Commit graph

23 commits

Author SHA1 Message Date
Matteo Biscosi
e521ce6cdc Removed incorrect scripts from flow interfaces
This alerts shouldn't be used in flow interfaces but only in packets one because the flow interfaces doesn't have/have incorrect informations regaring these fields
2021-02-26 12:35:16 +01:00
Simone Mainardi
4f717649e1 Removes multiple score increases for TCP zero window alerts
Fixes #4993
2021-02-02 10:34:37 +01:00
Simone Mainardi
38d31a474a Makes multiple score increments status-dependent
Implements #4993
2021-01-30 12:45:04 +01:00
Matteo Biscosi
10fb8bbecc Implements #4919 custom alert severity 2021-01-27 12:29:19 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
c1bdfb8722 Unifies flow_keys and status_keys 2020-12-22 19:14:16 +01:00
Simone Mainardi
f839b6ba76 Removes flow_consts requires no longer necessary 2020-12-22 18:06:50 +01:00
Matteo Biscosi
bcf2c2c1ed Migrates alerts to an object-oriented implementation 2020-12-22 14:48:00 +01:00
matteo
e24ef4ef35 Revert "Migrates alerts to an object-oriented implementation"
This reverts commit fbc283f12f.
2020-12-22 13:13:57 +01:00
matteo
fbc283f12f Migrates alerts to an object-oriented implementation 2020-12-22 13:00:25 +01:00
Simone Mainardi
b3dc39c641 Refactors alert_severities into an independend Lua module 2020-11-30 15:28:17 +01:00
Simone Mainardi
6898a136f6 Fixes label for zero tcp window 2020-11-17 17:37:05 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status (#4710)
* Modified blacklisted script in view of the new flow_script API

* Modified plugins scripting in view of the new API

* Modified flow scripts with the new trigger API

* Fixed creators severity

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
d42057baf5 Additional fixes for Zero TCP window detection 2020-11-07 15:38:39 +01:00
Simone Mainardi
a091efcb09 Fixes for Zero TCP window detection user script 2020-11-07 10:58:16 +01:00
Luca Deri
83816cefae Zero window alert improvement 2020-11-07 00:41:02 +01:00
Simone Mainardi
5c0c23feb6 Fixes execution of periodicUpdate flow callback
Fixes #4687
2020-11-06 18:17:54 +01:00
Luca Deri
e5d97d7120 Removed trace 2020-11-06 10:41:29 +01:00
Luca Deri
6d5178c9e5 Fixes bug in TCP zero windows alert report 2020-11-06 10:40:51 +01:00
Luca Deri
ecc3208e10
Removed debug code 2020-11-05 22:09:47 +01:00
Luca
e84f2be741 Added missing initialization 2020-11-05 19:32:39 +01:00
Luca
3455f79e9f Zero window fixes 2020-11-05 18:53:19 +01:00
Matteo Biscosi
e5a48cb5d2
TCP Zero Window alert from issue #3417 (#4684)
* Added no_if_activity alert to user script keys

* Added no_if_activity description alert

* Fixes #4648 trigger an alert when no flows are collected

* Changed the time past one call of the alert and an other

* Fixes #4648 reorganized files and cache management

* Added status flow check regarding issue #3417

* Removed debug code

Co-authored-by: matteo <biscosi@ntop.org>
Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
2020-11-05 18:20:09 +01:00