Commit graph

4302 commits

Author SHA1 Message Date
Alfredo Cardigliano
3ad0e12795 Add support for cli/srv port filtering in flow alerts 2021-05-10 18:08:42 +02:00
Simone Mainardi
6fa3a2cc27 Fixes duration for engaged alerts always set to <1 second 2021-05-10 15:42:46 +02:00
Simone Mainardi
95d27351af Removes a debug print 2021-05-10 15:19:51 +02:00
Simone Mainardi
457af5d222 Fixes flapping of Lua-triggered engaged alerts
Fixes #5304
2021-05-10 15:18:19 +02:00
Simone Mainardi
bfc9e72193 Fixes label for zero TCP window alerts 2021-05-10 13:02:53 +02:00
Simone Mainardi
74603b8fe6 Implements alerts summary page for engaged alerts 2021-05-10 12:20:27 +02:00
Matteo Biscosi
1bb5fac8be Removed unused variable
Implements #5302
2021-05-10 11:14:31 +02:00
Matteo Biscosi
aaadd8728f Changed aesthetical attacker/victim alert table view
Implements #5302
2021-05-10 11:12:14 +02:00
Alfredo Cardigliano
16da9a3961 Cleanup unised alerts code 2021-05-10 11:10:35 +02:00
Alfredo Cardigliano
450b6c4575 Remove AlertsManager (no longer used). Add back entity value or 5-tuple to exported alerts (fix #5285) 2021-05-10 10:57:43 +02:00
Matteo Biscosi
11b37bc695 Added victim and attacker columns to flow/host alerts
Implements #5302
2021-05-10 10:24:32 +02:00
Simone Mainardi
87d8c89107 Fixes missing certificate names in TLS mismatch alerts
Fixes #5299
2021-05-10 09:25:09 +02:00
Simone Mainardi
27fcd52bf9 Improves message for obsolete TLS
Addresses #5299
2021-05-10 08:55:49 +02:00
Simone Mainardi
ec5a92514d Fixes and simplifies getters of engaged alert counters 2021-05-07 15:06:55 +02:00
Alfredo Cardigliano
7196d5e777 Improve colors 2021-05-07 15:00:28 +02:00
Alfredo Cardigliano
0f6722629a Rework series removing duplicated code and removing 0 series 2021-05-07 14:56:08 +02:00
Luca Deri
2d62b8ed76 Fix colors in alert graphs
Fixed timepicker
2021-05-07 13:27:40 +02:00
Simone Mainardi
721fa2680f Reworks and simplifies engaged alert counters 2021-05-07 12:04:44 +02:00
Simone Mainardi
228c85d850 Removes old inefficient alert functions 2021-05-07 11:40:07 +02:00
Luca Deri
1a59a9cc80 Updated alarm widget 2021-05-07 11:38:24 +02:00
Simone Mainardi
ec06e6568f Simplifies and keeps per-family alert counters 2021-05-07 10:21:32 +02:00
Alfredo Cardigliano
1b58740579 Add colors to alertt dashboard. Cleanup duplicated css. 2021-05-06 18:47:29 +02:00
Simone Mainardi
0a0a841b02 Adds hyperlinks to the alerts summary page 2021-05-06 18:28:04 +02:00
Simone Mainardi
c2448f736f Fixes broken syntax in alert_store_utils.lua 2021-05-06 18:04:53 +02:00
Alfredo Cardigliano
24e703ae20 Merge client and server in flow alerts (fix #5288) 2021-05-06 17:02:30 +02:00
gabryon99
e1e57e420f fixed format for alerts chart (#5282) 2021-05-06 16:48:05 +02:00
Simone Mainardi
c0a3b4c288 Implements alert report global page
Implements #5291
2021-05-06 16:44:06 +02:00
Alfredo Cardigliano
e4ff578117 Dedup code for alert rest endpoints 2021-05-06 15:04:02 +02:00
Simone Mainardi
917a3add9f Removes debug flag flow_only_interface 2021-05-06 11:51:50 +02:00
Matteo Biscosi
c550b53352 Fixes missing info in TLS Certificate Expired
Implements #5270
2021-05-06 11:50:27 +02:00
Alfredo Cardigliano
5d57a07cdc Rework L7 application in flow alerts (fix #5290) 2021-05-06 10:53:22 +02:00
Alfredo Cardigliano
adc665c847 Cleanup get proto name functions. Add master proto to flow alerts. 2021-05-06 10:31:16 +02:00
Alfredo Cardigliano
52a483142b Fix alert_remote_access format 2021-05-06 09:50:37 +02:00
gabryon99
0de872ec31 add missing time in hover (#5282) 2021-05-06 09:26:46 +02:00
Simone Mainardi
d44ce09da1 Adds the user script config wheel to flow alerts 2021-05-05 17:37:54 +02:00
Simone Mainardi
337a70d7e5 Hides chains for inactive hosts 2021-05-05 17:35:24 +02:00
Simone Mainardi
c701c5fcfe Fixes TLS-related alert descriptions 2021-05-05 17:06:29 +02:00
Simone Mainardi
b36f7cfe0c Minor elephant flow fix 2021-05-05 16:58:36 +02:00
Simone Mainardi
02934faf6e Optimizes flow callbacks (saves 24 bytes per flow) 2021-05-05 16:55:38 +02:00
Simone Mainardi
286d2cfdbc Fixes descriptions for host alerts 2021-05-05 16:40:31 +02:00
Alfredo Cardigliano
fd977d4924 Cleanup alert on score (lua) 2021-05-05 16:26:46 +02:00
Alfredo Cardigliano
77bd43765c Cleanup alert on score 2021-05-05 16:25:01 +02:00
Simone Mainardi
058ced16c5 Fixes for elephant flows description 2021-05-05 15:51:26 +02:00
Alfredo Cardigliano
cdcd1c800a Render severirty color (poc) 2021-05-05 15:41:31 +02:00
Simone Mainardi
ef61b6db4a Fixes for descriptions of blacklisted and suspicious 2021-05-05 15:23:11 +02:00
Alfredo Cardigliano
c7fa2a458d Remove alert name column, improve description 2021-05-05 14:34:03 +02:00
Simone Mainardi
ddc3c3de6b Implements ability to disable all alerts
Implements #5283
2021-05-05 13:07:19 +02:00
Alfredo Cardigliano
d8080ef14c Add score field to rest for all alert types. Set score color from severity. 2021-05-05 12:24:15 +02:00
Alfredo Cardigliano
24321cba24 Add mapScoreToSeverity call 2021-05-05 10:40:10 +02:00
Simone Mainardi
4cb19a1be8 Migrates severities to score in alert_utils 2021-05-05 10:38:04 +02:00