60 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	332c7d5df5	Add ProfinetTooManyErrorsAlert	2026-01-05 15:33:21 +01:00
Alfredo Cardigliano	0dd78b4958	Update (c)	2026-01-02 09:11:30 +01:00
Alfredo Cardigliano	e7c62c72c3	Add alert definitions for S7Comm	2025-12-16 11:20:15 +01:00
Alfredo Cardigliano	aebf4ccf37	Add nEdge Policy Violation check	2025-08-14 12:33:38 +02:00
Matteo Biscosi	13ebc1e8d0	Possible fix for issue description and removed Connection Refused alert (#9233)	2025-05-23 11:21:06 +02:00
Luca Deri	e0b908b42e	Removed obsoleted TLSSuspiciousESNIUsage ... Improved device type guessing based on the OS	2025-03-25 21:56:38 +01:00
Manuel Ceroni	43ead976bb	Implemented QoE Issues Alert (#9033) ... * Implemented QoE Issues Alert * Fixed QoE Issue alert serializer	2025-03-14 11:41:25 +01:00
Alfredo Cardigliano	9352d0cdcd	Update copyright	2025-01-02 09:09:56 +01:00
Luca Deri	e8e58d4d84	Renamed LocalToInternetConnectionAlert ro HostPolicyAlert	2024-12-18 22:05:33 +01:00
YellowMan	3fae0b6e65	Mac tracking list (#8881) ... * Local To Internet Connection Alert * migrate information in mac-address traking list page	2024-12-18 15:09:41 +01:00
Matteo Biscosi	819f39830b	Added ACL Violation alert (#8696)	2024-11-28 18:02:53 +01:00
Luca Deri	d3e469a316	Mergec TCP Probing and Probin attempt	2024-11-20 22:08:07 +01:00
YellowMan	d396297985	Tcp Probing Attempt Alert (#8821) ... * Implemented TCP Probing Attempt Alert --------- Co-authored-by: DiPalmaGiuseppe <g.dipalma6@studenti.unipi.it>	2024-11-20 10:58:36 +01:00
Matteo Biscosi	952e136080	Moved unexpected gateway check from flows to hosts	2024-10-07 16:58:31 +02:00
Matteo Biscosi	5314a61f7c	Added gateway alert and configuration (#8687); Fixes nedge compilation issue	2024-10-02 11:07:19 +02:00
Luca Deri	e34224a9da	Refreshed ntopng code	2024-08-25 11:46:58 +02:00
Nicolò Maio	59075f5e10	Splitting blacklisted flow alert and creating two new alerts. (#8354) (#8355) ... * Splitting blacklisted flow alert and creating two new alerts. (#8354) * Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)	2024-04-24 17:37:30 +02:00
Nicolò Maio	636ba2975c	Add Flow Reset Alert and counter. (#8264) (#8348) ... * Add Flow Reset Alert and counter. (#8264) * Renaming to TCP Flow Reset. (#8264) * Renaming the value retrieved by the getName method. (#8264)	2024-04-24 17:15:20 +02:00
Nicolò Maio	fd6b0958c3	Rename the alert to "Remote to Local Insecure Flow". (#8257) (#8339)	2024-04-18 12:45:54 +02:00
Luca Deri	55870e97b9	(C) Update	2024-01-12 11:44:18 +01:00
Matteo Biscosi	f9a55743b6	Added malware host contacted check	2023-10-18 10:40:54 +00:00
Luca Deri	e86cd0f2ce	added Modbus Invalid Transition Alert	2023-06-05 00:53:27 +02:00
Luca Deri	4a13dc41d5	Implemented Modbus exceptions	2023-06-01 22:53:59 +02:00
Luca Deri	96e10b12a5	Added stub for RareDestination check/alert implementation #6416 and #6417	2023-03-22 15:11:53 +01:00
Matteo Biscosi	fc82eff56b	Updated alert to NDPI_NUMERIC_IP_HOST	2023-03-02 15:18:40 +00:00
MatteoBiscosi	ddb55b4d7e	Updated ndpi alerts (#7200)	2023-02-09 18:46:37 +01:00
Luca Deri	24bc8213d9	Fixed VLANBidirectionalTraffic code	2023-02-06 21:49:30 +01:00
Nicolò Maio	7162045cdd	Add VLAN bidirectional traffic alert (#7126) (#7194) ... * Add VLAN bidirectional traffic alert (#7126) * Add alert description. (#7126)	2023-02-03 10:33:25 +01:00
Luca Deri	f726b867c7	Updated (C)	2023-01-01 16:37:57 +01:00
Luca Deri	80db634bfe	Implemented skeleton of CustomFlowLuaScriptAlert check	2022-11-19 20:31:24 +01:00
MatteoBiscosi	b6692f3fea	Added TCP Packets issues check (#6899)	2022-11-16 11:28:16 +01:00
MatteoBiscosi	7bfc2fdde4	Fixes Flow risks not defined (#6939)	2022-10-21 13:37:08 +02:00
Alfredo Cardigliano	cdd4a41bd5	Rename FlowRisk Simple to Generic	2022-07-14 17:23:06 +02:00
MatteoBiscosi	755c90e0c2	Changed from UDP unidirection to unidirectiont traffic	2022-06-21 15:11:54 +02:00
MatteoBiscosi	4f8c5c6cec	Moved UDP unidirection to nDPI alerts	2022-06-21 11:37:46 +02:00
Luca Deri	9d364c69b4	Fixed TCP with no answer alert definition	2022-06-07 13:11:35 +02:00
MatteoBiscosi	3509b3b74b	Added dns fragmented alert	2022-05-31 18:34:22 +02:00
MatteoBiscosi	167cf6484a	Updated ndpi flow risk alerts	2022-05-31 17:15:21 +02:00
MatteoBiscosi	e9147aa37d	Implemented connection failed alert (#6622)	2022-05-27 10:45:25 +02:00
Luca Deri	7c038e29da	Implemented IEC104 Invalid Command Transition check/alert	2022-05-11 23:16:45 +02:00
MatteoBiscosi	2bcf7c8dfa	Added Suspicious Entropy alert (#6563)	2022-05-04 22:11:44 +02:00
Alfredo Cardigliano	f2060f2488	Copyright update (C)	2022-01-03 09:35:09 +01:00
MatteoBiscosi	4528e5a660	Added Broadcast non-UDP traffic alert and minor fixes to apexcharts	2021-12-17 13:33:11 +01:00
MatteoBiscosi	3d5fb6c3b1	Remove duplicated information from tls flows (#6073)	2021-11-24 13:31:01 +01:00
Simone Mainardi	3db5843db2	Implements fallback check and alert classes to handle risks ... Addresses #5743	2021-09-14 11:47:27 +02:00
Simone Mainardi	5f70c1eff7	Implements support for obsolete client SSH version ... Addresses #5861	2021-09-10 12:32:42 +02:00
Simone Mainardi	4b55e02899	Reworks check for Obsolete SSH that was not handling cli and srv ... Addresses #5861	2021-09-10 11:58:46 +02:00
MatteoBiscosi	ea57495fc3	Fixes compilation error	2021-08-16 19:11:07 +02:00
MatteoBiscosi	66cc80de20	Moved nedge defines for periodicity/lateral alerts	2021-08-11 09:32:09 +02:00
Luca Deri	993168c691	Edge compilation fixes	2021-08-10 23:16:31 +02:00