Luca Deri
3c72fc1734
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
2019-10-15 21:57:11 +02:00
Luca Deri
3b5e56d802
Added script for detecting unidirectional UDP flows
2019-10-15 21:56:48 +02:00
emanuele-f
1c629b331a
Fix missing flow status menu entries
2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53
Fix flows_stats page title
2019-10-15 18:48:20 +02:00
emanuele-f
9ea7ff01b8
Improve flow alert trigger logic and fix support for custom message
2019-10-15 18:36:41 +02:00
emanuele-f
b217909966
Split flow status definitions in multiple files
2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
240fa15149
Handle additional fields from Suricata
2019-10-15 15:48:12 +02:00
Simone Mainardi
3950c3ddc8
Support for 5-min timeseries resolution in InfluxDB
2019-10-15 15:06:20 +02:00
emanuele-f
90cadaf560
Fix periodic scripts being called every minute with hasHighResolutionTs
2019-10-15 11:18:00 +02:00
Simone Mainardi
b258f45858
Fixes deletion of old alerts when above a certain threshold
2019-10-14 18:03:16 +02:00
Simone Mainardi
002f1e7176
InfluxDB writes are now done with second precision
...
Implements #2935
2019-10-14 09:44:15 +02:00
emanuele-f
2fdc860ed2
Add support for custom flow alerts in user scripts
2019-10-11 19:48:11 +02:00
emanuele-f
7bd6feb622
Rename check_module -> user_script
2019-10-10 18:14:53 +02:00
emanuele-f
b8f1a039fb
Fix always_enabled required for non-alert scripts
2019-10-10 18:03:36 +02:00
emanuele-f
75cf795521
Unify teardown function
2019-10-10 17:24:24 +02:00
Alfredo Cardigliano
76759a7d03
Suricata events are now processed by the Lua script
2019-10-10 15:56:53 +02:00
Simone Mainardi
4ef7d35296
Benchmarks for hosts interface and network scripts
2019-10-10 11:54:31 +02:00
Luca Deri
fc6f055137
Initial code cleanup for flow scripts
2019-10-09 23:39:44 +02:00
Alfredo Cardigliano
c03de01534
Mino user_scripts fix
2019-10-09 20:09:29 +02:00
Simone Mainardi
3cafa97aba
Stores benchmark results in plain redis keys with TTL for auto-cleanup
2019-10-09 19:33:33 +02:00
emanuele-f
ab0094c1c3
Unify syslog with user scripts API
2019-10-09 18:53:19 +02:00
Simone Mainardi
b9fa26174c
Implements generalized benchmarks for any user_script
2019-10-09 18:48:01 +02:00
emanuele-f
e66889154c
Migrate flow script documentation and document traffic element scripts
2019-10-09 17:23:51 +02:00
emanuele-f
ffd3b4c1ee
Users scripts api changes and initial documentation
2019-10-09 15:12:28 +02:00
Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
Simone Mainardi
1af92887fe
Fixes wrong syslog priorities
2019-10-09 01:09:29 +02:00
Simone Mainardi
9a08c116b5
Improves flows filtering dropdowns
2019-10-08 11:25:36 +02:00
emanuele-f
fa5dd7cf34
Fix check modules paths
2019-10-08 09:43:50 +02:00
Simone Mainardi
79ec20d6df
Re-uses getFlows filters for the getActiveFlowsStats
...
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8
Removes a debug print
2019-10-07 19:45:21 +02:00
emanuele-f
ede9a7940a
Generalize periodic and flows callbacks
...
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
Simone Mainardi
6bcb8b18a2
Prevents TCP state filter from being shown on non-TCP flows
2019-10-07 18:51:16 +02:00
Simone Mainardi
aa652145d0
Unifies flows, timeseries and top-talkers data retention
...
Implements #2897
2019-10-07 16:35:32 +02:00
Simone Mainardi
aceb123ebb
Adds About/directories page listing custom scripts directories
2019-10-07 11:34:39 +02:00
emanuele-f
bee1efdded
Move callbacks scripts into separate tab
2019-10-04 10:48:13 +02:00
Simone Mainardi
d5df15d123
Fixes flow alerts missing from external alert endpoints
2019-10-03 16:37:59 +02:00
Alfredo Cardigliano
98c7962c10
os_utils.hasService check fix (root has also permissions)
2019-10-02 20:34:24 +02:00
Simone Mainardi
4322d977f9
Fixes misleading hyperlinks with total values pointing to live data
...
Fixes #2881
Fixes #2878
2019-10-02 17:03:24 +02:00
Simone Mainardi
99989d0200
Implements flow lua scripts ui (simple mode)
2019-10-01 23:53:20 +02:00
Simone Mainardi
6810c86d22
Reworks flow lua scripts ui (expert mode)
2019-10-01 23:10:25 +02:00
Simone Mainardi
6db2c6392f
Stores flow lua scripts benchmarks and shows them in the ui
2019-10-01 17:06:29 +02:00
Simone Mainardi
fa17aab9db
Implements lua flow method calls using ids to be more efficient
2019-09-30 17:29:01 +02:00
emanuele-f
84cff5bacc
Remove duplicate RTT host configuration
2019-09-30 12:19:05 +02:00
emanuele-f
35e3a2f20c
Do not compute DNS ratio in nEdge
...
nEdge does not see the DNS replies so DNS ratio is incorrect
2019-09-30 11:28:15 +02:00
Simone Mainardi
039034435b
Prevents InfluxDB export retries on missing timeseries files
...
Fixes #2873
2019-09-27 10:18:25 +02:00
Alfredo Cardigliano
ff36d16968
Moved Disaggregation Criterion setting to the interface (per interface now)
2019-09-25 12:19:22 +02:00
Luca Deri
c889e011f6
Improved items placements on stacked bar
2019-09-24 17:10:52 +02:00
emanuele-f
1bf89fdb4d
Add server malicious JA3 signature check and improve alert information
...
Closes #2880
2019-09-24 13:30:32 +02:00
Simone Mainardi
3ea092093f
Adds generic probes tab to the alerts pages
2019-09-23 18:50:43 +02:00
Luca Deri
3f923a8eb8
ntop MUD extensions are not under the cybersec-mud module
2019-09-23 17:16:47 +02:00