Commit graph

2341 commits

Author SHA1 Message Date
emanuele-f
378a1e2cd8 Optimize nDPI categories reload to avoid packet drops 2019-10-29 12:07:27 +01:00
Simone Mainardi
cce73c2f44 Implements lua interpreters telemetry 2019-10-28 23:47:03 +01:00
Simone Mainardi
dc748b1b6d Implements stats for periodic scripts duration 2019-10-28 17:10:03 +01:00
Alfredo Cardigliano
fa57c701bb Displaying file id to retrieve files stored by Suricata 2019-10-28 12:24:15 +01:00
emanuele-f
943012e8c3 Avoid un-necessary hourly reload of category lists when nothing changed 2019-10-28 12:22:57 +01:00
emanuele-f
930fdc9bd1 Fix flows script table 2019-10-25 18:41:37 +02:00
emanuele-f
e238605f86 Fix latest run label 2019-10-25 17:51:29 +02:00
Alfredo Cardigliano
c7120e23f3 Hide periodic user scripts in pcap dump mode (unless --original-speed is specified) 2019-10-25 16:45:23 +02:00
emanuele-f
8a2d3dafff Fix interface paused icon 2019-10-25 16:44:20 +02:00
Alfredo Cardigliano
96ef3c05e7 New alert when the number of idle entries in the hash tabel exceeds a configured threshold (implements #3005) 2019-10-25 14:29:37 +02:00
emanuele-f
1d5ff7c4e7 Remove global flow user scripts on/off 2019-10-25 13:12:47 +02:00
Alfredo Cardigliano
b42989154c Drawing active items in addition to idle in the internals chart 2019-10-25 12:14:53 +02:00
emanuele-f
0ea6856b44 Clean flow user scripts page 2019-10-25 11:30:06 +02:00
emanuele-f
58a12f1241 Add user scripts benchmark charts
Implements #2999
2019-10-24 20:24:13 +02:00
emanuele-f
8747af5f2b Reduce max queue length 2019-10-24 17:00:03 +02:00
emanuele-f
3882e2f26d Fix invalid failed exports key 2019-10-24 16:34:06 +02:00
emanuele-f
0d04eb2d5c Stop writing points if InfluxDB export is failing.
The dropped points are accounted and shown in the gui. Dropped points alert are generated as usual.

Fixes #2998
2019-10-24 16:09:01 +02:00
Alfredo Cardigliano
afbb34e262 TCP SYN Scan detection (implements #2963) 2019-10-24 15:35:26 +02:00
Simone Mainardi
955eed4b50 Reworks idling and purging of hash table entries to make it faster 2019-10-24 15:48:18 +02:00
emanuele-f
d1d789ea88 Improve category lists limits and reporting 2019-10-23 18:12:24 +02:00
emanuele-f
bb51396151 Fix bad categories lists limit check 2019-10-23 16:17:08 +02:00
emanuele-f
6fbc01b28e Remove redis hash access for user scripts disabled check 2019-10-23 14:41:10 +02:00
Simone Mainardi
60e657c0d2 Makes hash table state counters as gauges 2019-10-23 14:25:12 +02:00
Simone Mainardi
47f8525144 Adds chars and page for hash table states 2019-10-23 14:14:44 +02:00
Simone Mainardi
15e17a801a Implements per-state hash entry counters and writes them to ts 2019-10-23 13:09:02 +02:00
emanuele-f
10aa5542f8 Rework alertEntity functions to avoid modules circular dependencies
Fixes #2975
2019-10-23 13:01:57 +02:00
emanuele-f
19f820f1bc Add max rules limit for category lists
Fixes #2966
2019-10-23 11:53:21 +02:00
emanuele-f
4b29fa2af1 Only save the edited preferences in category lists
Fixes #2967
2019-10-23 11:37:04 +02:00
emanuele-f
0c96c49157 Avoid redis KEYS command for MUD 2019-10-23 11:24:33 +02:00
emanuele-f
76812f42af Add priority column in status overview 2019-10-22 19:52:05 +02:00
Simone Mainardi
fca66af5e5 Adds speed and num calls to script duration information 2019-10-22 19:05:57 +02:00
emanuele-f
bb4f073b1a Avoid triggering remote-to-remote alerts when disabled 2019-10-22 18:46:03 +02:00
emanuele-f
f136a19123 Fix flows script expert view 2019-10-22 17:52:53 +02:00
emanuele-f
f264311e73 Also show the disabled scripts in the overview page 2019-10-22 17:48:38 +02:00
emanuele-f
cbddac0562 Fix outside DHCP range alert 2019-10-22 17:16:45 +02:00
Alfredo Cardigliano
b816bfc2d6 Fix purge past alerts button 2019-10-22 16:56:06 +02:00
emanuele-f
ac8d6f1110 Fix host MUD user script 2019-10-22 15:35:19 +02:00
emanuele-f
ab0875155e Remove AlertType typedef from C 2019-10-22 14:43:21 +02:00
emanuele-f
db269e54a8 Implement user scripts overview page 2019-10-22 12:05:18 +02:00
emanuele-f
b3374651ce Merge branch 'alerts_cleanup' into dev 2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
1ec35c3042 Fixes and cleanup of disabled alerts 2019-10-22 10:33:42 +02:00
Simone Mainardi
5b3f34b72a Fixes flapping of engaged alerts 2019-10-21 17:41:50 +02:00
Alfredo Cardigliano
d835425b89 Added traceback when calling tolongint with math.inf to debug rrd module 2019-10-21 16:33:06 +02:00
Luca Deri
a31c59efb6 Updated ntop category lists URLs 2019-10-20 19:02:28 +02:00
Luca Deri
657e673af3 Changed defaults 2019-10-18 17:22:12 +02:00
Simone Mainardi
c68b9af4af Stops lists load during shutdown 2019-10-18 14:46:02 +02:00
Luca Deri
f006b7304d Updated black lists with the ntop meltdown 2019-10-18 13:53:48 +02:00
Simone Mainardi
43d0b89bd9 Prevens tons of unnecessary calls to alerts_api.trigger() 2019-10-17 18:54:13 +02:00
Alfredo Cardigliano
9b071bb873 Ingesting JA3 from Suricata, uniformed TLS IE names with those exported by cento, added localization for missing IEs 2019-10-17 13:04:42 +02:00