Simone Mainardi
|
79b69c2e6f
|
Flattens out the structure of lua flow callbacks
|
2019-09-17 18:22:55 +02:00 |
|
emanuele-f
|
c6668f05c1
|
Remove Nooder Networks list as no more available
|
2019-09-17 15:38:18 +02:00 |
|
Simone Mainardi
|
31f8f8ecb9
|
Hides submit button when no flow callbacks are available
|
2019-09-17 14:28:06 +02:00 |
|
Simone Mainardi
|
909408168b
|
Improves flow check lua scripts loading efficiency
|
2019-09-17 14:24:29 +02:00 |
|
Simone Mainardi
|
e2c9e729a4
|
Implements flow check modules enable/disable prefs
|
2019-09-17 11:57:29 +02:00 |
|
emanuele-f
|
acac611c29
|
Add missing tags in last-timestamp check
|
2019-09-16 20:19:08 +02:00 |
|
emanuele-f
|
d29bb578c0
|
Add last-timestamp check to avoid adding invalid 0 points in the charts
The issue occurred in InfluxDB due to a delay between buffering and actual export.
This possible addresses #2853
|
2019-09-16 20:04:30 +02:00 |
|
emanuele-f
|
ef7d8614d9
|
Misconfigured DHCP range message fixes
|
2019-09-16 19:18:04 +02:00 |
|
Simone Mainardi
|
b3d595653e
|
Initial implementation of lua flow callback scripts and blacklisted alerts
Partially implements #2842
|
2019-09-16 18:27:46 +02:00 |
|
Simone Mainardi
|
cc75605d0d
|
Adds hyperlink to engaged alerts historical timeseries
Implements #2850
|
2019-09-13 15:38:41 +02:00 |
|
Simone Mainardi
|
968e21d984
|
Implements flow lua callbacks in the periodic activities thread
|
2019-09-12 15:36:41 +02:00 |
|
Simone Mainardi
|
b364116e7b
|
Fixes inteface speed visualization with non-needed decimals
|
2019-09-11 18:10:28 +02:00 |
|
Simone Mainardi
|
f151fba989
|
Allows top talkers generation to be enabled/disabled
|
2019-09-11 16:42:26 +02:00 |
|
emanuele-f
|
e4f1d1f5d3
|
Avoid flow.lua overhead if all the modules are disabled
|
2019-09-11 14:52:26 +02:00 |
|
Simone Mainardi
|
165a53d18e
|
Adds timeseries of ZMQ messages received and dropped
|
2019-09-10 19:49:16 +02:00 |
|
emanuele-f
|
4d62d68655
|
Add active alerted flows filter and count
Closes #2821
|
2019-09-10 17:52:22 +02:00 |
|
Simone Mainardi
|
9fe404772d
|
Handles flow alerts and alert queues in view interfaces
Implements #2828
|
2019-09-10 15:48:39 +02:00 |
|
emanuele-f
|
b2a0956e0d
|
Fix host disabled flow status settings page error
|
2019-09-10 15:10:27 +02:00 |
|
emanuele-f
|
935c2de722
|
Fix active flows error
|
2019-09-10 14:57:30 +02:00 |
|
emanuele-f
|
a76f929c34
|
Rename client/server fingerprints in MUD
|
2019-09-10 14:41:45 +02:00 |
|
emanuele-f
|
6e14f978d6
|
Flow alerts status cleanup
|
2019-09-10 13:12:11 +02:00 |
|
emanuele-f
|
c3fa094e99
|
Improve MUD prefs handling
Also implement a non-inline reloadPrefs Host method to avoid slowing down packet capture
|
2019-09-10 11:10:33 +02:00 |
|
emanuele-f
|
b731ad53f0
|
Fix MUD port for local connections
|
2019-09-10 09:24:34 +02:00 |
|
emanuele-f
|
91222ada6b
|
Add Nooder Networks blacklist
|
2019-09-09 16:17:52 +02:00 |
|
emanuele-f
|
06f3077da8
|
Avoid excessive redis lookups for hosts when hosts cache is disabled
|
2019-09-09 12:42:35 +02:00 |
|
Alfredo Cardigliano
|
0d38479297
|
Fix formatMaliciousSignature with no flowstatus_info
|
2019-09-09 11:21:26 +02:00 |
|
emanuele-f
|
48d688d501
|
Add support for MAC MUD
|
2019-09-06 15:53:15 +02:00 |
|
emanuele-f
|
249a22e84f
|
Add support for IPv6 MUD
|
2019-09-06 15:04:15 +02:00 |
|
emanuele-f
|
8682165b2f
|
Improve MUD host
|
2019-09-06 15:04:15 +02:00 |
|
emanuele-f
|
d221475669
|
Fix MUD source/destination
|
2019-09-06 12:34:19 +02:00 |
|
emanuele-f
|
e9aa6b1703
|
Add flow.lua duration trace
|
2019-09-06 11:15:12 +02:00 |
|
emanuele-f
|
8d7331e519
|
Improve ghost network alert message
|
2019-09-06 10:45:59 +02:00 |
|
emanuele-f
|
bd2bf91882
|
Use server name as MUD peer name when possible
|
2019-09-05 19:31:42 +02:00 |
|
emanuele-f
|
1029440083
|
Add MUD delete button
|
2019-09-05 19:11:11 +02:00 |
|
emanuele-f
|
d9a44d615a
|
Implement generic flow callbacks
|
2019-09-05 19:11:11 +02:00 |
|
Alfredo Cardigliano
|
38a53ec1fa
|
Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page.
|
2019-09-05 17:55:00 +02:00 |
|
emanuele-f
|
1d248331f6
|
Implement optimized exists query in InfluxDB
This avoids returning too much results when using standard listSeries
|
2019-09-05 16:02:20 +02:00 |
|
Simone Mainardi
|
f9a8ca8002
|
Uses getStatsUpdateFreq as min ts step for non-packet interfaces
|
2019-09-05 14:31:04 +02:00 |
|
Alfredo Cardigliano
|
871bb63b61
|
Added default relevance per flow status
|
2019-09-05 11:53:42 +02:00 |
|
emanuele-f
|
1443d46a28
|
Little fix for commit 7bf8b8b1e5
|
2019-09-05 11:30:35 +02:00 |
|
Alfredo Cardigliano
|
141622f151
|
Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info
|
2019-09-04 22:20:51 +02:00 |
|
emanuele-f
|
7bf8b8b1e5
|
Use insertion_step when creating RRD files
|
2019-09-05 10:59:10 +02:00 |
|
emanuele-f
|
c97ef3d908
|
Implement host MUD recording and dump
|
2019-09-04 21:20:52 +02:00 |
|
emanuele-f
|
d630cce58a
|
Fix script failures in SNMP message formatters
|
2019-09-04 15:36:46 +02:00 |
|
Alfredo Cardigliano
|
40bf86a81d
|
Fix alert_endpoints/{syslog.lua,slack.lua} error 'attempt to index a nil value'
|
2019-09-04 12:57:57 +02:00 |
|
Alfredo Cardigliano
|
14c0338b64
|
Fix alert_endpoints_utils.lua error 'attempt to compare number with string' #2795
|
2019-09-04 12:44:53 +02:00 |
|
emanuele-f
|
b62e4183f0
|
Add ability to manually release an alert
|
2019-09-04 12:29:13 +02:00 |
|
emanuele-f
|
74f761d18b
|
Allow calls to alerts_api.trigger/alerts_api.release outside periodic scripts
|
2019-09-03 19:20:50 +02:00 |
|
emanuele-f
|
08e616a5d4
|
Fix "Could not retrieve alert information" on pcap dump interfaces
|
2019-09-03 18:59:19 +02:00 |
|
emanuele-f
|
8e6cd5962a
|
Fix blacklisted host alerts not generated when reading from PCAP dump
|
2019-09-03 17:50:08 +02:00 |
|