Commit graph

7092 commits

Author SHA1 Message Date
emanuele-f
5dd88985f4 Improve and fix DNS replies/requests ratio 2019-08-27 09:57:59 +02:00
Simone Mainardi
5a67b70bdd Updates HASSH when parsing eBPF data 2019-08-26 22:05:10 +02:00
Simone Mainardi
348b9e5a56 Adds HASSH hyperlinks and application name when eBPF is available 2019-08-26 21:53:43 +02:00
emanuele-f
d1caa6fbf1 Temporary disable request_reply_ratio to prevent too much alerts generation 2019-08-26 18:52:41 +02:00
emanuele-f
a0761db1e8 Implement replies/requests ratio alert 2019-08-26 18:38:34 +02:00
Simone Mainardi
65049b2cac Fixes crash when calling --help 2019-08-26 18:29:43 +02:00
emanuele-f
b0ba13f0bc Syn/flow flood alerts now use their own alert type 2019-08-26 17:36:27 +02:00
Simone Mainardi
a3821b5327 Minor SSL to JA3 changes 2019-08-26 16:58:34 +02:00
Simone Mainardi
11aa854cba Handles hosts HASSH fingerprints 2019-08-26 16:55:39 +02:00
emanuele-f
e92641920d Implement syn/flow flood victim alerts on local networks 2019-08-26 16:42:23 +02:00
Simone Mainardi
0353edb2a6 Adds ssh HASSH signatures into flows 2019-08-26 15:22:47 +02:00
Alfredo Cardigliano
226c9ce621 Support for deserialization of int32/int64/float with uint key 2019-08-26 12:56:05 +02:00
Alfredo Cardigliano
e1b57831eb Optimized getKeyId (25% performance boost with TLV) 2019-08-26 12:05:47 +02:00
Alfredo Cardigliano
6f8fe86c1a More information in collection trace 2019-08-26 10:21:38 +02:00
Alfredo Cardigliano
0260972c2e json2tlv improvements and error checking 2019-08-24 03:34:26 +02:00
Simone Mainardi
7d32ebae63 Moves Icinga2 perfdata from Service to CheckCommand 2019-08-24 14:04:27 +02:00
Simone Mainardi
b54bb1b10a Added Icinga2 README file with link to the docs 2019-08-24 13:58:46 +02:00
Simone Mainardi
8aae478a85 Adds Icinga2 integration documentation 2019-08-24 13:50:52 +02:00
Alfredo Cardigliano
faab4c6bbd Printing more info 2019-08-23 21:10:41 +02:00
Alfredo Cardigliano
70aa784e58 ZMQ struct update for TLV 2019-08-23 20:27:13 +02:00
Simone Mainardi
04adede2f8 Minor check_ntopng.py Icinga2 plugin fix during first check 2019-08-24 12:12:20 +02:00
Simone Mainardi
9980e9e7a7 Improves Icinga2 CheckCommand definition 2019-08-24 11:49:06 +02:00
cardigliano
d744883eed json2tlv cli fix 2019-08-23 19:38:44 +02:00
emanuele-f
abdc3d54a3 Handle alert config default values
Closes #2747
2019-08-23 19:23:05 +02:00
cardigliano
e82d347e3a json2tlv instruction and fixes 2019-08-23 19:13:25 +02:00
Simone Mainardi
41f21963ab Defines a new icinga2 template for ntopng-based services 2019-08-23 16:11:20 +02:00
Simone Mainardi
81f93ad882 Implements Icinga2 check plugin for host and host flow alerts 2019-08-23 14:53:12 +02:00
emanuele-f
16b839828d Reduce alerts drop message severity 2019-08-23 14:29:48 +02:00
emanuele-f
de7a5a49d8 Implement optimized hasAlerts to reduce alerts page load time 2019-08-23 13:00:52 +02:00
Simone Mainardi
c8fb20bed9 Makes alert database tables rowid as autoincrement 2019-08-23 10:31:56 +02:00
emanuele-f
2814a94077 Report curl error while a list download fails
Fixes #2777
2019-08-23 09:52:58 +02:00
Simone Mainardi
0f317b016c Implements Icinga2 command and service files 2019-08-22 18:37:56 +02:00
Alfredo Cardigliano
dd802760a7 README.suricata update 2019-08-22 17:56:50 +02:00
Simone Mainardi
061eb632a6 Initial implementation of the icinga2 checker plugin 2019-08-22 17:16:14 +02:00
emanuele-f
f43f4b7dd9 Add engaged alerts type exclusion filter
Fixes #2780
2019-08-22 16:30:45 +02:00
emanuele-f
7534fa4636 Fix ifid handling in disabled alerts 2019-08-22 15:53:29 +02:00
emanuele-f
65b2bd6ffb Fix missing alerts filters when a filter is in place 2019-08-22 15:25:54 +02:00
emanuele-f
3a3e4c6880 Properly handle alert filters dropdowns
Closes #2778
2019-08-22 15:13:54 +02:00
emanuele-f
e2a0299857 Add past alerts and flow alerts to host details 2019-08-22 12:50:11 +02:00
emanuele-f
1032af0d8f Add network engage_alerts timeseries 2019-08-21 17:07:58 +02:00
emanuele-f
69cd896a9f Implement engaged alerts and flow alerts timeseries 2019-08-21 16:57:14 +02:00
emanuele-f
f6056a9d12 Avoid js errors when min/max_val_idx is outside range
This can occur right after timeseries resolution pref is changed
2019-08-21 15:58:42 +02:00
emanuele-f
281a67e10d Refactor LocalHostStats::makeTsPoint and fix bug when ts ring is disabled 2019-08-21 15:52:16 +02:00
emanuele-f
2b2a74af79 Fix bad time resolution of values for some host exported timeseries
- active_flows.as_client
- active_flows.as_server
- total_flows.as_client
- total_flows.as_server
- contacts.as_client
- contacts.as_server
- DNS, TCP, ICMP stats

Fixes #2776
2019-08-21 15:37:17 +02:00
Alfredo Cardigliano
69758c0280 Instructions for using ntopng with nProbe using the sample configuration files 2019-08-21 10:43:33 +02:00
emanuele-f
951cb1a4e9 Fix alert issues due to invalid granularities 2019-08-21 10:27:15 +02:00
emanuele-f
7893c1f78a Implement RTT host engage/release alert 2019-08-20 19:02:58 +02:00
emanuele-f
87ba28195b Add support to engage/release on external alerts 2019-08-20 19:02:58 +02:00
Alfredo Cardigliano
79ebfe83bf Added ntopng.conf.nprobe.sample to the rpm 2019-08-20 18:41:59 +02:00
Alfredo Cardigliano
22b27119a5 Sample configuration file for ntopng as ZMQ collector (#2765) 2019-08-20 17:35:04 +02:00