Commit graph

3716 commits

Author SHA1 Message Date
Nicolo Maio
7ced911ec7 Fix autoAck (#7948) 2024-04-24 18:34:19 +02:00
Nicolò Maio
59075f5e10
Splitting blacklisted flow alert and creating two new alerts. (#8354) (#8355)
* Splitting blacklisted flow alert and creating two new alerts. (#8354)

* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)
2024-04-24 17:37:30 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. (#8264) (#8348)
* Add Flow Reset Alert and counter. (#8264)

* Renaming to TCP Flow Reset. (#8264)

* Renaming the value retrieved by the getName method. (#8264)
2024-04-24 17:15:20 +02:00
Luca Deri
812f1efdab Fix for #8347 2024-04-23 18:01:09 +02:00
Alfredo Cardigliano
260510289e Fix match on alert type 2024-04-23 16:02:55 +02:00
Alfredo Cardigliano
3dbdcc4966 Fix filters on alert types for non host/flow alerts 2024-04-22 18:39:55 +02:00
Alfredo Cardigliano
6c02a54e20 Fix entity for alerts triggered from lua 2024-04-22 13:19:16 +02:00
Alfredo Cardigliano
d7415c156d Add option to limit rows 2024-04-19 15:41:27 +02:00
Luca Deri
6ed953a5a3 Reworked host categorization
Fix for https://github.com/ntop/ntopng/issues/8262
2024-04-18 23:28:21 +02:00
Nicolò Maio
fd6b0958c3
Rename the alert to "Remote to Local Insecure Flow". (#8257) (#8339) 2024-04-18 12:45:54 +02:00
Luca Deri
4a93fe8a87 Added support in flow details for STUN MAPPED-ADDRESS 2024-04-12 21:14:38 +02:00
Nicolo Maio
4f7ba024c0 Set the emergency level score for SYN flood alerts. (#8253) 2024-04-10 16:59:46 +02:00
Matteo Biscosi
b98fa797af Removed attacker from binary application trasnfer (#8319) 2024-04-09 09:41:47 -04:00
Luca Deri
ee6b67ed0c Added support for nDPI's NDPI_BINARY_DATA_TRANSFER 2024-04-09 10:35:49 +02:00
Matteo Biscosi
96d374007d Fixed info field cut after 256 characters 2024-04-08 13:11:09 -04:00
Luca Deri
f26d56959c Renamed HostBlackHoleContactsAlert to HostScannerAlert 2024-04-08 18:35:49 +02:00
Luca Deri
296eebda0a Updates due to the new nDPI 2024-04-03 14:21:09 +02:00
Alfredo Cardigliano
0e5c7acfc2 Fix filter on host alert type. Cleanup. 2024-04-02 18:34:13 +02:00
Nicolo Maio
8a251c95cc Change Score level of HostBlackHoleContacts 2024-04-02 11:49:31 +02:00
Nicolo Maio
b20e06482c Fix the logic for HostBlackHoleContacts and RXOnlyHostScan checks. 2024-03-29 10:09:57 +01:00
Matteo Biscosi
8486831c6e Fixes slow loading of flow exporters with tons of devices 2024-03-28 11:42:23 -04:00
Matteo Biscosi
9aaf15c49f Added network interface filter resolving the issue with duplicated flow exporters (#8129) 2024-03-28 05:55:15 -04:00
Nicolò Maio
2deb42a7a2
Add the blackhole contacts alerts and update the scan detection alert. (#8290) 2024-03-28 08:55:45 +01:00
Matteo Biscosi
e58c60867e Fixes reset counters does not reset sent/rcvd bytes/packets (#8135) 2024-03-27 06:55:06 -04:00
Nicolo Maio
93062e6c12 Fix minor connection state calculation with cumulative flags. 2024-03-26 17:11:25 +01:00
Nicolò Maio
c83a33e20b
Add in and out iface index filters (#8286) (#8288) 2024-03-26 10:29:18 +01:00
Matteo Biscosi
3a2f1888a6 Fixes some performance issues in the new flow page 2024-03-20 06:45:39 -04:00
Luca Deri
bd54a26c7d Fixes prototype isses introduced by 4deb911b2e 2024-03-19 23:29:48 +01:00
Matteo Biscosi
4deb911b2e Updated info for faster loading in flow page 2024-03-19 12:16:16 -04:00
Matteo Biscosi
3a61763447 Reworked flows page 2024-03-15 06:41:56 -04:00
Alfredo Cardigliano
7c936f9d09 Remove deprecated private cloud support 2024-03-15 10:03:25 +01:00
Alfredo Cardigliano
58ac4ab201 Add read_from_stdin(). Fix indentation. 2024-03-13 11:02:18 +01:00
Luca Deri
0c6512b8f3 Added definitions of SNMP polling limits per edition 2024-03-12 20:07:29 +01:00
Alfredo Cardigliano
96dbac3a3e Implement remote radius authentication for local users (toggle) 2024-03-12 10:18:15 +01:00
Alfredo Cardigliano
78bff96e0b Split monolitic auth function into multiple methods 2024-03-11 18:56:23 +01:00
Matteo Biscosi
7792bf4fb6 Reworked host page to vuejs 2024-03-08 12:54:49 -05:00
Luca
7293a61cea Reworkd flow JSON serialization 2024-03-06 17:58:07 +01:00
Luca Deri
747d2a665e Cleanup 2024-03-06 11:34:21 +01:00
Nicolò Maio
de78637f4b
Add TLC_QUIC hostnaming pref. (#8258) (#8260) 2024-03-06 11:33:50 +01:00
Nicolò Maio
1f1d6f0393
Fix L7 Protocol usage & empty table statement using the view interface in Server Ports Analysis page (#8200)
* Fix the handling of L7 protocol filter in the server ports table view page.

* Add missing semicolon

* Add NO_VLAN

* Fix the L7 filter with arithmetic comparisons.

* Add usage of getViewSharedServer instead of IpAddress.
2024-03-06 11:30:10 +01:00
Alfredo Cardigliano
aaae4d1019 Improve host pool reload latency 2024-03-06 11:09:15 +01:00
Luca Deri
c615274179 Code cleaup 2024-03-05 16:16:11 +01:00
Matteo Biscosi
cc0ae60b50 Added more VLANs to simulate-vlans 2024-02-28 12:25:55 -05:00
Nicolò Maio
2d150103b7
Add TCP flow connection state (#8210)
* Add TCP flow connection state (#8140)

* Add Major and Minor connection states (#8140)

* Remove ZMQ connection state parsing. (#8140)

* Update doc with major and minor conn states. (#8140)
2024-02-28 14:45:49 +01:00
Matteo Biscosi
af9011684b Moved host traffic checks to unused 2024-02-27 05:30:20 -05:00
Luca Deri
5844b799c7 Win changes 2024-02-25 12:09:49 +01:00
Nicolò Maio
c443e03825
Fix NATS preferences and add message broker (#8221)
* Fix NATS preferences and add message broker.

* Fix on LuaEngineNtop
2024-02-23 19:57:39 +01:00
Luca Deri
77fb2a76c2 Fixes invalid behavioural exceptions reload 2024-02-23 17:18:14 +01:00
Nicolo Maio
989050b900 Add fingerprint stats preference. (#8237) 2024-02-22 17:17:14 +01:00
Luca Deri
2ee2c180a5 Removed alerts no longer necessary as they have been replaced by local traffic rules 2024-02-21 22:54:22 +01:00