matteo
ab4e8e9379
Added REST for top local talkers and top remote destinations
2020-12-14 18:42:23 +01:00
matteo
a8cd70e0e5
Fixed #4730 Reset list of learnt MAC addresses
2020-12-09 17:18:35 +01:00
Simone Mainardi
e12108cfe0
Minor alert_flow_new_api_demo.lua cleanup
2020-12-04 17:16:20 +01:00
Simone Mainardi
7950ca3c55
Adds new alert_flow_new_api_demo.lua example
2020-12-04 17:07:12 +01:00
Simone Mainardi
8d6dafc897
Unifies new alerts and flow alerts API
2020-12-04 17:03:23 +01:00
Simone Mainardi
dbd325429b
Fixes TCP connection issues alert
2020-12-02 10:22:53 +01:00
Simone Mainardi
4533806ce8
Extends the new api with the format function
2020-11-30 17:11:48 +01:00
Simone Mainardi
b3dc39c641
Refactors alert_severities into an independend Lua module
2020-11-30 15:28:17 +01:00
gabryon99
20273758ef
add reset button with confirm ( #4730 )
2020-11-27 17:45:11 +01:00
Simone Mainardi
5d7abd0b53
Alerts API class name change
2020-11-26 18:03:17 +01:00
Simone Mainardi
2cc45f5229
Reworks experimental object-oriented alerts code
2020-11-26 15:56:24 +01:00
Luca Deri
06161556ac
Fixes issues with unexpected XXX alerts where impacted server was not reported
...
Added Lua getFlowProtoClientIP/getFlowProtoServerIP calls in flows
2020-11-25 15:52:03 +01:00
Simone Mainardi
c67d16e701
Disables experimental code
2020-11-23 18:44:36 +01:00
Simone Mainardi
5f2ab30351
Implements experimental object-oriented alert classes
2020-11-23 18:43:24 +01:00
matteo
b1b21ef28d
Fixed nil value of field 'cli' error
2020-11-23 16:21:19 +01:00
Matteo Biscosi
507583db64
Added host category to flow and host alerts ( #4767 )
...
* Fixed shell endpoint bug and added notice when executing the script
* Added victim and attacker to security plugins
* Updated hosts alert with host_category info
* Added host category to hosts alert description
* Added host category to flows
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-20 19:14:07 +01:00
Simone Mainardi
125fac2cec
Removes a debug print
2020-11-18 18:57:33 +01:00
Simone Mainardi
134c6dc0ee
Implements system engaged alert upon system alert drops
2020-11-18 18:53:24 +01:00
Simone Mainardi
a8340ff131
Implements per-interface engaged alert upon alert drops
2020-11-18 18:26:33 +01:00
Simone Mainardi
6898a136f6
Fixes label for zero tcp window
2020-11-17 17:37:05 +01:00
Simone Mainardi
658b48994d
Fixes and cleanup for low goodput user script
2020-11-17 17:33:52 +01:00
MatteoBiscosi
801bdb6bdc
Fixed unexpected new device plugin visual bugs
2020-11-16 18:46:53 +01:00
Luca Deri
502a85d9a9
Extended description
2020-11-16 12:51:49 +01:00
Luca Deri
a7518905a4
No longer necessary
2020-11-16 12:42:07 +01:00
Matteo Biscosi
a8cf3836d7
Fixes #4709 unexpected new device plugin ( #4728 )
...
* Added unexpected new device plugin, needs review
* Fixes #4709 unexpected new device plugin
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-16 12:41:19 +01:00
Simone Mainardi
b87e641086
Fixes validation of unexpected servers whitelist
2020-11-14 17:39:59 +01:00
Luca Deri
d94920d858
Typo
2020-11-14 01:11:52 +01:00
Luca Deri
7485843a7c
Updated low goodput description
2020-11-14 00:28:13 +01:00
Luca Deri
2120bf2486
Added alert for log goodput flows
2020-11-14 00:23:35 +01:00
Matteo Biscosi
c08707010e
Fixed "attempt to index a nil value (global 'alerts_api')" error
2020-11-13 13:13:00 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status ( #4710 )
...
* Modified blacklisted script in view of the new flow_script API
* Modified plugins scripting in view of the new API
* Modified flow scripts with the new trigger API
* Fixed creators severity
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
d16ff997ef
Removes a debug flag
2020-11-10 15:13:24 +01:00
Simone Mainardi
93920ccdce
Implements example of simplified flow alerts
2020-11-10 15:10:54 +01:00
Simone Mainardi
d42057baf5
Additional fixes for Zero TCP window detection
2020-11-07 15:38:39 +01:00
Simone Mainardi
a091efcb09
Fixes for Zero TCP window detection user script
2020-11-07 10:58:16 +01:00
Luca Deri
83816cefae
Zero window alert improvement
2020-11-07 00:41:02 +01:00
Simone Mainardi
5c0c23feb6
Fixes execution of periodicUpdate flow callback
...
Fixes #4687
2020-11-06 18:17:54 +01:00
Simone Mainardi
073fd5f6cd
Fixes flow score to low for suspicious file transfer risk
2020-11-06 13:40:36 +00:00
Luca Deri
e5d97d7120
Removed trace
2020-11-06 10:41:29 +01:00
Luca Deri
6d5178c9e5
Fixes bug in TCP zero windows alert report
2020-11-06 10:40:51 +01:00
Luca Deri
ecc3208e10
Removed debug code
2020-11-05 22:09:47 +01:00
Luca
e84f2be741
Added missing initialization
2020-11-05 19:32:39 +01:00
Luca
3455f79e9f
Zero window fixes
2020-11-05 18:53:19 +01:00
Matteo Biscosi
e5a48cb5d2
TCP Zero Window alert from issue #3417 ( #4684 )
...
* Added no_if_activity alert to user script keys
* Added no_if_activity description alert
* Fixes #4648 trigger an alert when no flows are collected
* Changed the time past one call of the alert and an other
* Fixes #4648 reorganized files and cache management
* Added status flow check regarding issue #3417
* Removed debug code
Co-authored-by: matteo <biscosi@ntop.org>
Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
2020-11-05 18:20:09 +01:00
Luca
f5f98468b3
Cosmetic fix
2020-11-05 18:12:17 +01:00
Matteo Biscosi
383a6659dc
Fixes #4648 trigger an alert when no flows are collected ( #4679 )
...
* Added no_if_activity alert to user script keys
* Added no_if_activity description alert
* Fixes #4648 trigger an alert when no flows are collected
* Changed the time past one call of the alert and an other
* Fixes #4648 reorganized files and cache management
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-05 17:58:38 +01:00
gabryon99
cf16003826
add notification for unexpected plugins ( #4659 )
2020-11-02 11:42:30 +01:00
Simone Mainardi
389f9c2beb
Reworks TCP issues flow user script
2020-10-30 15:56:36 +01:00
Luca Deri
966b743e78
Retrasmissions are accunted only when 10 pkts per directions are observed
...
Tiny cosmetic changes
2020-10-25 18:56:00 +01:00
Luca Deri
82fab91a2e
Merge pull request #4604 from Wallace4/retry_project
...
Retransmissions Plugin updated
2020-10-25 18:18:57 +01:00
