Commit graph

157 commits

Author SHA1 Message Date
Simone Mainardi
18a1d5ea8d Minor fix 2019-10-30 16:43:36 +01:00
Simone Mainardi
e10dfb1b24 Fixes for the CZ translation 2019-10-30 16:41:19 +01:00
emanuele-f
76812f42af Add priority column in status overview 2019-10-22 19:52:05 +02:00
emanuele-f
b3374651ce Merge branch 'alerts_cleanup' into dev 2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
f8443ff03d Disk space reclaim and defrag of alerts db 2019-10-17 12:12:28 +02:00
Alfredo Cardigliano
bfdf5773d3 Format boolean custom fields 2019-10-16 12:51:04 +02:00
Simone Mainardi
bdbd44819c Fixes nEdge flows drop 2019-10-16 19:17:14 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
emanuele-f
9786581526 flow.getInfo now returns minimal information 2019-10-16 13:57:54 +02:00
emanuele-f
7a14a9cf11 Improvements in status definition API 2019-10-16 10:33:19 +02:00
Simone Mainardi
2f984277ca Fixes flows one-way/two-way flows filtering 2019-10-16 09:55:43 +02:00
emanuele-f
1c629b331a Fix missing flow status menu entries 2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53 Fix flows_stats page title 2019-10-15 18:48:20 +02:00
emanuele-f
b217909966 Split flow status definitions in multiple files 2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
76759a7d03 Suricata events are now processed by the Lua script 2019-10-10 15:56:53 +02:00
Simone Mainardi
9a08c116b5 Improves flows filtering dropdowns 2019-10-08 11:25:36 +02:00
Simone Mainardi
79ec20d6df Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8 Removes a debug print 2019-10-07 19:45:21 +02:00
Simone Mainardi
6bcb8b18a2 Prevents TCP state filter from being shown on non-TCP flows 2019-10-07 18:51:16 +02:00
emanuele-f
978ee7f944 Add misbehaving flows label to avoid confusion 2019-09-20 12:41:09 +02:00
emanuele-f
4d62d68655 Add active alerted flows filter and count
Closes #2821
2019-09-10 17:52:22 +02:00
emanuele-f
935c2de722 Fix active flows error 2019-09-10 14:57:30 +02:00
emanuele-f
6e14f978d6 Flow alerts status cleanup 2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
141622f151 Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info 2019-09-04 22:20:51 +02:00
emanuele-f
a58cd6a7d9 Add country flag in flow peers 2019-09-02 10:58:43 +02:00
emanuele-f
2d02de6cc1 Implement initial flow score support 2019-08-30 17:16:11 +02:00
Simone Mainardi
c9223590d9 Workaround to handle \n forcefully set when decoding ZMQ tlv 2019-07-31 16:06:15 +02:00
emanuele-f
664d165b2f Add hosts alerts link into flow alerts 2019-07-26 13:24:05 +02:00
Alfredo Cardigliano
c63831bfa3 Computing L4 protocol statistics for flows 2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236 Filter flows by L4 protocol 2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
78fe243d2b Added missing ICMPV6 types descriptions 2019-07-12 11:58:56 +02:00
Alfredo Cardigliano
87d1834f13 Added missing ICMPV4 type 3 values description 2019-07-12 11:46:07 +02:00
emanuele-f
7b936a1a4c Mesbehaving flows documentation 2019-07-02 16:32:12 +02:00
Alfredo Cardigliano
b2b5d07aa6 Typo fix 2019-06-05 11:53:30 +02:00
Alfredo Cardigliano
e9d9204ba7 Active flows title with status filter 2019-05-20 19:08:35 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d Implements traffic profile filter in the active flows page (#2598) 2019-05-20 12:43:51 +02:00
emanuele-f
359d359d09 Add ICMP flow filter
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
939ca8c166 Implement eBPF flows view and improve containers/pods pages 2019-04-26 15:34:53 +02:00
emanuele-f
fdc7772519 Implement simplified flows page with container filter 2019-04-26 10:44:44 +02:00
Simone Mainardi
25785fca62 Groups together flow alerts for the same flow in a counter variable
This is to mitigate the number of alerts and implements #2515
2019-04-19 16:14:06 +02:00
Simone Mainardi
db44a554c9 RTP in flow details fixes 2019-04-08 18:28:45 +02:00
Alfredo Cardigliano
34509abce7 Safety check in case of no filter 2019-03-27 10:28:41 +01:00
Alfredo Cardigliano
ca2e11bc0b Anomalous -> Misbehaving Flows (fixes #2386) 2019-03-26 19:36:40 +01:00
Simone Mainardi
3fcb15cda2 Handles TCP flags via nProbe 2019-03-25 20:31:13 +01:00
emanuele-f
2e92bcbd4e Alert page improvements 2019-02-19 13:12:52 +01:00
Simone Mainardi
9a413a5d72 Implements TCP states filtering (est., connecting, closed and rst)
Implements #2385
2019-02-16 18:19:25 +01:00
emanuele-f
2fa8bf22f0 Unify flows and host flows dropdowns 2019-02-14 16:16:54 +01:00
emanuele-f
50ee36c11a Alert drilldown links now point to historical flows 2019-02-14 11:23:52 +01:00