emanuele-f
|
5dd88985f4
|
Improve and fix DNS replies/requests ratio
|
2019-08-27 09:57:59 +02:00 |
|
Simone Mainardi
|
5a67b70bdd
|
Updates HASSH when parsing eBPF data
|
2019-08-26 22:05:10 +02:00 |
|
Simone Mainardi
|
348b9e5a56
|
Adds HASSH hyperlinks and application name when eBPF is available
|
2019-08-26 21:53:43 +02:00 |
|
emanuele-f
|
d1caa6fbf1
|
Temporary disable request_reply_ratio to prevent too much alerts generation
|
2019-08-26 18:52:41 +02:00 |
|
emanuele-f
|
a0761db1e8
|
Implement replies/requests ratio alert
|
2019-08-26 18:38:34 +02:00 |
|
Simone Mainardi
|
65049b2cac
|
Fixes crash when calling --help
|
2019-08-26 18:29:43 +02:00 |
|
emanuele-f
|
b0ba13f0bc
|
Syn/flow flood alerts now use their own alert type
|
2019-08-26 17:36:27 +02:00 |
|
Simone Mainardi
|
a3821b5327
|
Minor SSL to JA3 changes
|
2019-08-26 16:58:34 +02:00 |
|
Simone Mainardi
|
11aa854cba
|
Handles hosts HASSH fingerprints
|
2019-08-26 16:55:39 +02:00 |
|
emanuele-f
|
e92641920d
|
Implement syn/flow flood victim alerts on local networks
|
2019-08-26 16:42:23 +02:00 |
|
Simone Mainardi
|
0353edb2a6
|
Adds ssh HASSH signatures into flows
|
2019-08-26 15:22:47 +02:00 |
|
Alfredo Cardigliano
|
226c9ce621
|
Support for deserialization of int32/int64/float with uint key
|
2019-08-26 12:56:05 +02:00 |
|
Alfredo Cardigliano
|
e1b57831eb
|
Optimized getKeyId (25% performance boost with TLV)
|
2019-08-26 12:05:47 +02:00 |
|
Alfredo Cardigliano
|
6f8fe86c1a
|
More information in collection trace
|
2019-08-26 10:21:38 +02:00 |
|
Alfredo Cardigliano
|
0260972c2e
|
json2tlv improvements and error checking
|
2019-08-24 03:34:26 +02:00 |
|
Simone Mainardi
|
7d32ebae63
|
Moves Icinga2 perfdata from Service to CheckCommand
|
2019-08-24 14:04:27 +02:00 |
|
Simone Mainardi
|
b54bb1b10a
|
Added Icinga2 README file with link to the docs
|
2019-08-24 13:58:46 +02:00 |
|
Simone Mainardi
|
8aae478a85
|
Adds Icinga2 integration documentation
|
2019-08-24 13:50:52 +02:00 |
|
Alfredo Cardigliano
|
faab4c6bbd
|
Printing more info
|
2019-08-23 21:10:41 +02:00 |
|
Alfredo Cardigliano
|
70aa784e58
|
ZMQ struct update for TLV
|
2019-08-23 20:27:13 +02:00 |
|
Simone Mainardi
|
04adede2f8
|
Minor check_ntopng.py Icinga2 plugin fix during first check
|
2019-08-24 12:12:20 +02:00 |
|
Simone Mainardi
|
9980e9e7a7
|
Improves Icinga2 CheckCommand definition
|
2019-08-24 11:49:06 +02:00 |
|
cardigliano
|
d744883eed
|
json2tlv cli fix
|
2019-08-23 19:38:44 +02:00 |
|
emanuele-f
|
abdc3d54a3
|
Handle alert config default values
Closes #2747
|
2019-08-23 19:23:05 +02:00 |
|
cardigliano
|
e82d347e3a
|
json2tlv instruction and fixes
|
2019-08-23 19:13:25 +02:00 |
|
Simone Mainardi
|
41f21963ab
|
Defines a new icinga2 template for ntopng-based services
|
2019-08-23 16:11:20 +02:00 |
|
Simone Mainardi
|
81f93ad882
|
Implements Icinga2 check plugin for host and host flow alerts
|
2019-08-23 14:53:12 +02:00 |
|
emanuele-f
|
16b839828d
|
Reduce alerts drop message severity
|
2019-08-23 14:29:48 +02:00 |
|
emanuele-f
|
de7a5a49d8
|
Implement optimized hasAlerts to reduce alerts page load time
|
2019-08-23 13:00:52 +02:00 |
|
Simone Mainardi
|
c8fb20bed9
|
Makes alert database tables rowid as autoincrement
|
2019-08-23 10:31:56 +02:00 |
|
emanuele-f
|
2814a94077
|
Report curl error while a list download fails
Fixes #2777
|
2019-08-23 09:52:58 +02:00 |
|
Simone Mainardi
|
0f317b016c
|
Implements Icinga2 command and service files
|
2019-08-22 18:37:56 +02:00 |
|
Alfredo Cardigliano
|
dd802760a7
|
README.suricata update
|
2019-08-22 17:56:50 +02:00 |
|
Simone Mainardi
|
061eb632a6
|
Initial implementation of the icinga2 checker plugin
|
2019-08-22 17:16:14 +02:00 |
|
emanuele-f
|
f43f4b7dd9
|
Add engaged alerts type exclusion filter
Fixes #2780
|
2019-08-22 16:30:45 +02:00 |
|
emanuele-f
|
7534fa4636
|
Fix ifid handling in disabled alerts
|
2019-08-22 15:53:29 +02:00 |
|
emanuele-f
|
65b2bd6ffb
|
Fix missing alerts filters when a filter is in place
|
2019-08-22 15:25:54 +02:00 |
|
emanuele-f
|
3a3e4c6880
|
Properly handle alert filters dropdowns
Closes #2778
|
2019-08-22 15:13:54 +02:00 |
|
emanuele-f
|
e2a0299857
|
Add past alerts and flow alerts to host details
|
2019-08-22 12:50:11 +02:00 |
|
emanuele-f
|
1032af0d8f
|
Add network engage_alerts timeseries
|
2019-08-21 17:07:58 +02:00 |
|
emanuele-f
|
69cd896a9f
|
Implement engaged alerts and flow alerts timeseries
|
2019-08-21 16:57:14 +02:00 |
|
emanuele-f
|
f6056a9d12
|
Avoid js errors when min/max_val_idx is outside range
This can occur right after timeseries resolution pref is changed
|
2019-08-21 15:58:42 +02:00 |
|
emanuele-f
|
281a67e10d
|
Refactor LocalHostStats::makeTsPoint and fix bug when ts ring is disabled
|
2019-08-21 15:52:16 +02:00 |
|
emanuele-f
|
2b2a74af79
|
Fix bad time resolution of values for some host exported timeseries
- active_flows.as_client
- active_flows.as_server
- total_flows.as_client
- total_flows.as_server
- contacts.as_client
- contacts.as_server
- DNS, TCP, ICMP stats
Fixes #2776
|
2019-08-21 15:37:17 +02:00 |
|
Alfredo Cardigliano
|
69758c0280
|
Instructions for using ntopng with nProbe using the sample configuration files
|
2019-08-21 10:43:33 +02:00 |
|
emanuele-f
|
951cb1a4e9
|
Fix alert issues due to invalid granularities
|
2019-08-21 10:27:15 +02:00 |
|
emanuele-f
|
7893c1f78a
|
Implement RTT host engage/release alert
|
2019-08-20 19:02:58 +02:00 |
|
emanuele-f
|
87ba28195b
|
Add support to engage/release on external alerts
|
2019-08-20 19:02:58 +02:00 |
|
Alfredo Cardigliano
|
79ebfe83bf
|
Added ntopng.conf.nprobe.sample to the rpm
|
2019-08-20 18:41:59 +02:00 |
|
Alfredo Cardigliano
|
22b27119a5
|
Sample configuration file for ntopng as ZMQ collector (#2765)
|
2019-08-20 17:35:04 +02:00 |
|