emanuele-f
378a1e2cd8
Optimize nDPI categories reload to avoid packet drops
2019-10-29 12:07:27 +01:00
Simone Mainardi
cce73c2f44
Implements lua interpreters telemetry
2019-10-28 23:47:03 +01:00
Simone Mainardi
dc748b1b6d
Implements stats for periodic scripts duration
2019-10-28 17:10:03 +01:00
Alfredo Cardigliano
fa57c701bb
Displaying file id to retrieve files stored by Suricata
2019-10-28 12:24:15 +01:00
emanuele-f
943012e8c3
Avoid un-necessary hourly reload of category lists when nothing changed
2019-10-28 12:22:57 +01:00
emanuele-f
930fdc9bd1
Fix flows script table
2019-10-25 18:41:37 +02:00
emanuele-f
e238605f86
Fix latest run label
2019-10-25 17:51:29 +02:00
Alfredo Cardigliano
c7120e23f3
Hide periodic user scripts in pcap dump mode (unless --original-speed is specified)
2019-10-25 16:45:23 +02:00
emanuele-f
8a2d3dafff
Fix interface paused icon
2019-10-25 16:44:20 +02:00
Alfredo Cardigliano
96ef3c05e7
New alert when the number of idle entries in the hash tabel exceeds a configured threshold (implements #3005 )
2019-10-25 14:29:37 +02:00
emanuele-f
1d5ff7c4e7
Remove global flow user scripts on/off
2019-10-25 13:12:47 +02:00
Alfredo Cardigliano
b42989154c
Drawing active items in addition to idle in the internals chart
2019-10-25 12:14:53 +02:00
emanuele-f
0ea6856b44
Clean flow user scripts page
2019-10-25 11:30:06 +02:00
emanuele-f
58a12f1241
Add user scripts benchmark charts
...
Implements #2999
2019-10-24 20:24:13 +02:00
emanuele-f
8747af5f2b
Reduce max queue length
2019-10-24 17:00:03 +02:00
emanuele-f
3882e2f26d
Fix invalid failed exports key
2019-10-24 16:34:06 +02:00
emanuele-f
0d04eb2d5c
Stop writing points if InfluxDB export is failing.
...
The dropped points are accounted and shown in the gui. Dropped points alert are generated as usual.
Fixes #2998
2019-10-24 16:09:01 +02:00
Alfredo Cardigliano
afbb34e262
TCP SYN Scan detection (implements #2963 )
2019-10-24 15:35:26 +02:00
Simone Mainardi
955eed4b50
Reworks idling and purging of hash table entries to make it faster
2019-10-24 15:48:18 +02:00
emanuele-f
d1d789ea88
Improve category lists limits and reporting
2019-10-23 18:12:24 +02:00
emanuele-f
bb51396151
Fix bad categories lists limit check
2019-10-23 16:17:08 +02:00
emanuele-f
6fbc01b28e
Remove redis hash access for user scripts disabled check
2019-10-23 14:41:10 +02:00
Simone Mainardi
60e657c0d2
Makes hash table state counters as gauges
2019-10-23 14:25:12 +02:00
Simone Mainardi
47f8525144
Adds chars and page for hash table states
2019-10-23 14:14:44 +02:00
Simone Mainardi
15e17a801a
Implements per-state hash entry counters and writes them to ts
2019-10-23 13:09:02 +02:00
emanuele-f
10aa5542f8
Rework alertEntity functions to avoid modules circular dependencies
...
Fixes #2975
2019-10-23 13:01:57 +02:00
emanuele-f
19f820f1bc
Add max rules limit for category lists
...
Fixes #2966
2019-10-23 11:53:21 +02:00
emanuele-f
4b29fa2af1
Only save the edited preferences in category lists
...
Fixes #2967
2019-10-23 11:37:04 +02:00
emanuele-f
0c96c49157
Avoid redis KEYS command for MUD
2019-10-23 11:24:33 +02:00
emanuele-f
76812f42af
Add priority column in status overview
2019-10-22 19:52:05 +02:00
Simone Mainardi
fca66af5e5
Adds speed and num calls to script duration information
2019-10-22 19:05:57 +02:00
emanuele-f
bb4f073b1a
Avoid triggering remote-to-remote alerts when disabled
2019-10-22 18:46:03 +02:00
emanuele-f
f136a19123
Fix flows script expert view
2019-10-22 17:52:53 +02:00
emanuele-f
f264311e73
Also show the disabled scripts in the overview page
2019-10-22 17:48:38 +02:00
emanuele-f
cbddac0562
Fix outside DHCP range alert
2019-10-22 17:16:45 +02:00
Alfredo Cardigliano
b816bfc2d6
Fix purge past alerts button
2019-10-22 16:56:06 +02:00
emanuele-f
ac8d6f1110
Fix host MUD user script
2019-10-22 15:35:19 +02:00
emanuele-f
ab0875155e
Remove AlertType typedef from C
2019-10-22 14:43:21 +02:00
emanuele-f
db269e54a8
Implement user scripts overview page
2019-10-22 12:05:18 +02:00
emanuele-f
b3374651ce
Merge branch 'alerts_cleanup' into dev
2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
1ec35c3042
Fixes and cleanup of disabled alerts
2019-10-22 10:33:42 +02:00
Simone Mainardi
5b3f34b72a
Fixes flapping of engaged alerts
2019-10-21 17:41:50 +02:00
Alfredo Cardigliano
d835425b89
Added traceback when calling tolongint with math.inf to debug rrd module
2019-10-21 16:33:06 +02:00
Luca Deri
a31c59efb6
Updated ntop category lists URLs
2019-10-20 19:02:28 +02:00
Luca Deri
657e673af3
Changed defaults
2019-10-18 17:22:12 +02:00
Simone Mainardi
c68b9af4af
Stops lists load during shutdown
2019-10-18 14:46:02 +02:00
Luca Deri
f006b7304d
Updated black lists with the ntop meltdown
2019-10-18 13:53:48 +02:00
Simone Mainardi
43d0b89bd9
Prevens tons of unnecessary calls to alerts_api.trigger()
2019-10-17 18:54:13 +02:00
Alfredo Cardigliano
9b071bb873
Ingesting JA3 from Suricata, uniformed TLS IE names with those exported by cento, added localization for missing IEs
2019-10-17 13:04:42 +02:00