Simone Mainardi
18a1d5ea8d
Minor fix
2019-10-30 16:43:36 +01:00
Simone Mainardi
e10dfb1b24
Fixes for the CZ translation
2019-10-30 16:41:19 +01:00
emanuele-f
76812f42af
Add priority column in status overview
2019-10-22 19:52:05 +02:00
emanuele-f
b3374651ce
Merge branch 'alerts_cleanup' into dev
2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
f8443ff03d
Disk space reclaim and defrag of alerts db
2019-10-17 12:12:28 +02:00
Alfredo Cardigliano
bfdf5773d3
Format boolean custom fields
2019-10-16 12:51:04 +02:00
Simone Mainardi
bdbd44819c
Fixes nEdge flows drop
2019-10-16 19:17:14 +02:00
Simone Mainardi
6fd7386c03
Fixes possible collisions when looking up flows by key
2019-10-16 19:04:10 +02:00
emanuele-f
9786581526
flow.getInfo now returns minimal information
2019-10-16 13:57:54 +02:00
emanuele-f
7a14a9cf11
Improvements in status definition API
2019-10-16 10:33:19 +02:00
Simone Mainardi
2f984277ca
Fixes flows one-way/two-way flows filtering
2019-10-16 09:55:43 +02:00
emanuele-f
1c629b331a
Fix missing flow status menu entries
2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53
Fix flows_stats page title
2019-10-15 18:48:20 +02:00
emanuele-f
b217909966
Split flow status definitions in multiple files
2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
76759a7d03
Suricata events are now processed by the Lua script
2019-10-10 15:56:53 +02:00
Simone Mainardi
9a08c116b5
Improves flows filtering dropdowns
2019-10-08 11:25:36 +02:00
Simone Mainardi
79ec20d6df
Re-uses getFlows filters for the getActiveFlowsStats
...
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8
Removes a debug print
2019-10-07 19:45:21 +02:00
Simone Mainardi
6bcb8b18a2
Prevents TCP state filter from being shown on non-TCP flows
2019-10-07 18:51:16 +02:00
emanuele-f
978ee7f944
Add misbehaving flows label to avoid confusion
2019-09-20 12:41:09 +02:00
emanuele-f
4d62d68655
Add active alerted flows filter and count
...
Closes #2821
2019-09-10 17:52:22 +02:00
emanuele-f
935c2de722
Fix active flows error
2019-09-10 14:57:30 +02:00
emanuele-f
6e14f978d6
Flow alerts status cleanup
2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
141622f151
Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info
2019-09-04 22:20:51 +02:00
emanuele-f
a58cd6a7d9
Add country flag in flow peers
2019-09-02 10:58:43 +02:00
emanuele-f
2d02de6cc1
Implement initial flow score support
2019-08-30 17:16:11 +02:00
Simone Mainardi
c9223590d9
Workaround to handle \n forcefully set when decoding ZMQ tlv
2019-07-31 16:06:15 +02:00
emanuele-f
664d165b2f
Add hosts alerts link into flow alerts
2019-07-26 13:24:05 +02:00
Alfredo Cardigliano
c63831bfa3
Computing L4 protocol statistics for flows
2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236
Filter flows by L4 protocol
2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
78fe243d2b
Added missing ICMPV6 types descriptions
2019-07-12 11:58:56 +02:00
Alfredo Cardigliano
87d1834f13
Added missing ICMPV4 type 3 values description
2019-07-12 11:46:07 +02:00
emanuele-f
7b936a1a4c
Mesbehaving flows documentation
2019-07-02 16:32:12 +02:00
Alfredo Cardigliano
b2b5d07aa6
Typo fix
2019-06-05 11:53:30 +02:00
Alfredo Cardigliano
e9d9204ba7
Active flows title with status filter
2019-05-20 19:08:35 +02:00
Alfredo Cardigliano
9cdb84a875
Implements filtering per flow status in the active flows page
2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d
Implements traffic profile filter in the active flows page ( #2598 )
2019-05-20 12:43:51 +02:00
emanuele-f
359d359d09
Add ICMP flow filter
...
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
939ca8c166
Implement eBPF flows view and improve containers/pods pages
2019-04-26 15:34:53 +02:00
emanuele-f
fdc7772519
Implement simplified flows page with container filter
2019-04-26 10:44:44 +02:00
Simone Mainardi
25785fca62
Groups together flow alerts for the same flow in a counter variable
...
This is to mitigate the number of alerts and implements #2515
2019-04-19 16:14:06 +02:00
Simone Mainardi
db44a554c9
RTP in flow details fixes
2019-04-08 18:28:45 +02:00
Alfredo Cardigliano
34509abce7
Safety check in case of no filter
2019-03-27 10:28:41 +01:00
Alfredo Cardigliano
ca2e11bc0b
Anomalous -> Misbehaving Flows ( fixes #2386 )
2019-03-26 19:36:40 +01:00
Simone Mainardi
3fcb15cda2
Handles TCP flags via nProbe
2019-03-25 20:31:13 +01:00
emanuele-f
2e92bcbd4e
Alert page improvements
2019-02-19 13:12:52 +01:00
Simone Mainardi
9a413a5d72
Implements TCP states filtering (est., connecting, closed and rst)
...
Implements #2385
2019-02-16 18:19:25 +01:00
emanuele-f
2fa8bf22f0
Unify flows and host flows dropdowns
2019-02-14 16:16:54 +01:00
emanuele-f
50ee36c11a
Alert drilldown links now point to historical flows
2019-02-14 11:23:52 +01:00