4526 commits

Author	SHA1	Message	Date
Matteo Biscosi	4d5cd3b3af	Added score stats to VLAN/Country/AS/Network	2021-05-13 11:09:16 +02:00
Simone Mainardi	b7f12727e2	Implements spillover description column for flow alerts	2021-05-12 18:43:12 +02:00
Simone Mainardi	6ae7664de0	Fixes missing interface and host score timeseries ... Fixes #5300	2021-05-12 17:17:57 +02:00
Simone Mainardi	8cf7635fb6	Calibrates scores associated to flow risks	2021-05-12 15:10:52 +02:00
Simone Mainardi	d45ab54934	Harmonizes scores for Lua-triggered alerts ... Addresses #5315	2021-05-12 12:56:12 +02:00
Alfredo Cardigliano	b784ffa90c	Return an empty series when there are no alerts	2021-05-12 11:45:13 +02:00
Simone Mainardi	1c746a04c1	Cleanup unnecessary flags after sys/non-sys changes	2021-05-12 10:14:20 +02:00
Simone Mainardi	a743a1604d	Unifies names across alerts, pools and user scripts ... Fixes #5311	2021-05-12 10:07:26 +02:00
Simone Mainardi	bb3f8ed168	Implements efficient unexpected_new_device alert	2021-05-11 19:03:40 +02:00
Alfredo Cardigliano	03bf2bca5e	Fix attacker/victim records	2021-05-11 18:52:09 +02:00
Alfredo Cardigliano	bd190c22d1	Set record family when it applies	2021-05-11 18:13:48 +02:00
Alfredo Cardigliano	6c9b546383	Improve alert description for some families	2021-05-11 18:11:10 +02:00
Matteo Biscosi	1fa6159ab2	Implements attacker and victim sorting flow alert table	2021-05-11 17:24:10 +02:00
Alfredo Cardigliano	41b72c1125	Cleanup alert description (move configset link as additional field). Add ellipsis to long descriptions, with tooltips.	2021-05-11 17:18:13 +02:00
Alfredo Cardigliano	3180f83e5f	Fix network entity name to match the user scripts configuration	2021-05-11 16:04:27 +02:00
Simone Mainardi	6deadca5fb	Fixes redir. URL when switching between sys/non-sys	2021-05-11 14:52:49 +02:00
Alfredo Cardigliano	f801f86dc6	Add alert type to alert description and ability to filter on alert type for all alert families. (fix #5312)	2021-05-11 14:40:24 +02:00
Simone Mainardi	53ffd160de	Fixes sort by attacker/victim in host page	2021-05-11 14:36:58 +02:00
Simone Mainardi	6767a5b8c7	Additional cleanup for system interface handling	2021-05-11 14:13:06 +02:00
Alfredo Cardigliano	aea96c3bbc	Fix filter on alert_id	2021-05-11 14:06:07 +02:00
Matteo Biscosi	dd6ed25022	Fixes null value into flow alert page	2021-05-11 13:10:51 +02:00
Simone Mainardi	33495e0188	Fixes system interface selection mixed between Lua and C++	2021-05-11 12:51:34 +02:00
Matteo Biscosi	c9b08d52a0	Implemented attacker and victim column ... Implements #5310	2021-05-11 12:46:49 +02:00
Alfredo Cardigliano	fc85cc20ef	Add alert name to the description. Add support for filtering on alert type (wip)	2021-05-11 12:33:51 +02:00
Alfredo Cardigliano	3ad0e12795	Add support for cli/srv port filtering in flow alerts	2021-05-10 18:08:42 +02:00
Simone Mainardi	6fa3a2cc27	Fixes duration for engaged alerts always set to <1 second	2021-05-10 15:42:46 +02:00
Simone Mainardi	95d27351af	Removes a debug print	2021-05-10 15:19:51 +02:00
Simone Mainardi	457af5d222	Fixes flapping of Lua-triggered engaged alerts ... Fixes #5304	2021-05-10 15:18:19 +02:00
Simone Mainardi	bfc9e72193	Fixes label for zero TCP window alerts	2021-05-10 13:02:53 +02:00
Simone Mainardi	74603b8fe6	Implements alerts summary page for engaged alerts	2021-05-10 12:20:27 +02:00
Matteo Biscosi	1bb5fac8be	Removed unused variable ... Implements #5302	2021-05-10 11:14:31 +02:00
Matteo Biscosi	aaadd8728f	Changed aesthetical attacker/victim alert table view ... Implements #5302	2021-05-10 11:12:14 +02:00
Alfredo Cardigliano	16da9a3961	Cleanup unised alerts code	2021-05-10 11:10:35 +02:00
Alfredo Cardigliano	450b6c4575	Remove AlertsManager (no longer used). Add back entity value or 5-tuple to exported alerts (fix #5285)	2021-05-10 10:57:43 +02:00
Matteo Biscosi	11b37bc695	Added victim and attacker columns to flow/host alerts ... Implements #5302	2021-05-10 10:24:32 +02:00
Simone Mainardi	87d8c89107	Fixes missing certificate names in TLS mismatch alerts ... Fixes #5299	2021-05-10 09:25:09 +02:00
Simone Mainardi	27fcd52bf9	Improves message for obsolete TLS ... Addresses #5299	2021-05-10 08:55:49 +02:00
Simone Mainardi	ec5a92514d	Fixes and simplifies getters of engaged alert counters	2021-05-07 15:06:55 +02:00
Alfredo Cardigliano	7196d5e777	Improve colors	2021-05-07 15:00:28 +02:00
Alfredo Cardigliano	0f6722629a	Rework series removing duplicated code and removing 0 series	2021-05-07 14:56:08 +02:00
Luca Deri	2d62b8ed76	Fix colors in alert graphs ... Fixed timepicker	2021-05-07 13:27:40 +02:00
Simone Mainardi	721fa2680f	Reworks and simplifies engaged alert counters	2021-05-07 12:04:44 +02:00
Simone Mainardi	228c85d850	Removes old inefficient alert functions	2021-05-07 11:40:07 +02:00
Luca Deri	1a59a9cc80	Updated alarm widget	2021-05-07 11:38:24 +02:00
Simone Mainardi	ec06e6568f	Simplifies and keeps per-family alert counters	2021-05-07 10:21:32 +02:00
Alfredo Cardigliano	1b58740579	Add colors to alertt dashboard. Cleanup duplicated css.	2021-05-06 18:47:29 +02:00
Simone Mainardi	0a0a841b02	Adds hyperlinks to the alerts summary page	2021-05-06 18:28:04 +02:00
Simone Mainardi	c2448f736f	Fixes broken syntax in alert_store_utils.lua	2021-05-06 18:04:53 +02:00
Alfredo Cardigliano	24e703ae20	Merge client and server in flow alerts (fix #5288)	2021-05-06 17:02:30 +02:00
gabryon99	e1e57e420f	fixed format for alerts chart (#5282)	2021-05-06 16:48:05 +02:00