Nicolo Maio
7ced911ec7
Fix autoAck ( #7948 )
2024-04-24 18:34:19 +02:00
Nicolò Maio
59075f5e10
Splitting blacklisted flow alert and creating two new alerts. ( #8354 ) ( #8355 )
...
* Splitting blacklisted flow alert and creating two new alerts. (#8354 )
* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354 )
2024-04-24 17:37:30 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. ( #8264 ) ( #8348 )
...
* Add Flow Reset Alert and counter. (#8264 )
* Renaming to TCP Flow Reset. (#8264 )
* Renaming the value retrieved by the getName method. (#8264 )
2024-04-24 17:15:20 +02:00
Luca Deri
812f1efdab
Fix for #8347
2024-04-23 18:01:09 +02:00
Alfredo Cardigliano
260510289e
Fix match on alert type
2024-04-23 16:02:55 +02:00
Alfredo Cardigliano
3dbdcc4966
Fix filters on alert types for non host/flow alerts
2024-04-22 18:39:55 +02:00
Alfredo Cardigliano
6c02a54e20
Fix entity for alerts triggered from lua
2024-04-22 13:19:16 +02:00
Alfredo Cardigliano
d7415c156d
Add option to limit rows
2024-04-19 15:41:27 +02:00
Luca Deri
6ed953a5a3
Reworked host categorization
...
Fix for https://github.com/ntop/ntopng/issues/8262
2024-04-18 23:28:21 +02:00
Nicolò Maio
fd6b0958c3
Rename the alert to "Remote to Local Insecure Flow". ( #8257 ) ( #8339 )
2024-04-18 12:45:54 +02:00
Luca Deri
4a93fe8a87
Added support in flow details for STUN MAPPED-ADDRESS
2024-04-12 21:14:38 +02:00
Nicolo Maio
4f7ba024c0
Set the emergency level score for SYN flood alerts. ( #8253 )
2024-04-10 16:59:46 +02:00
Matteo Biscosi
b98fa797af
Removed attacker from binary application trasnfer ( #8319 )
2024-04-09 09:41:47 -04:00
Luca Deri
ee6b67ed0c
Added support for nDPI's NDPI_BINARY_DATA_TRANSFER
2024-04-09 10:35:49 +02:00
Matteo Biscosi
96d374007d
Fixed info field cut after 256 characters
2024-04-08 13:11:09 -04:00
Luca Deri
f26d56959c
Renamed HostBlackHoleContactsAlert to HostScannerAlert
2024-04-08 18:35:49 +02:00
Luca Deri
296eebda0a
Updates due to the new nDPI
2024-04-03 14:21:09 +02:00
Alfredo Cardigliano
0e5c7acfc2
Fix filter on host alert type. Cleanup.
2024-04-02 18:34:13 +02:00
Nicolo Maio
8a251c95cc
Change Score level of HostBlackHoleContacts
2024-04-02 11:49:31 +02:00
Nicolo Maio
b20e06482c
Fix the logic for HostBlackHoleContacts and RXOnlyHostScan checks.
2024-03-29 10:09:57 +01:00
Matteo Biscosi
8486831c6e
Fixes slow loading of flow exporters with tons of devices
2024-03-28 11:42:23 -04:00
Matteo Biscosi
9aaf15c49f
Added network interface filter resolving the issue with duplicated flow exporters ( #8129 )
2024-03-28 05:55:15 -04:00
Nicolò Maio
2deb42a7a2
Add the blackhole contacts alerts and update the scan detection alert. ( #8290 )
2024-03-28 08:55:45 +01:00
Matteo Biscosi
e58c60867e
Fixes reset counters does not reset sent/rcvd bytes/packets ( #8135 )
2024-03-27 06:55:06 -04:00
Nicolo Maio
93062e6c12
Fix minor connection state calculation with cumulative flags.
2024-03-26 17:11:25 +01:00
Nicolò Maio
c83a33e20b
Add in and out iface index filters ( #8286 ) ( #8288 )
2024-03-26 10:29:18 +01:00
Matteo Biscosi
3a2f1888a6
Fixes some performance issues in the new flow page
2024-03-20 06:45:39 -04:00
Luca Deri
bd54a26c7d
Fixes prototype isses introduced by 4deb911b2e
2024-03-19 23:29:48 +01:00
Matteo Biscosi
4deb911b2e
Updated info for faster loading in flow page
2024-03-19 12:16:16 -04:00
Matteo Biscosi
3a61763447
Reworked flows page
2024-03-15 06:41:56 -04:00
Alfredo Cardigliano
7c936f9d09
Remove deprecated private cloud support
2024-03-15 10:03:25 +01:00
Alfredo Cardigliano
58ac4ab201
Add read_from_stdin(). Fix indentation.
2024-03-13 11:02:18 +01:00
Luca Deri
0c6512b8f3
Added definitions of SNMP polling limits per edition
2024-03-12 20:07:29 +01:00
Alfredo Cardigliano
96dbac3a3e
Implement remote radius authentication for local users (toggle)
2024-03-12 10:18:15 +01:00
Alfredo Cardigliano
78bff96e0b
Split monolitic auth function into multiple methods
2024-03-11 18:56:23 +01:00
Matteo Biscosi
7792bf4fb6
Reworked host page to vuejs
2024-03-08 12:54:49 -05:00
Luca
7293a61cea
Reworkd flow JSON serialization
2024-03-06 17:58:07 +01:00
Luca Deri
747d2a665e
Cleanup
2024-03-06 11:34:21 +01:00
Nicolò Maio
de78637f4b
Add TLC_QUIC hostnaming pref. ( #8258 ) ( #8260 )
2024-03-06 11:33:50 +01:00
Nicolò Maio
1f1d6f0393
Fix L7 Protocol usage & empty table statement using the view interface in Server Ports Analysis page ( #8200 )
...
* Fix the handling of L7 protocol filter in the server ports table view page.
* Add missing semicolon
* Add NO_VLAN
* Fix the L7 filter with arithmetic comparisons.
* Add usage of getViewSharedServer instead of IpAddress.
2024-03-06 11:30:10 +01:00
Alfredo Cardigliano
aaae4d1019
Improve host pool reload latency
2024-03-06 11:09:15 +01:00
Luca Deri
c615274179
Code cleaup
2024-03-05 16:16:11 +01:00
Matteo Biscosi
cc0ae60b50
Added more VLANs to simulate-vlans
2024-02-28 12:25:55 -05:00
Nicolò Maio
2d150103b7
Add TCP flow connection state ( #8210 )
...
* Add TCP flow connection state (#8140 )
* Add Major and Minor connection states (#8140 )
* Remove ZMQ connection state parsing. (#8140 )
* Update doc with major and minor conn states. (#8140 )
2024-02-28 14:45:49 +01:00
Matteo Biscosi
af9011684b
Moved host traffic checks to unused
2024-02-27 05:30:20 -05:00
Luca Deri
5844b799c7
Win changes
2024-02-25 12:09:49 +01:00
Nicolò Maio
c443e03825
Fix NATS preferences and add message broker ( #8221 )
...
* Fix NATS preferences and add message broker.
* Fix on LuaEngineNtop
2024-02-23 19:57:39 +01:00
Luca Deri
77fb2a76c2
Fixes invalid behavioural exceptions reload
2024-02-23 17:18:14 +01:00
Nicolo Maio
989050b900
Add fingerprint stats preference. ( #8237 )
2024-02-22 17:17:14 +01:00
Luca Deri
2ee2c180a5
Removed alerts no longer necessary as they have been replaced by local traffic rules
2024-02-21 22:54:22 +01:00