Commit graph

21 commits

Author SHA1 Message Date
Simone Mainardi
aea9138bfb Implements flow callbacks and alerts in C++ 2021-03-22 09:51:36 +01:00
Matteo Biscosi
41163ac7f6 Implements low risk alert type must be further split
Implements #5066
2021-02-25 19:09:17 +01:00
Simone Mainardi
c70c635e3f Fixes TLS-risks sometimes handled twice 2021-02-18 14:45:02 +01:00
Simone Mainardi
823c6ddc81 Fixes flow risks no longer triggering 2021-02-18 11:20:17 +01:00
Matteo Biscosi
0c0ba319c2 Modified default fields for flow risk alert 2021-02-17 11:55:07 +01:00
Matteo Biscosi
711bcb21d0 Added exclusion list to the flow risk script 2021-02-17 11:46:45 +01:00
Simone Mainardi
f4dff6f2e7 Implements risk-based filtering of flow alerts 2021-02-16 15:25:20 +01:00
Alfredo Cardigliano
f245caf83c Deterministic selection of flow risk 2021-02-12 17:47:54 +01:00
Alfredo Cardigliano
b3cf18d821 Rename alert_tls_old_version -> alert_tls_old_protocol_version everywhere for consistency 2021-01-29 11:10:43 +01:00
Matteo Biscosi
0fbe214a60 Removed default severity from some alerts 2021-01-29 10:51:31 +01:00
Matteo Biscosi
b1134b611f Added to double severity alert, single default alert
Implements #4919
2021-01-28 18:18:22 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
f839b6ba76 Removes flow_consts requires no longer necessary 2020-12-22 18:06:50 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status (#4710)
* Modified blacklisted script in view of the new flow_script API

* Modified plugins scripting in view of the new API

* Modified flow scripts with the new trigger API

* Fixed creators severity

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
00f1ae731a Keeps configured enabled/disabled flow risks into account inside plugin 2020-10-19 11:56:41 +02:00
Simone Mainardi
27c1318ab6 Fixes risk not shown in generated flow-risk alerts
Fixes #4594
2020-10-19 11:10:19 +02:00
Luca Deri
a5076c0d27 Implemented multiselect to be used in #4589 2020-10-16 22:29:12 +02:00
Simone Mainardi
2f2a2e63e4 Uses plugin modules as flow-risk handlers 2020-09-24 12:48:09 +02:00
Simone Mainardi
d7b688b955 Adds a no-action risk handler for risks already handled in other scripts 2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
f7e1ea9709 Reworks plugin loading and structure
Implements #4358
2020-09-15 11:33:53 +02:00