Commit graph

2278 commits

Author SHA1 Message Date
Luca Deri
3c72fc1734 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2019-10-15 21:57:11 +02:00
Luca Deri
3b5e56d802 Added script for detecting unidirectional UDP flows 2019-10-15 21:56:48 +02:00
emanuele-f
1c629b331a Fix missing flow status menu entries 2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53 Fix flows_stats page title 2019-10-15 18:48:20 +02:00
emanuele-f
9ea7ff01b8 Improve flow alert trigger logic and fix support for custom message 2019-10-15 18:36:41 +02:00
emanuele-f
b217909966 Split flow status definitions in multiple files 2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
240fa15149 Handle additional fields from Suricata 2019-10-15 15:48:12 +02:00
Simone Mainardi
3950c3ddc8 Support for 5-min timeseries resolution in InfluxDB 2019-10-15 15:06:20 +02:00
emanuele-f
90cadaf560 Fix periodic scripts being called every minute with hasHighResolutionTs 2019-10-15 11:18:00 +02:00
Simone Mainardi
b258f45858 Fixes deletion of old alerts when above a certain threshold 2019-10-14 18:03:16 +02:00
Simone Mainardi
002f1e7176 InfluxDB writes are now done with second precision
Implements #2935
2019-10-14 09:44:15 +02:00
emanuele-f
2fdc860ed2 Add support for custom flow alerts in user scripts 2019-10-11 19:48:11 +02:00
emanuele-f
7bd6feb622 Rename check_module -> user_script 2019-10-10 18:14:53 +02:00
emanuele-f
b8f1a039fb Fix always_enabled required for non-alert scripts 2019-10-10 18:03:36 +02:00
emanuele-f
75cf795521 Unify teardown function 2019-10-10 17:24:24 +02:00
Alfredo Cardigliano
76759a7d03 Suricata events are now processed by the Lua script 2019-10-10 15:56:53 +02:00
Simone Mainardi
4ef7d35296 Benchmarks for hosts interface and network scripts 2019-10-10 11:54:31 +02:00
Luca Deri
fc6f055137 Initial code cleanup for flow scripts 2019-10-09 23:39:44 +02:00
Alfredo Cardigliano
c03de01534 Mino user_scripts fix 2019-10-09 20:09:29 +02:00
Simone Mainardi
3cafa97aba Stores benchmark results in plain redis keys with TTL for auto-cleanup 2019-10-09 19:33:33 +02:00
emanuele-f
ab0094c1c3 Unify syslog with user scripts API 2019-10-09 18:53:19 +02:00
Simone Mainardi
b9fa26174c Implements generalized benchmarks for any user_script 2019-10-09 18:48:01 +02:00
emanuele-f
e66889154c Migrate flow script documentation and document traffic element scripts 2019-10-09 17:23:51 +02:00
emanuele-f
ffd3b4c1ee Users scripts api changes and initial documentation 2019-10-09 15:12:28 +02:00
Alfredo Cardigliano
7e9678de37 IDS alert -> External alert 2019-10-09 11:35:51 +02:00
Simone Mainardi
1af92887fe Fixes wrong syslog priorities 2019-10-09 01:09:29 +02:00
Simone Mainardi
9a08c116b5 Improves flows filtering dropdowns 2019-10-08 11:25:36 +02:00
emanuele-f
fa5dd7cf34 Fix check modules paths 2019-10-08 09:43:50 +02:00
Simone Mainardi
79ec20d6df Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8 Removes a debug print 2019-10-07 19:45:21 +02:00
emanuele-f
ede9a7940a Generalize periodic and flows callbacks
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
Simone Mainardi
6bcb8b18a2 Prevents TCP state filter from being shown on non-TCP flows 2019-10-07 18:51:16 +02:00
Simone Mainardi
aa652145d0 Unifies flows, timeseries and top-talkers data retention
Implements #2897
2019-10-07 16:35:32 +02:00
Simone Mainardi
aceb123ebb Adds About/directories page listing custom scripts directories 2019-10-07 11:34:39 +02:00
emanuele-f
bee1efdded Move callbacks scripts into separate tab 2019-10-04 10:48:13 +02:00
Simone Mainardi
d5df15d123 Fixes flow alerts missing from external alert endpoints 2019-10-03 16:37:59 +02:00
Alfredo Cardigliano
98c7962c10 os_utils.hasService check fix (root has also permissions) 2019-10-02 20:34:24 +02:00
Simone Mainardi
4322d977f9 Fixes misleading hyperlinks with total values pointing to live data
Fixes #2881
Fixes #2878
2019-10-02 17:03:24 +02:00
Simone Mainardi
99989d0200 Implements flow lua scripts ui (simple mode) 2019-10-01 23:53:20 +02:00
Simone Mainardi
6810c86d22 Reworks flow lua scripts ui (expert mode) 2019-10-01 23:10:25 +02:00
Simone Mainardi
6db2c6392f Stores flow lua scripts benchmarks and shows them in the ui 2019-10-01 17:06:29 +02:00
Simone Mainardi
fa17aab9db Implements lua flow method calls using ids to be more efficient 2019-09-30 17:29:01 +02:00
emanuele-f
84cff5bacc Remove duplicate RTT host configuration 2019-09-30 12:19:05 +02:00
emanuele-f
35e3a2f20c Do not compute DNS ratio in nEdge
nEdge does not see the DNS replies so DNS ratio is incorrect
2019-09-30 11:28:15 +02:00
Simone Mainardi
039034435b Prevents InfluxDB export retries on missing timeseries files
Fixes #2873
2019-09-27 10:18:25 +02:00
Alfredo Cardigliano
ff36d16968 Moved Disaggregation Criterion setting to the interface (per interface now) 2019-09-25 12:19:22 +02:00
Luca Deri
c889e011f6 Improved items placements on stacked bar 2019-09-24 17:10:52 +02:00
emanuele-f
1bf89fdb4d Add server malicious JA3 signature check and improve alert information
Closes #2880
2019-09-24 13:30:32 +02:00
Simone Mainardi
3ea092093f Adds generic probes tab to the alerts pages 2019-09-23 18:50:43 +02:00
Luca Deri
3f923a8eb8 ntop MUD extensions are not under the cybersec-mud module 2019-09-23 17:16:47 +02:00