Simone Mainardi
125fac2cec
Removes a debug print
2020-11-18 18:57:33 +01:00
Simone Mainardi
134c6dc0ee
Implements system engaged alert upon system alert drops
2020-11-18 18:53:24 +01:00
Simone Mainardi
a8340ff131
Implements per-interface engaged alert upon alert drops
2020-11-18 18:26:33 +01:00
Simone Mainardi
6898a136f6
Fixes label for zero tcp window
2020-11-17 17:37:05 +01:00
Simone Mainardi
658b48994d
Fixes and cleanup for low goodput user script
2020-11-17 17:33:52 +01:00
MatteoBiscosi
801bdb6bdc
Fixed unexpected new device plugin visual bugs
2020-11-16 18:46:53 +01:00
Luca Deri
502a85d9a9
Extended description
2020-11-16 12:51:49 +01:00
Luca Deri
a7518905a4
No longer necessary
2020-11-16 12:42:07 +01:00
Matteo Biscosi
a8cf3836d7
Fixes #4709 unexpected new device plugin ( #4728 )
...
* Added unexpected new device plugin, needs review
* Fixes #4709 unexpected new device plugin
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-16 12:41:19 +01:00
Simone Mainardi
b87e641086
Fixes validation of unexpected servers whitelist
2020-11-14 17:39:59 +01:00
Luca Deri
d94920d858
Typo
2020-11-14 01:11:52 +01:00
Luca Deri
7485843a7c
Updated low goodput description
2020-11-14 00:28:13 +01:00
Luca Deri
2120bf2486
Added alert for log goodput flows
2020-11-14 00:23:35 +01:00
Matteo Biscosi
c08707010e
Fixed "attempt to index a nil value (global 'alerts_api')" error
2020-11-13 13:13:00 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status ( #4710 )
...
* Modified blacklisted script in view of the new flow_script API
* Modified plugins scripting in view of the new API
* Modified flow scripts with the new trigger API
* Fixed creators severity
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
d16ff997ef
Removes a debug flag
2020-11-10 15:13:24 +01:00
Simone Mainardi
93920ccdce
Implements example of simplified flow alerts
2020-11-10 15:10:54 +01:00
Simone Mainardi
d42057baf5
Additional fixes for Zero TCP window detection
2020-11-07 15:38:39 +01:00
Simone Mainardi
a091efcb09
Fixes for Zero TCP window detection user script
2020-11-07 10:58:16 +01:00
Luca Deri
83816cefae
Zero window alert improvement
2020-11-07 00:41:02 +01:00
Simone Mainardi
5c0c23feb6
Fixes execution of periodicUpdate flow callback
...
Fixes #4687
2020-11-06 18:17:54 +01:00
Simone Mainardi
073fd5f6cd
Fixes flow score to low for suspicious file transfer risk
2020-11-06 13:40:36 +00:00
Luca Deri
e5d97d7120
Removed trace
2020-11-06 10:41:29 +01:00
Luca Deri
6d5178c9e5
Fixes bug in TCP zero windows alert report
2020-11-06 10:40:51 +01:00
Luca Deri
ecc3208e10
Removed debug code
2020-11-05 22:09:47 +01:00
Luca
e84f2be741
Added missing initialization
2020-11-05 19:32:39 +01:00
Luca
3455f79e9f
Zero window fixes
2020-11-05 18:53:19 +01:00
Matteo Biscosi
e5a48cb5d2
TCP Zero Window alert from issue #3417 ( #4684 )
...
* Added no_if_activity alert to user script keys
* Added no_if_activity description alert
* Fixes #4648 trigger an alert when no flows are collected
* Changed the time past one call of the alert and an other
* Fixes #4648 reorganized files and cache management
* Added status flow check regarding issue #3417
* Removed debug code
Co-authored-by: matteo <biscosi@ntop.org>
Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
2020-11-05 18:20:09 +01:00
Luca
f5f98468b3
Cosmetic fix
2020-11-05 18:12:17 +01:00
Matteo Biscosi
383a6659dc
Fixes #4648 trigger an alert when no flows are collected ( #4679 )
...
* Added no_if_activity alert to user script keys
* Added no_if_activity description alert
* Fixes #4648 trigger an alert when no flows are collected
* Changed the time past one call of the alert and an other
* Fixes #4648 reorganized files and cache management
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-05 17:58:38 +01:00
gabryon99
cf16003826
add notification for unexpected plugins ( #4659 )
2020-11-02 11:42:30 +01:00
Simone Mainardi
389f9c2beb
Reworks TCP issues flow user script
2020-10-30 15:56:36 +01:00
Luca Deri
966b743e78
Retrasmissions are accunted only when 10 pkts per directions are observed
...
Tiny cosmetic changes
2020-10-25 18:56:00 +01:00
Luca Deri
82fab91a2e
Merge pull request #4604 from Wallace4/retry_project
...
Retransmissions Plugin updated
2020-10-25 18:18:57 +01:00
Simone Mainardi
2e29a8d246
Implements user script for ip reassociation alerts
...
Addresses #4614
2020-10-22 16:49:50 +02:00
Simone Mainardi
cbfd2c8025
Implements user script for remote to remote host alerts
...
Addresses #4614
2020-10-22 16:25:31 +02:00
Simone Mainardi
8ca7daf889
Implements user script for quota exceeded alerts
...
Addresses #4614
2020-10-22 15:02:47 +02:00
Simone Mainardi
4346b55734
Implements user script for host pool connection/disconnection alerts
...
Addresses #4614
2020-10-22 14:51:54 +02:00
Simone Mainardi
f65aa2bc19
Implements user script for device connection/disconnection alerts
...
Addresses #4614
2020-10-22 14:27:26 +02:00
Simone Mainardi
d7f1ce0d8c
Reworks and optimizes flow alerted status
2020-10-19 16:50:22 +02:00
Wallace4
ca88369ef3
New version of retransmission plugin, fixed and tested
2020-10-19 16:40:22 +02:00
Alfredo Cardigliano
a5a8030e35
Cleanup trigger flow external alert
2020-10-19 13:12:31 +02:00
Simone Mainardi
00f1ae731a
Keeps configured enabled/disabled flow risks into account inside plugin
2020-10-19 11:56:41 +02:00
Simone Mainardi
27c1318ab6
Fixes risk not shown in generated flow-risk alerts
...
Fixes #4594
2020-10-19 11:10:19 +02:00
Luca Deri
a5076c0d27
Implemented multiselect to be used in #4589
2020-10-16 22:29:12 +02:00
Simone Mainardi
d3dda0bb82
Unifies misbehaving with alerted flows
...
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
92ed28cf4c
Prevents unidirectional traffic alerts from NoIP from being triggered
...
Fixes #4592 along with companion pro commit
2020-10-16 12:20:15 +02:00
Luca Deri
374b97c516
Unexpected protocol plugins default to disable
2020-10-15 21:44:24 +02:00
Luca Deri
24a5b1f908
Added minimum number of packets transmitted before triggering a retransmision alert
2020-10-14 22:33:02 +02:00
Luca Deri
7d6daf6b1b
Fixes for flow retransmission plugin
2020-10-14 00:02:25 +02:00
