Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
Simone Mainardi
1af92887fe
Fixes wrong syslog priorities
2019-10-09 01:09:29 +02:00
Simone Mainardi
6bcb8b18a2
Prevents TCP state filter from being shown on non-TCP flows
2019-10-07 18:51:16 +02:00
emanuele-f
1bf89fdb4d
Add server malicious JA3 signature check and improve alert information
...
Closes #2880
2019-09-24 13:30:32 +02:00
emanuele-f
beddb433b7
Add a message when POST form submission fails
2019-09-23 16:00:25 +02:00
emanuele-f
54843a7865
Fix n2disk license validation error
...
Fixes #2872
2019-09-20 12:12:02 +02:00
emanuele-f
50c5395a1c
Replace flow status warning icon to avoid confusion with alerted state
2019-09-18 15:33:33 +02:00
Simone Mainardi
b3d595653e
Initial implementation of lua flow callback scripts and blacklisted alerts
...
Partially implements #2842
2019-09-16 18:27:46 +02:00
Simone Mainardi
b364116e7b
Fixes inteface speed visualization with non-needed decimals
2019-09-11 18:10:28 +02:00
Simone Mainardi
f151fba989
Allows top talkers generation to be enabled/disabled
2019-09-11 16:42:26 +02:00
emanuele-f
6e14f978d6
Flow alerts status cleanup
2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
0d38479297
Fix formatMaliciousSignature with no flowstatus_info
2019-09-09 11:21:26 +02:00
Alfredo Cardigliano
38a53ec1fa
Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page.
2019-09-05 17:55:00 +02:00
Alfredo Cardigliano
141622f151
Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info
2019-09-04 22:20:51 +02:00
emanuele-f
a0d8cd7595
Add l4_proto_to_id
2019-09-02 20:08:38 +02:00
Alfredo Cardigliano
13d032d185
Formatting IDS alerts
2019-08-29 11:20:41 +02:00
emanuele-f
a37bb425ea
Add JA3 signature link in alerts
2019-08-28 18:41:17 +02:00
emanuele-f
b66b71fd7e
Implement alert on JA3 malicious signatures
...
Closes #2788
2019-08-28 18:33:13 +02:00
Simone Mainardi
6300b3ce4e
Fixes flows explorer localtime calculation when time is DST
...
Fixes #2771
2019-08-20 16:45:40 +02:00
Emanuele Faranda
c829c4c3c3
Unify os ( #2755 )
...
* Unify OS information.
Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.
* Fix network discovery OS
* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46
Implement alerts based on potentially dangerous flows nDPI classification
2019-08-07 14:29:06 +02:00
emanuele-f
e82c66fb7c
Fix mixed global/per-interface nindex checks
...
Fix #2725
2019-08-01 11:53:55 +02:00
emanuele-f
ba91b62f0a
Allow spaces in password fields
...
Fixes #2732
2019-08-01 11:12:30 +02:00
Simone Mainardi
c9223590d9
Workaround to handle \n forcefully set when decoding ZMQ tlv
2019-07-31 16:06:15 +02:00
Simone Mainardi
5270d09490
Allows alerts to be configured on view interfaces
2019-07-19 12:43:31 +02:00
emanuele-f
2cdc180c9b
Remove unused function
2019-07-16 14:09:32 +02:00
Simone Mainardi
883b99dce9
Fixes attempt to index a nil value with Syslog alerts
2019-07-16 13:05:27 +02:00
Simone Mainardi
cc97be85ca
Fixes host alerts key generation
2019-07-15 22:54:09 +02:00
Alfredo Cardigliano
2e7e9dcb70
Fixed l4_proto_to_string to return the proto ID with unknown protocols
2019-07-12 16:34:32 +02:00
Alfredo Cardigliano
c63831bfa3
Computing L4 protocol statistics for flows
2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236
Filter flows by L4 protocol
2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
b4f21d1d9b
Moved host 'name' from hostinfo2url which is not supported (and leads to errors in lint)
2019-07-11 14:59:12 +02:00
emanuele-f
ecdf88b8a0
Host alerts migration to new api
2019-07-09 18:50:45 +02:00
emanuele-f
0748ef191d
Initial system interface data delete
2019-07-04 11:09:33 +02:00
emanuele-f
7b936a1a4c
Mesbehaving flows documentation
2019-07-02 16:32:12 +02:00
Simone Mainardi
8c9bf94f4b
Handles possibly missing nindex_utils as in Windows
2019-07-02 16:27:34 +02:00
Simone Mainardi
ae4770fe7d
Improves visualization of containers/pods in flows
2019-06-27 17:00:17 +02:00
emanuele-f
cfa9986671
Implement InfluxDB export statistics
2019-06-10 15:52:06 +02:00
emanuele-f
3ecc032c14
Hide system properties for restricted users
...
This will also hide SNMP devices
2019-06-03 12:42:23 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
...
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
emanuele-f
9d72c72cb3
Fix warning sign on normal flows
2019-05-31 09:39:52 +02:00
Luca Deri
e03b7f0f5f
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
2019-05-29 00:17:39 +02:00
Luca Deri
93ed8c009a
Added SSL protocol handling
2019-05-29 00:12:26 +02:00
emanuele-f
1c9a4d3461
Implement ICMP data exfiltration alerts
...
Closes #256
2019-05-28 10:37:59 +02:00
Luca Deri
1228ddc2ca
Added unsafe SSL ciphers detection
2019-05-20 23:19:53 +02:00
Alfredo Cardigliano
22b4d1d7bc
Description fix for icmp type 8 (see #2597 )
2019-05-20 19:25:20 +02:00
Alfredo Cardigliano
9cdb84a875
Implements filtering per flow status in the active flows page
2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
3b99717db6
TCP connection issues threshold and double severity level based on ratio ( #2593 )
2019-05-20 16:07:48 +02:00
emanuele-f
cd7d987ac8
Fix long lived flow status
...
Fixes #2550
2019-05-13 18:01:40 +02:00
emanuele-f
b01f104a36
Move process information into client/server column
2019-04-29 12:09:44 +02:00