100 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	332c7d5df5	Add ProfinetTooManyErrorsAlert	2026-01-05 15:33:21 +01:00
Alfredo Cardigliano	e7c62c72c3	Add alert definitions for S7Comm	2025-12-16 11:20:15 +01:00
Alfredo Cardigliano	aebf4ccf37	Add nEdge Policy Violation check	2025-08-14 12:33:38 +02:00
Matteo Biscosi	13ebc1e8d0	Possible fix for issue description and removed Connection Refused alert (#9233)	2025-05-23 11:21:06 +02:00
Luca Deri	5aa8409dde	Added risk alert consistency check	2025-05-14 08:31:28 +02:00
Luca Deri	e0b908b42e	Removed obsoleted TLSSuspiciousESNIUsage ... Improved device type guessing based on the OS	2025-03-25 21:56:38 +01:00
Manuel Ceroni	43ead976bb	Implemented QoE Issues Alert (#9033) ... * Implemented QoE Issues Alert * Fixed QoE Issue alert serializer	2025-03-14 11:41:25 +01:00
Luca Deri	60a0e40d4e	Modified host policy flow message and severity	2024-12-23 15:07:30 +01:00
Luca Deri	4b160de275	Improved host policy alert	2024-12-23 10:32:04 +01:00
Luca Deri	502a428006	Host Policy alert improvements	2024-12-23 00:37:47 +01:00
Luca Deri	e8e58d4d84	Renamed LocalToInternetConnectionAlert ro HostPolicyAlert	2024-12-18 22:05:33 +01:00
YellowMan	3fae0b6e65	Mac tracking list (#8881) ... * Local To Internet Connection Alert * migrate information in mac-address traking list page	2024-12-18 15:09:41 +01:00
Matteo Biscosi	faa34b614c	Fixes alert score not correctlt working (#8851)	2024-12-11 19:25:30 +01:00
Matteo Biscosi	5d76ee3ec7	Fixes score calculation error (#8868)	2024-12-11 12:32:20 +01:00
Alfredo Cardigliano	08a8a7e6a6	Flow alerts code cleanup	2024-12-06 10:52:35 +01:00
Matteo Biscosi	b8b8baa05d	Changed periocity changed alert	2024-12-06 10:12:47 +01:00
Matteo Biscosi	819f39830b	Added ACL Violation alert (#8696)	2024-11-28 18:02:53 +01:00
Luca Deri	d3e469a316	Mergec TCP Probing and Probin attempt	2024-11-20 22:08:07 +01:00
YellowMan	d396297985	Tcp Probing Attempt Alert (#8821) ... * Implemented TCP Probing Attempt Alert --------- Co-authored-by: DiPalmaGiuseppe <g.dipalma6@studenti.unipi.it>	2024-11-20 10:58:36 +01:00
Matteo Biscosi	e9566f6e0a	Fixes important alerts not displayed in the main page (#8754)	2024-10-14 12:18:32 +02:00
Matteo Biscosi	952e136080	Moved unexpected gateway check from flows to hosts	2024-10-07 16:58:31 +02:00
Matteo Biscosi	5314a61f7c	Added gateway alert and configuration (#8687); Fixes nedge compilation issue	2024-10-02 11:07:19 +02:00
Luca Deri	e34224a9da	Refreshed ntopng code	2024-08-25 11:46:58 +02:00
Matteo Biscosi	e4dcc0a567	Increased elephant flow alert score	2024-07-30 15:07:41 +02:00
Luca Deri	ddd449ea90	Added the ability to set custom alert score	2024-04-29 11:56:02 +02:00
Nicolo Maio	3ae43b18c5	Change the severity of the old blacklisted flow to critical	2024-04-24 18:39:20 +02:00
Nicolo Maio	7ced911ec7	Fix autoAck (#7948)	2024-04-24 18:34:19 +02:00
Nicolò Maio	59075f5e10	Splitting blacklisted flow alert and creating two new alerts. (#8354) (#8355) ... * Splitting blacklisted flow alert and creating two new alerts. (#8354) * Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)	2024-04-24 17:37:30 +02:00
Nicolò Maio	636ba2975c	Add Flow Reset Alert and counter. (#8264) (#8348) ... * Add Flow Reset Alert and counter. (#8264) * Renaming to TCP Flow Reset. (#8264) * Renaming the value retrieved by the getName method. (#8264)	2024-04-24 17:15:20 +02:00
Nicolò Maio	fd6b0958c3	Rename the alert to "Remote to Local Insecure Flow". (#8257) (#8339)	2024-04-18 12:45:54 +02:00
Luca Deri	55870e97b9	(C) Update	2024-01-12 11:44:18 +01:00
Matteo Biscosi	f9a55743b6	Added malware host contacted check	2023-10-18 10:40:54 +00:00
Alfredo Cardigliano	3fa67c2836	Set suspicious DNS as requiring attention	2023-10-16 14:32:23 +02:00
Alfredo Cardigliano	b06ba6db23	Disable auto ack for sql inj alerts	2023-07-24 11:13:04 +02:00
Alfredo Cardigliano	2ac9ed0cfc	Mark critical alerts as non auto-acknowledged	2023-06-22 09:14:09 +02:00
Luca Deri	e86cd0f2ce	added Modbus Invalid Transition Alert	2023-06-05 00:53:27 +02:00
Luca Deri	4a13dc41d5	Implemented Modbus exceptions	2023-06-01 22:53:59 +02:00
lucaderi	d395deac4e	Automated commit of clang-format CI changes.	2023-04-07 14:20:44 +00:00
Luca Deri	96e10b12a5	Added stub for RareDestination check/alert implementation #6416 and #6417	2023-03-22 15:11:53 +01:00
Matteo Biscosi	fc82eff56b	Updated alert to NDPI_NUMERIC_IP_HOST	2023-03-02 15:18:40 +00:00
MatteoBiscosi	ddb55b4d7e	Updated ndpi alerts (#7200)	2023-02-09 18:46:37 +01:00
Luca Deri	24bc8213d9	Fixed VLANBidirectionalTraffic code	2023-02-06 21:49:30 +01:00
Nicolò Maio	7162045cdd	Add VLAN bidirectional traffic alert (#7126) (#7194) ... * Add VLAN bidirectional traffic alert (#7126) * Add alert description. (#7126)	2023-02-03 10:33:25 +01:00
Luca Deri	f726b867c7	Updated (C)	2023-01-01 16:37:57 +01:00
Luca Deri	71fbbdbf58	Implemented custom host script (WIP)	2022-11-24 12:34:14 +01:00
Luca Deri	a687b9280a	Implemented custom script check	2022-11-23 11:11:45 +01:00
Luca Deri	80db634bfe	Implemented skeleton of CustomFlowLuaScriptAlert check	2022-11-19 20:31:24 +01:00
MatteoBiscosi	b6692f3fea	Added TCP Packets issues check (#6899)	2022-11-16 11:28:16 +01:00
MatteoBiscosi	7bfc2fdde4	Fixes Flow risks not defined (#6939)	2022-10-21 13:37:08 +02:00
Alfredo Cardigliano	cdd4a41bd5	Rename FlowRisk Simple to Generic	2022-07-14 17:23:06 +02:00