Commit graph

157 commits

Author SHA1 Message Date
emanuele-f
5dd88985f4 Improve and fix DNS replies/requests ratio 2019-08-27 09:57:59 +02:00
emanuele-f
a0761db1e8 Implement replies/requests ratio alert 2019-08-26 18:38:34 +02:00
emanuele-f
b0ba13f0bc Syn/flow flood alerts now use their own alert type 2019-08-26 17:36:27 +02:00
emanuele-f
951cb1a4e9 Fix alert issues due to invalid granularities 2019-08-21 10:27:15 +02:00
emanuele-f
7893c1f78a Implement RTT host engage/release alert 2019-08-20 19:02:58 +02:00
emanuele-f
81a9963e46 Implement alerts based on potentially dangerous flows nDPI classification 2019-08-07 14:29:06 +02:00
emanuele-f
b48a4e2127 Fix outside DHCP range alert script failure 2019-07-31 11:23:51 +02:00
emanuele-f
d38cd23615 Move C alerts to unified alerts_queue 2019-07-30 11:43:18 +02:00
emanuele-f
c183a577be Alerts API cleanup and JSON migration 2019-07-29 15:17:22 +02:00
emanuele-f
09fb8667e2 Add ability to disable specific alert types on alertables 2019-07-22 23:37:23 +02:00
emanuele-f
749a64e789 Release alerts on idle hosts 2019-07-19 10:54:05 +02:00
emanuele-f
0d7195d6e3 Fix db index 2019-07-15 15:51:47 +02:00
emanuele-f
9fa3b7920c Add trace when alerts queue limit is exceeded 2019-07-15 15:37:20 +02:00
Simone Mainardi
26f2e264c4 Allows alerts to be configured only at given periodicity (gui) 2019-07-15 12:14:17 +02:00
Simone Mainardi
fb891bbf2f Finishes implementation of new flood checks in lua 2019-07-12 19:14:30 +02:00
emanuele-f
083e51cdee Improve field_units i18n 2019-07-12 19:03:33 +02:00
emanuele-f
3f002ad223 field_units i18n fix 2019-07-12 16:17:01 +02:00
emanuele-f
5e0b8b496e Remove autorelease logic based on periodicity and update database schema 2019-07-12 12:46:21 +02:00
emanuele-f
f6ff3ad010 Rework interface threshold alerts definition 2019-07-11 19:11:33 +02:00
emanuele-f
b16136f5b4 Rework host threshold alerts definition 2019-07-11 19:11:33 +02:00
emanuele-f
98f95fc306 Implement host modular alerts config gui 2019-07-11 13:02:34 +02:00
emanuele-f
1d9a8951db Initial modular alerts config gui implementation 2019-07-11 12:42:25 +02:00
emanuele-f
737295bd93 Fix missing network entity link 2019-07-10 14:50:25 +02:00
emanuele-f
1dbeb118bf Interface threshold cross alerts now use the new api 2019-07-10 12:58:17 +02:00
emanuele-f
ecdf88b8a0 Host alerts migration to new api 2019-07-09 18:50:45 +02:00
emanuele-f
7b936a1a4c Mesbehaving flows documentation 2019-07-02 16:32:12 +02:00
Simone Mainardi
1019f024e4 Adds influxdb dropped points alert 2019-06-28 18:21:25 +02:00
emanuele-f
8a239f97f4 Trace periodic activities duration and generate an alert for long lasting ones 2019-06-21 11:41:38 +02:00
emanuele-f
a2f4dc0c24 Add alert generated when InfluxDB export queue is too long 2019-06-19 15:33:56 +02:00
Simone Mainardi
5fa59b21d9 Implements alerts for hosts unreachable and rtt too high 2019-06-14 00:22:52 +02:00
Alfredo Cardigliano
99aa386a12 Implements alerts on SNMP port load exceeding a configured threshold (%) based on port speed (#2223) 2019-05-30 15:18:46 +02:00
Alfredo Cardigliano
7590f629fe Alerts on duplex status change on SNMP interface (#2349) 2019-05-23 12:23:45 +02:00
Simone Mainardi
9cfd5ba968 Fixes throughput alerts format 2019-05-02 10:31:02 +02:00
emanuele-f
fa4330bbfd Implement alert for IP addresses assigned outside the configured DHCP ranges 2019-04-11 17:01:39 +02:00
Alfredo Cardigliano
7ce1150a69 IDS flow alerts notification 2019-04-04 16:03:48 +02:00
Simone Mainardi
5e5ad77cec Implements broadcast domain too large alerts 2019-04-01 14:20:57 +02:00
Simone Mainardi
f8b120a9ce Implements alerts for ICMP anomalies
Partially addresses #2387
2019-03-05 18:02:34 +01:00
Simone Mainardi
de286daf9c Implements alerts for DNS anomalies
Partially addresses #2387
2019-03-05 16:49:50 +01:00
emanuele-f
405841431c Add Custom Lists download alert and handle hourly download retry
Closes #2410
2019-02-21 01:07:22 +01:00
emanuele-f
f801aa4902 Implement beta anomaly index alerts generation
Enable with "redis-cli set ntopng.prefs.beta_anomaly_index_alerts 1"
2019-02-13 15:57:32 +01:00
Simone Mainardi
15200f7afc Implements inactive hosts engaged alerts 2019-02-04 15:02:59 +01:00
Simone Mainardi
5317d23fc2 Disables ZMQ flow collection drop alerts (waiting to make them engaged)
Revert "Implements ZMQ flow collection drops alerts"

This reverts commit d21e8d6f3e.
2019-01-24 15:02:22 +01:00
Simone Mainardi
d21e8d6f3e Implements ZMQ flow collection drops alerts 2019-01-23 19:42:18 +01:00
Simone Mainardi
2fc083b50b Adds testing facility for periodic checks 2019-01-17 16:13:39 +01:00
Alfredo Cardigliano
66e497ec01 new alert type alert_port_errors 2019-01-11 11:41:09 +01:00
emanuele-f
9bae8e234a Implement InfluxDB alerts when export fails
Fixes #2193
2018-12-06 14:32:37 +01:00
Alfredo Cardigliano
aab9e384ed Logging user login via alerts, added 'user activity' alerts type 2018-12-04 20:55:21 +01:00
Simone Mainardi
ddf49ef106 Implements remote-to-remote host alerts
Implements #2057
2018-10-10 12:16:59 +02:00
emanuele-f
457dcb3457 Implement Device Protocols Alerts 2018-10-02 22:35:00 +02:00
emanuele-f
03bf331c3e Add alert for slow stats update and reduce flow alert generation
This avoids SQLite database flooding during an ongoing attack which can block stats update
2018-09-27 19:31:38 +02:00