Commit graph

2210 commits

Author SHA1 Message Date
Simone Mainardi
79b69c2e6f Flattens out the structure of lua flow callbacks 2019-09-17 18:22:55 +02:00
emanuele-f
c6668f05c1 Remove Nooder Networks list as no more available 2019-09-17 15:38:18 +02:00
Simone Mainardi
31f8f8ecb9 Hides submit button when no flow callbacks are available 2019-09-17 14:28:06 +02:00
Simone Mainardi
909408168b Improves flow check lua scripts loading efficiency 2019-09-17 14:24:29 +02:00
Simone Mainardi
e2c9e729a4 Implements flow check modules enable/disable prefs 2019-09-17 11:57:29 +02:00
emanuele-f
acac611c29 Add missing tags in last-timestamp check 2019-09-16 20:19:08 +02:00
emanuele-f
d29bb578c0 Add last-timestamp check to avoid adding invalid 0 points in the charts
The issue occurred in InfluxDB due to a delay between buffering and actual export.
This possible addresses #2853
2019-09-16 20:04:30 +02:00
emanuele-f
ef7d8614d9 Misconfigured DHCP range message fixes 2019-09-16 19:18:04 +02:00
Simone Mainardi
b3d595653e Initial implementation of lua flow callback scripts and blacklisted alerts
Partially implements #2842
2019-09-16 18:27:46 +02:00
Simone Mainardi
cc75605d0d Adds hyperlink to engaged alerts historical timeseries
Implements #2850
2019-09-13 15:38:41 +02:00
Simone Mainardi
968e21d984 Implements flow lua callbacks in the periodic activities thread 2019-09-12 15:36:41 +02:00
Simone Mainardi
b364116e7b Fixes inteface speed visualization with non-needed decimals 2019-09-11 18:10:28 +02:00
Simone Mainardi
f151fba989 Allows top talkers generation to be enabled/disabled 2019-09-11 16:42:26 +02:00
emanuele-f
e4f1d1f5d3 Avoid flow.lua overhead if all the modules are disabled 2019-09-11 14:52:26 +02:00
Simone Mainardi
165a53d18e Adds timeseries of ZMQ messages received and dropped 2019-09-10 19:49:16 +02:00
emanuele-f
4d62d68655 Add active alerted flows filter and count
Closes #2821
2019-09-10 17:52:22 +02:00
Simone Mainardi
9fe404772d Handles flow alerts and alert queues in view interfaces
Implements #2828
2019-09-10 15:48:39 +02:00
emanuele-f
b2a0956e0d Fix host disabled flow status settings page error 2019-09-10 15:10:27 +02:00
emanuele-f
935c2de722 Fix active flows error 2019-09-10 14:57:30 +02:00
emanuele-f
a76f929c34 Rename client/server fingerprints in MUD 2019-09-10 14:41:45 +02:00
emanuele-f
6e14f978d6 Flow alerts status cleanup 2019-09-10 13:12:11 +02:00
emanuele-f
c3fa094e99 Improve MUD prefs handling
Also implement a non-inline reloadPrefs Host method to avoid slowing down packet capture
2019-09-10 11:10:33 +02:00
emanuele-f
b731ad53f0 Fix MUD port for local connections 2019-09-10 09:24:34 +02:00
emanuele-f
91222ada6b Add Nooder Networks blacklist 2019-09-09 16:17:52 +02:00
emanuele-f
06f3077da8 Avoid excessive redis lookups for hosts when hosts cache is disabled 2019-09-09 12:42:35 +02:00
Alfredo Cardigliano
0d38479297 Fix formatMaliciousSignature with no flowstatus_info 2019-09-09 11:21:26 +02:00
emanuele-f
48d688d501 Add support for MAC MUD 2019-09-06 15:53:15 +02:00
emanuele-f
249a22e84f Add support for IPv6 MUD 2019-09-06 15:04:15 +02:00
emanuele-f
8682165b2f Improve MUD host 2019-09-06 15:04:15 +02:00
emanuele-f
d221475669 Fix MUD source/destination 2019-09-06 12:34:19 +02:00
emanuele-f
e9aa6b1703 Add flow.lua duration trace 2019-09-06 11:15:12 +02:00
emanuele-f
8d7331e519 Improve ghost network alert message 2019-09-06 10:45:59 +02:00
emanuele-f
bd2bf91882 Use server name as MUD peer name when possible 2019-09-05 19:31:42 +02:00
emanuele-f
1029440083 Add MUD delete button 2019-09-05 19:11:11 +02:00
emanuele-f
d9a44d615a Implement generic flow callbacks 2019-09-05 19:11:11 +02:00
Alfredo Cardigliano
38a53ec1fa Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page. 2019-09-05 17:55:00 +02:00
emanuele-f
1d248331f6 Implement optimized exists query in InfluxDB
This avoids returning too much results when using standard listSeries
2019-09-05 16:02:20 +02:00
Simone Mainardi
f9a8ca8002 Uses getStatsUpdateFreq as min ts step for non-packet interfaces 2019-09-05 14:31:04 +02:00
Alfredo Cardigliano
871bb63b61 Added default relevance per flow status 2019-09-05 11:53:42 +02:00
emanuele-f
1443d46a28 Little fix for commit 7bf8b8b1e5 2019-09-05 11:30:35 +02:00
Alfredo Cardigliano
141622f151 Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info 2019-09-04 22:20:51 +02:00
emanuele-f
7bf8b8b1e5 Use insertion_step when creating RRD files 2019-09-05 10:59:10 +02:00
emanuele-f
c97ef3d908 Implement host MUD recording and dump 2019-09-04 21:20:52 +02:00
emanuele-f
d630cce58a Fix script failures in SNMP message formatters 2019-09-04 15:36:46 +02:00
Alfredo Cardigliano
40bf86a81d Fix alert_endpoints/{syslog.lua,slack.lua} error 'attempt to index a nil value' 2019-09-04 12:57:57 +02:00
Alfredo Cardigliano
14c0338b64 Fix alert_endpoints_utils.lua error 'attempt to compare number with string' #2795 2019-09-04 12:44:53 +02:00
emanuele-f
b62e4183f0 Add ability to manually release an alert 2019-09-04 12:29:13 +02:00
emanuele-f
74f761d18b Allow calls to alerts_api.trigger/alerts_api.release outside periodic scripts 2019-09-03 19:20:50 +02:00
emanuele-f
08e616a5d4 Fix "Could not retrieve alert information" on pcap dump interfaces 2019-09-03 18:59:19 +02:00
emanuele-f
8e6cd5962a Fix blacklisted host alerts not generated when reading from PCAP dump 2019-09-03 17:50:08 +02:00