Commit graph

489 commits

Author SHA1 Message Date
emanuele-f
50c5395a1c Replace flow status warning icon to avoid confusion with alerted state 2019-09-18 15:33:33 +02:00
Simone Mainardi
b3d595653e Initial implementation of lua flow callback scripts and blacklisted alerts
Partially implements #2842
2019-09-16 18:27:46 +02:00
Simone Mainardi
b364116e7b Fixes inteface speed visualization with non-needed decimals 2019-09-11 18:10:28 +02:00
Simone Mainardi
f151fba989 Allows top talkers generation to be enabled/disabled 2019-09-11 16:42:26 +02:00
emanuele-f
6e14f978d6 Flow alerts status cleanup 2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
0d38479297 Fix formatMaliciousSignature with no flowstatus_info 2019-09-09 11:21:26 +02:00
Alfredo Cardigliano
38a53ec1fa Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page. 2019-09-05 17:55:00 +02:00
Alfredo Cardigliano
141622f151 Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info 2019-09-04 22:20:51 +02:00
emanuele-f
a0d8cd7595 Add l4_proto_to_id 2019-09-02 20:08:38 +02:00
Alfredo Cardigliano
13d032d185 Formatting IDS alerts 2019-08-29 11:20:41 +02:00
emanuele-f
a37bb425ea Add JA3 signature link in alerts 2019-08-28 18:41:17 +02:00
emanuele-f
b66b71fd7e Implement alert on JA3 malicious signatures
Closes #2788
2019-08-28 18:33:13 +02:00
Simone Mainardi
6300b3ce4e Fixes flows explorer localtime calculation when time is DST
Fixes #2771
2019-08-20 16:45:40 +02:00
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46 Implement alerts based on potentially dangerous flows nDPI classification 2019-08-07 14:29:06 +02:00
emanuele-f
e82c66fb7c Fix mixed global/per-interface nindex checks
Fix #2725
2019-08-01 11:53:55 +02:00
emanuele-f
ba91b62f0a Allow spaces in password fields
Fixes #2732
2019-08-01 11:12:30 +02:00
Simone Mainardi
c9223590d9 Workaround to handle \n forcefully set when decoding ZMQ tlv 2019-07-31 16:06:15 +02:00
Simone Mainardi
5270d09490 Allows alerts to be configured on view interfaces 2019-07-19 12:43:31 +02:00
emanuele-f
2cdc180c9b Remove unused function 2019-07-16 14:09:32 +02:00
Simone Mainardi
883b99dce9 Fixes attempt to index a nil value with Syslog alerts 2019-07-16 13:05:27 +02:00
Simone Mainardi
cc97be85ca Fixes host alerts key generation 2019-07-15 22:54:09 +02:00
Alfredo Cardigliano
2e7e9dcb70 Fixed l4_proto_to_string to return the proto ID with unknown protocols 2019-07-12 16:34:32 +02:00
Alfredo Cardigliano
c63831bfa3 Computing L4 protocol statistics for flows 2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236 Filter flows by L4 protocol 2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
b4f21d1d9b Moved host 'name' from hostinfo2url which is not supported (and leads to errors in lint) 2019-07-11 14:59:12 +02:00
emanuele-f
ecdf88b8a0 Host alerts migration to new api 2019-07-09 18:50:45 +02:00
emanuele-f
0748ef191d Initial system interface data delete 2019-07-04 11:09:33 +02:00
emanuele-f
7b936a1a4c Mesbehaving flows documentation 2019-07-02 16:32:12 +02:00
Simone Mainardi
8c9bf94f4b Handles possibly missing nindex_utils as in Windows 2019-07-02 16:27:34 +02:00
Simone Mainardi
ae4770fe7d Improves visualization of containers/pods in flows 2019-06-27 17:00:17 +02:00
emanuele-f
cfa9986671 Implement InfluxDB export statistics 2019-06-10 15:52:06 +02:00
emanuele-f
3ecc032c14 Hide system properties for restricted users
This will also hide SNMP devices
2019-06-03 12:42:23 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
emanuele-f
9d72c72cb3 Fix warning sign on normal flows 2019-05-31 09:39:52 +02:00
Luca Deri
e03b7f0f5f Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2019-05-29 00:17:39 +02:00
Luca Deri
93ed8c009a Added SSL protocol handling 2019-05-29 00:12:26 +02:00
emanuele-f
1c9a4d3461 Implement ICMP data exfiltration alerts
Closes #256
2019-05-28 10:37:59 +02:00
Luca Deri
1228ddc2ca Added unsafe SSL ciphers detection 2019-05-20 23:19:53 +02:00
Alfredo Cardigliano
22b4d1d7bc Description fix for icmp type 8 (see #2597) 2019-05-20 19:25:20 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
3b99717db6 TCP connection issues threshold and double severity level based on ratio (#2593) 2019-05-20 16:07:48 +02:00
emanuele-f
cd7d987ac8 Fix long lived flow status
Fixes #2550
2019-05-13 18:01:40 +02:00
emanuele-f
b01f104a36 Move process information into client/server column 2019-04-29 12:09:44 +02:00
emanuele-f
939ca8c166 Implement eBPF flows view and improve containers/pods pages 2019-04-26 15:34:53 +02:00
emanuele-f
fdc7772519 Implement simplified flows page with container filter 2019-04-26 10:44:44 +02:00
Simone Mainardi
d7342798ca Improves SSL certificates mismatch alerts
Implements #2510
2019-04-05 18:21:54 +02:00
Simone Mainardi
b4f849a51d Domain in blacklisted alerts 2019-04-05 18:02:23 +02:00
emanuele-f
387543f8e9 Fix top talkers when mac address is used as LBD hosts ID 2019-04-05 17:49:22 +02:00
Simone Mainardi
a85b7cd398 Improves description of blacklisted flow alerts
Implements #2511
2019-04-05 15:40:33 +02:00