Simone Mainardi
ccb61a7444
Harmonizes remaining hardcoded Lua scores
2021-05-15 11:00:20 +02:00
Simone Mainardi
bbe6a3de37
Changes set_severity to set_score
2021-05-05 09:59:04 +02:00
Simone Mainardi
36e26cd0fc
Cleanup old ip reassignment / remote to remote alerts code
...
Fixes #5038
2021-02-26 11:36:21 +01:00
Luca Deri
a1178a0791
Updated (C)
2021-01-02 12:08:23 +01:00
Matteo Biscosi
101c53336e
Migrates alerts to an object-oriented implementation
2020-12-23 11:46:26 +01:00
Simone Mainardi
b3dc39c641
Refactors alert_severities into an independend Lua module
2020-11-30 15:28:17 +01:00
Simone Mainardi
d3dda0bb82
Unifies misbehaving with alerted flows
...
Implements #4596
2020-10-16 18:58:20 +02:00
Alfredo Cardigliano
bde41ff4b7
Cleanup nagios code
2020-07-28 11:33:04 +02:00
Simone Mainardi
290175b16f
Refactors alrt builders into creators
...
Refactors builders into creators: calls
2020-04-27 15:53:56 +02:00
Simone Mainardi
2739aac076
Implements alert builders for each alert definition
...
[AlertsK] Implements alert consts builder
[AlertsK] alert_threshold_cross.lua
[AlertsK] too_many_drops.lua
[AlertsK] alert_test_failed.lua
[AlertsK] alert_flows_flood.lua alert_tcp_syn_flood.lua lert_tcp_syn_scan.lua
[AlertsK] alert_snmp_topology_changed.lua
[AlertsK] snmp_device_reset.lua
[AlertsK] alert_slow_periodic_activity.lua
[AlertsK] alert_port_status_change.lua
[AlertsK] alert_port_status_change.lua
[AlertsK] alert_port_load_threshold_exceeded.lua
[AlertsK] alert_port_errors.lua
[AlertsK] alert_port_duplexstatus_change.lua
[AlertsK] alert_periodic_activity_not_executed.lua
[AlertsK] alert_misbehaving_flows_ratio.lua
[AlertsK] alert_influxdb_error.lua
[AlertsK] alert_influxdb_dropped_points.lua
[AlertsK] alert_dropped_alerts.lua
[AlertsK] alert_am_threshold_cross.lua
[AlertsK] alert_broadcast_domain_too_large.lua
[AlertsK] alert_device_connection.lua
[AlertsK] alert_device_connection.lua
[AlertsK] alert_host_pool_connection.lua alert_host_pool_disconnection.lua
[AlertsK] alert_ghost_network.lua
[AlertsK] alert_ip_outsite_dhcp_range.lua
[AlertsK] alert_list_download_failed.lua
[AlertsK] alert_login_failed.lua
[AlertsK] alert_mac_ip_association_change.lua
[AlertsK] alert_slow_purge.lua
[AlertsK] alert_request_reply_ratio.lua
[AlertsK] alert_quota_exceeded.lua
[AlertsK] alert_process_notification.lua
[AlertsK] alert_nfq_flushed.lua
[AlertsK] alert_misconfigured_app.lua alert_new_device.lua
[AlertsK] alert_influxdb_export_failure.lua
[AlertsK] alert_unresponsive_device.lua
[AlertsK] alert_user_activity.lua
[AlertsK] alert_user_script_calls_drops.lua
[AlertsK] minor fix
2020-04-24 15:35:44 +02:00
Simone Mainardi
4824150278
Prevents certain data (e.g., passwords) to be sent via mail
...
Fixes #3782
2020-04-16 21:47:29 +02:00
Simone Mainardi
e487427aab
Refactors alert_utils and enterprise_alert_utils
...
Addresses #3720
Alerts Refactor: alert_utils as module
Alerts Refactor: notify_ntopng_start and notify_ntopng_stop
Alerts Refactor: processAlertNotifications
Alerts Refactor: checkStoreAlertsFromC
Alerts Refactor: formatAlertNotification
Alerts Refactor: notification_timestamp_rev
Alerts Refactor: formatAlertMessage
Alerts Refactor: getConfigsetAlertLink
Alerts Refactor: alertNotificationActionToLabel
Alerts Refactor: flushAlertsData
Alerts Refactor: disableAlertsGeneration
Alerts Refactor: newAlertsWorkingStatus and other
Alerts Refactor: drawAlerts
Alerts Refactor: drawAlertTables
Alerts Refactor: printAlertTables
Alerts Refactor: checkDeleteStoredAlerts
Alerts Refactor: getUnpagedAlertOptions
Alerts Refactor: getTabParameters
Alerts Refactor: getAlerts
Alerts Refactor: getNumAlerts
Alerts Refactor: performAlertsQuery
Alerts Refactor: sec2granularity
Alerts Refactor: granularity2id
Alerts Refactor: granularity2sec
Alerts Refactor: alertEngineLabel
Alerts Refactor: alertEngine
Alerts Refactor: alertEngineRaw
Alerts Refactor: alertTypeDescription
Alerts Refactor: alertType
Alerts Refactor: alertTypeLabel
Alerts Refactor: alertTypeRaw
Alerts Refactor: alertSeverity
Alerts Refactor: alertSeverityLabel
Alerts Refactor: alertSeverityRaw
Alerts Refactor: get_make_room_keys
Alerts Refactor: enterprise_alert_utils
2020-04-10 14:03:20 +02:00
Luca Deri
170bc60f19
Updated (C)
2020-01-08 23:52:51 +01:00
Alfredo Cardigliano
e38835a603
Rename SSL to TLS ( fix #3013 )
2019-11-15 12:40:01 +01:00
Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
emanuele-f
d32b979368
Remove Alert Endpoint preference
...
Fixes #2859
2019-09-23 10:48:21 +02:00
emanuele-f
c183a577be
Alerts API cleanup and JSON migration
2019-07-29 15:17:22 +02:00
emanuele-f
046db90246
Fix change password alert bug
2019-07-10 15:24:33 +02:00
Simone Mainardi
bd004a43cd
Fixes access of possibly nil _SERVER in tracker.lua
2019-07-01 17:29:17 +02:00
emanuele-f
2df194a282
Implement alert release
2019-06-28 15:06:39 +02:00
emanuele-f
a9d3c78587
Alerts changes
...
NOTE: database schema changed. Existing alerts will be lost.
- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
...
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
Alfredo Cardigliano
7d3183e642
Added REMOTE_ADDR to _SERVER, recording address in alerts generated by the tracker, logging IP address from which password has been changed ( #2554 )
2019-05-13 16:13:15 +02:00
Alfredo Cardigliano
96954bdabb
new ids alert type and configuration
2019-04-04 11:02:01 +02:00
Simone Mainardi
f7cf85d169
Fixes nil table access upon nEdge http http_bridge_conf_utils.lua
...
Fixes
02/Mar/2019 18:16:46 [LuaEngine.cpp:8712] WARNING: Script failure [/home/simone/ntopng/scripts/callbacks/system/startup.lua][/home/simone/ntopng/scripts/lua/modules/tracker.lua:33: attempt to index a nil value (global '_SESSION')]
2019-03-02 18:19:08 +01:00
Alfredo Cardigliano
2002128eb4
Webhook export module for exporting alarms (implements #2251 )
2019-01-07 22:09:15 +01:00
emanuele-f
66f2555d94
Fix tracker error aborting data delete on nEdge
2019-01-02 16:33:31 +01:00
Alfredo Cardigliano
35df46d28c
added exception to log both alert enabled and disabled
2018-12-07 12:10:02 +01:00
Alfredo Cardigliano
9833d392e6
Improved user activity logs with link to the host and ifid in the alert json
2018-12-07 11:11:37 +01:00
Alfredo Cardigliano
dca54aa8e4
Enabled tracking of alert endpoints settings changes
2018-12-06 22:59:17 +01:00
Alfredo Cardigliano
48c20ec844
Tracking flows data download
2018-12-06 10:58:19 +01:00
Alfredo Cardigliano
7a508b84e9
Comments for the tracker api
2018-12-05 07:14:45 +01:00
Alfredo Cardigliano
9241a3c3e4
Added tracking of selected preferences (alerts settings)
2018-12-05 06:41:56 +01:00
Alfredo Cardigliano
bc7283ce3f
Tracking more user activities: alerts deleted, all/inactive/interface data deleted, host data deleted, all/host data exproted
2018-12-05 04:36:30 +01:00
Alfredo Cardigliano
a087fb3bc9
Added tracker.log(), tracking host_get_json
2018-12-05 01:56:15 +01:00
Alfredo Cardigliano
23402e7261
Tracking more user activities: downloaded pcaps, live capture, live extraction, added/deleted users, password changed
2018-12-05 00:55:34 +01:00
Alfredo Cardigliano
bec67745cf
tracking n2n/n2disk service stop/start
2018-12-04 23:22:08 +01:00
Alfredo Cardigliano
51af9ea40c
Initial tracker module
2018-12-04 19:28:49 +01:00
