Commit graph

247 commits

Author SHA1 Message Date
Simone Mainardi
5317d23fc2 Disables ZMQ flow collection drop alerts (waiting to make them engaged)
Revert "Implements ZMQ flow collection drops alerts"

This reverts commit d21e8d6f3e.
2019-01-24 15:02:22 +01:00
Simone Mainardi
d21e8d6f3e Implements ZMQ flow collection drops alerts 2019-01-23 19:42:18 +01:00
Simone Mainardi
2fc083b50b Adds testing facility for periodic checks 2019-01-17 16:13:39 +01:00
Alfredo Cardigliano
bb6937ca66 Interface Status Change Alerts and Interface Discards/Errors Alerts preferences 2019-01-11 12:53:19 +01:00
Alfredo Cardigliano
66e497ec01 new alert type alert_port_errors 2019-01-11 11:41:09 +01:00
Alfredo Cardigliano
00e528e3d7 new get_alerts_data.lua endpoint with non-formatted data, UI now uses get_alerts_table_data.lua 2019-01-10 10:20:27 +01:00
Alfredo Cardigliano
2002128eb4 Webhook export module for exporting alarms (implements #2251) 2019-01-07 22:09:15 +01:00
Simone Mainardi
fcc66a4b05 Updates ntopctl to handle service n2disk-ntopng 2019-01-02 15:49:16 +01:00
emanuele-f
11a99722e0 Implement network data delete
IPv4 network masks /24 to /32 are now supported.

Fix #2257
2019-01-02 13:09:48 +01:00
emanuele-f
f8c074bf03 Use cross platform ntop.msleep 2018-12-18 18:53:19 +01:00
emanuele-f
453f515feb Windows fixes 2018-12-18 10:43:45 +01:00
Luca Deri
32c1bf8243 Removed old Lua leftover 2018-12-18 00:28:27 +01:00
emanuele-f
af02c76c8b Implement scan detection alerts for remote hosts
Closes #2068
2018-12-14 12:28:23 +01:00
Alfredo Cardigliano
1ecbb2d72d reworked delete_host logging to provide a link to the host 2018-12-07 12:16:23 +01:00
Alfredo Cardigliano
9833d392e6 Improved user activity logs with link to the host and ifid in the alert json 2018-12-07 11:11:37 +01:00
Alfredo Cardigliano
b67c3ef8b9 Improved visualization for live traffic capture activities 2018-12-07 10:45:25 +01:00
Alfredo Cardigliano
dca54aa8e4 Enabled tracking of alert endpoints settings changes 2018-12-06 22:59:17 +01:00
Alfredo Cardigliano
2ea6a5a3bc Tracking SNMP device add/remove 2018-12-06 15:58:22 +01:00
Alfredo Cardigliano
f2e5f0b30d Added details for unhandled activities 2018-12-06 12:35:13 +01:00
Alfredo Cardigliano
f249f0bbb9 restricted nIndexSelect logging to live_flows_extraction 2018-12-06 12:23:34 +01:00
Alfredo Cardigliano
48c20ec844 Tracking flows data download 2018-12-06 10:58:19 +01:00
Alfredo Cardigliano
9241a3c3e4 Added tracking of selected preferences (alerts settings) 2018-12-05 06:41:56 +01:00
Alfredo Cardigliano
bc7283ce3f Tracking more user activities: alerts deleted, all/inactive/interface data deleted, host data deleted, all/host data exproted 2018-12-05 04:36:30 +01:00
Alfredo Cardigliano
a087fb3bc9 Added tracker.log(), tracking host_get_json 2018-12-05 01:56:15 +01:00
Alfredo Cardigliano
23402e7261 Tracking more user activities: downloaded pcaps, live capture, live extraction, added/deleted users, password changed 2018-12-05 00:55:34 +01:00
Alfredo Cardigliano
bec67745cf tracking n2n/n2disk service stop/start 2018-12-04 23:22:08 +01:00
Alfredo Cardigliano
aab9e384ed Logging user login via alerts, added 'user activity' alerts type 2018-12-04 20:55:21 +01:00
Simone Mainardi
e72fdc79fe Lua 5.3 loadstring compat fix 2018-11-26 15:03:42 +01:00
Simone Mainardi
ddf49ef106 Implements remote-to-remote host alerts
Implements #2057
2018-10-10 12:16:59 +02:00
emanuele-f
457dcb3457 Implement Device Protocols Alerts 2018-10-02 22:35:00 +02:00
emanuele-f
3dc4a8dc59 Fix slow stats update alert 2018-09-27 21:08:02 +02:00
emanuele-f
03bf331c3e Add alert for slow stats update and reduce flow alert generation
This avoids SQLite database flooding during an ongoing attack which can block stats update
2018-09-27 19:31:38 +02:00
emanuele-f
eb79229048 Implement alerts links to graphs 2018-09-20 20:18:12 +02:00
Simone Mainardi
8a055b39c5 Implements a lua endpoint to send alerts to syslog
Implements #1973
Implements #1954
2018-09-05 15:26:57 +02:00
Simone Mainardi
dfb2401789 Reverts allowed interfaces fixes to make room for simplified code 2018-08-20 22:51:51 +02:00
Simone Mainardi
28b19afd8a Fixes security issues with interfaces selection
Fixes #1918
2018-08-20 13:37:32 +02:00
Simone Mainardi
d12a4d3009 Creates utility functions to handle restart after anomalous termination 2018-08-01 18:11:17 +02:00
Simone Mainardi
b1684fc25f Implements detection and alerting of anomalous terminations 2018-08-01 16:58:15 +02:00
emanuele-f
2f47b4a87e Add support for a custom user defined alert endpoint script 2018-07-09 13:01:35 +02:00
emanuele-f
a784ccaf60 Add interface local hosts number threshold alert 2018-07-09 11:59:06 +02:00
Simone Mainardi
67f7cdb47e Implements Netfilter queue flush alerts 2018-06-15 16:23:05 +02:00
Simone Mainardi
251cc57970 Minor SNMP localization fix 2018-05-16 16:18:50 +02:00
Simone Mainardi
9dd2ae14a8 Implements SNMP iterfaces status change alerts 2018-05-15 15:19:09 +02:00
Simone Mainardi
8048fa50af Fixes attempts to index nil alert tables 2018-05-14 15:14:26 +02:00
emanuele-f
89d203883f Add support for custom categories lists
- Extend malware hosts from list
- Read web mining hosts from list and generate alerts
2018-05-10 17:12:53 +02:00
emanuele-f
09c24c377e Unify engage/release host alert lua API 2018-05-07 20:26:00 +02:00
Luca Deri
afcfc6a0f0 Cosmetic fix 2018-04-14 18:22:51 +02:00
Simone Mainardi
72dacb7459 Prevents unnecessary prefs dump upon alerts check 2018-04-13 18:25:40 +02:00
Luca Deri
6d47e659f1 Reworked alerts
Added informative event when ntopng starts/stops
Fixed packet capture bug on ODX (and other BSD flavous)
Renamed #ifdef linux to #ifdef __linux__ to ease portabiity across architectures
2018-04-13 18:10:19 +02:00
Luca Deri
5c56afba53 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2018-04-13 17:21:33 +02:00