71 commits

Author	SHA1	Message	Date
emanuele-f	ef7d8614d9	Misconfigured DHCP range message fixes	2019-09-16 19:18:04 +02:00
emanuele-f	6e14f978d6	Flow alerts status cleanup	2019-09-10 13:12:11 +02:00
emanuele-f	8d7331e519	Improve ghost network alert message	2019-09-06 10:45:59 +02:00
Alfredo Cardigliano	38a53ec1fa	Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page.	2019-09-05 17:55:00 +02:00
Alfredo Cardigliano	141622f151	Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info	2019-09-04 22:20:51 +02:00
emanuele-f	d630cce58a	Fix script failures in SNMP message formatters	2019-09-04 15:36:46 +02:00
Alfredo Cardigliano	13d032d185	Formatting IDS alerts	2019-08-29 11:20:41 +02:00
emanuele-f	b66b71fd7e	Implement alert on JA3 malicious signatures ... Closes #2788	2019-08-28 18:33:13 +02:00
emanuele-f	a8cb972e7d	Implement ghost networks alerts	2019-08-28 16:42:18 +02:00
emanuele-f	3bf6ed1ecd	Add syn-vs-rst and misbehaving-vs-total-flows alerts	2019-08-27 16:33:53 +02:00
emanuele-f	300ea49b10	Little localization fix	2019-08-27 14:37:01 +02:00
emanuele-f	01c586119e	Remove ICMP ratio alert and enable ratio alerts by default in 5mins	2019-08-27 14:32:24 +02:00
emanuele-f	b3bdfcff32	Cleanup of the too-many-drops interface alert	2019-08-27 13:04:53 +02:00
emanuele-f	57e623da04	Implement ICMP and HTTP requests vs replies ratio alert	2019-08-27 10:33:08 +02:00
emanuele-f	5dd88985f4	Improve and fix DNS replies/requests ratio	2019-08-27 09:57:59 +02:00
emanuele-f	a0761db1e8	Implement replies/requests ratio alert	2019-08-26 18:38:34 +02:00
emanuele-f	b0ba13f0bc	Syn/flow flood alerts now use their own alert type	2019-08-26 17:36:27 +02:00
emanuele-f	951cb1a4e9	Fix alert issues due to invalid granularities	2019-08-21 10:27:15 +02:00
emanuele-f	7893c1f78a	Implement RTT host engage/release alert	2019-08-20 19:02:58 +02:00
emanuele-f	81a9963e46	Implement alerts based on potentially dangerous flows nDPI classification	2019-08-07 14:29:06 +02:00
emanuele-f	b48a4e2127	Fix outside DHCP range alert script failure	2019-07-31 11:23:51 +02:00
emanuele-f	d38cd23615	Move C alerts to unified alerts_queue	2019-07-30 11:43:18 +02:00
emanuele-f	c183a577be	Alerts API cleanup and JSON migration	2019-07-29 15:17:22 +02:00
emanuele-f	09fb8667e2	Add ability to disable specific alert types on alertables	2019-07-22 23:37:23 +02:00
emanuele-f	749a64e789	Release alerts on idle hosts	2019-07-19 10:54:05 +02:00
emanuele-f	0d7195d6e3	Fix db index	2019-07-15 15:51:47 +02:00
emanuele-f	9fa3b7920c	Add trace when alerts queue limit is exceeded	2019-07-15 15:37:20 +02:00
Simone Mainardi	26f2e264c4	Allows alerts to be configured only at given periodicity (gui)	2019-07-15 12:14:17 +02:00
Simone Mainardi	fb891bbf2f	Finishes implementation of new flood checks in lua	2019-07-12 19:14:30 +02:00
emanuele-f	083e51cdee	Improve field_units i18n	2019-07-12 19:03:33 +02:00
emanuele-f	3f002ad223	field_units i18n fix	2019-07-12 16:17:01 +02:00
emanuele-f	5e0b8b496e	Remove autorelease logic based on periodicity and update database schema	2019-07-12 12:46:21 +02:00
emanuele-f	f6ff3ad010	Rework interface threshold alerts definition	2019-07-11 19:11:33 +02:00
emanuele-f	b16136f5b4	Rework host threshold alerts definition	2019-07-11 19:11:33 +02:00
emanuele-f	98f95fc306	Implement host modular alerts config gui	2019-07-11 13:02:34 +02:00
emanuele-f	1d9a8951db	Initial modular alerts config gui implementation	2019-07-11 12:42:25 +02:00
emanuele-f	737295bd93	Fix missing network entity link	2019-07-10 14:50:25 +02:00
emanuele-f	1dbeb118bf	Interface threshold cross alerts now use the new api	2019-07-10 12:58:17 +02:00
emanuele-f	ecdf88b8a0	Host alerts migration to new api	2019-07-09 18:50:45 +02:00
emanuele-f	7b936a1a4c	Mesbehaving flows documentation	2019-07-02 16:32:12 +02:00
Simone Mainardi	1019f024e4	Adds influxdb dropped points alert	2019-06-28 18:21:25 +02:00
emanuele-f	8a239f97f4	Trace periodic activities duration and generate an alert for long lasting ones	2019-06-21 11:41:38 +02:00
emanuele-f	a2f4dc0c24	Add alert generated when InfluxDB export queue is too long	2019-06-19 15:33:56 +02:00
Simone Mainardi	5fa59b21d9	Implements alerts for hosts unreachable and rtt too high	2019-06-14 00:22:52 +02:00
Alfredo Cardigliano	99aa386a12	Implements alerts on SNMP port load exceeding a configured threshold (%) based on port speed (#2223)	2019-05-30 15:18:46 +02:00
Alfredo Cardigliano	7590f629fe	Alerts on duplex status change on SNMP interface (#2349)	2019-05-23 12:23:45 +02:00
Simone Mainardi	9cfd5ba968	Fixes throughput alerts format	2019-05-02 10:31:02 +02:00
emanuele-f	fa4330bbfd	Implement alert for IP addresses assigned outside the configured DHCP ranges	2019-04-11 17:01:39 +02:00
Alfredo Cardigliano	7ce1150a69	IDS flow alerts notification	2019-04-04 16:03:48 +02:00
Simone Mainardi	5e5ad77cec	Implements broadcast domain too large alerts	2019-04-01 14:20:57 +02:00