Fix duration override

Fixes interface selection for system alerts

Move host alert page

fixes for local network tab

Minor fix

Fix engaged host alerts

fixes on user tab

Fix alert_user_activity message
2021-04-26 19:41:34 +02:00
Matteo Biscosi
3cb65f4b49 Added reset button for blacklisted flow stats 2021-04-19 18:46:02 +02:00
Luca Deri
76afff76d1 Created timeseries for blacklisted hosts 2021-04-18 15:28:31 +02:00
Luca Deri
adc00cbdc3 Added counter for tracking flows with balcklisted hosts 2021-04-18 11:44:38 +02:00
Simone Mainardi
6a1600b2eb Adds datatable for HASSH fingerprints 2021-03-24 12:35:20 +01:00
Simone Mainardi
ac0ff6fb89 Reworks get fingerprint data 2021-03-24 11:42:08 +01:00
Simone Mainardi
0eeb32bf8a Fixes invalid TLS host pagepage
Fixes #5121
2021-03-24 11:33:01 +01:00
Simone Mainardi
f61ffc045b Merge branch 'c-user-scripts' into dev 2021-03-22 10:36:13 +01:00
Simone Mainardi
aea9138bfb Implements flow callbacks and alerts in C++ 2021-03-22 09:51:36 +01:00
Luca Deri
8f37e1d77d Added anomaly counter 2021-03-18 19:08:17 +01:00
Matteo Biscosi
f3aa90f131 Implements rrd host anomalies 2021-03-15 15:42:11 +01:00
Luca Deri
d0a0c554fc Improved behavioural charts 2021-03-14 16:34:47 +01:00
Luca
880867dd9a Changed behavioral graphs to area+lines 2021-03-13 20:05:03 +01:00
Matteo Biscosi
26af27d6a9 Implements active flow and host score behaviour 2021-03-13 00:31:01 +01:00
Luca Deri
e44ab83111 Added score label 2021-03-08 18:35:53 +01:00
Luca Deri
b47a801447 JA3 TLS fingerprints are not based on AJAX 2021-03-02 18:44:40 +01:00
Matteo Biscosi
debf0c412b Shortened mac address column in hosts list 2021-03-02 11:06:04 +01:00
Luca Deri
6bfe31d5bd Fixed HTML issue 2021-02-25 15:44:00 +01:00
Matteo Biscosi
dbfdec34fe Implements Local Host behaviour analysis and it's alert
Alert in case the host has an unexpected behaviour
2021-02-25 12:04:05 +01:00
Simone Mainardi
981f7a0572 Removes experimental code for timeseries delta 2021-02-23 19:09:07 +01:00
gabryon99
cb7a2d5935 fixed link to service/periodicity map under host with vlan id 2021-02-15 16:39:13 +01:00
Matteo Biscosi
f34286d941 Fixed host_pool_id nil value into alias page 2021-02-15 10:59:29 +01:00
Luca Deri
0b4e2757c1 Added host contact counters for core servers 2021-01-28 23:42:03 +01:00
gabryon99
e9062d7a73 add ntop.getStaticFileEpoch() to all js files (#4965) 2021-01-27 09:30:18 +01:00
Matteo Biscosi
ec6d7b5c6d Removed location column from hosts list 2021-01-11 18:59:59 +01:00
Matteo Biscosi
eb140e33a4 Fixed service/periodicity map showing when shouldn't 2021-01-11 12:11:37 +01:00
Matteo Biscosi
023b7fd1df Reviewed Top Sites per host and Added Top Sites per Interface 2021-01-08 20:07:19 +01:00
Matteo Biscosi
dc6c952b23 Added Top Sites table per local host 2021-01-07 18:08:23 +01:00
gabryon99
cc611b25b3 gui for sites subpage in host details 2021-01-07 16:09:57 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
gabryon99
e35100f25c removed table responsive wrapper (#4798) 2020-12-28 18:41:21 +01:00
gabryon99
038c2edf7a replaced table-responsive with table-sm-responsive in host_details 2020-12-28 09:57:12 +01:00
gabryon99
35ef4da8d4 fixed pie charts and added spinner for the geomap (#4641) 2020-12-24 16:18:15 +01:00
gabryon99
1bc13eb0b5 removed count from periodicity map entry 2020-12-23 18:26:28 +01:00
gabryon99
00e12add95 removed service map and periodicity map from community 2020-12-23 18:26:28 +01:00
gabryon99
ea2991605a improved alert style for geo map 2020-12-22 17:28:56 +01:00
gabryon99
5fa6e69038 improvement on service_map page
The graph page has been set as the first page wehn a user navigates to
the service map page. When a user double clicks a node then the map will
be filtered with only the edges linked to the node. The flush data and
download buttons have been restored.
2020-12-17 11:37:51 +01:00
gabryon99
9d8fded73c improved page layouts and added stats_utils for pie charts (#4653) 2020-11-26 16:56:46 +01:00
Matteo Biscosi
507583db64
Added host category to flow and host alerts (#4767)
* Fixed shell endpoint bug and added notice when executing the script

* Added victim and attacker to security plugins

* Updated hosts alert with host_category info

* Added host category to hosts alert description

* Added host category to flows

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-20 19:14:07 +01:00
Luca Deri
2884cc9794 Reworked Doh/DoT handling 2020-11-11 18:55:12 +01:00
gabryon99
1c73df18db add table-responsive class (#4692) 2020-11-09 17:05:36 +01:00
Luca Deri
9d232d614c Various cosmetic fixes in host and flow pages
Service map is not reported when there are no services listed
2020-11-01 13:54:24 +01:00
gabryon99
bf258ab15a rework for ui nofitications (#4630, #4615) 2020-10-26 19:13:50 +01:00
Simone Mainardi
e0efcec2ce Removes an unnecessary button from host details cog page 2020-10-26 12:22:29 +01:00