Commit graph

678 commits

Author SHA1 Message Date
Simone Mainardi
ffd45a6e41 Reworks Historical Flow Explorer UI to query on aggregated flows tables 2017-05-10 12:54:24 +02:00
emanuele-f
b6e1b3a450 Fix nDPIStats non initialized memory 2017-05-09 19:03:46 +02:00
Simone Mainardi
5416dcd711 Implements DB queries on the aggregated data (WIP) 2017-05-09 18:56:55 +02:00
emanuele-f
d8a702ed3b Improve quotas page 2017-05-09 18:16:29 +02:00
Simone Mainardi
b5e685f243 Implements per pool member quotas 2017-05-09 15:07:53 +02:00
emanuele-f
3496fb51c0 Add button to flush all alerts data 2017-05-08 23:31:46 +02:00
emanuele-f
83f18227f7 Threshold configuration page improvements 2017-05-08 20:55:52 +02:00
emanuele-f
1557cf5a98 Improve detected alerts page 2017-05-08 16:55:05 +02:00
emanuele-f
3b3436eb0d Make export data use GET HTTP request 2017-05-08 13:51:28 +02:00
emanuele-f
ca1d85c94e Make interface realtime refresh rate configurable 2017-05-08 12:23:52 +02:00
emanuele-f
86a187e182 Flashstart dump fixes 2017-05-07 20:09:14 +02:00
emanuele-f
69332ad1e0 Move l4 protocol mapping code 2017-05-05 17:53:42 +02:00
Simone Mainardi
ef9f6b9659 Ensures engaged alerts counters consistency with multiple interfaces 2017-05-05 12:24:07 +02:00
emanuele-f
c0083bde08 Use getResolvedAddress to get alert host information 2017-05-04 21:47:06 +02:00
emanuele-f
9097333cf1 Always show IPv6 suffix in IPv6 host names 2017-05-04 21:28:11 +02:00
emanuele-f
1e4068b798 Fix some visualization problems 2017-05-04 20:07:52 +02:00
emanuele-f
979fbd74e9 Move to the UTF-8 encoding.
This migration is necessary since Lua scripts sources use the UTF-8 encoding while the web browser sees the iso-8859-1 encoding, and this incongruence breaks the visualization of some non-ascii characters.
2017-05-04 18:56:04 +02:00
emanuele-f
1c38df48c9 Unify character encoding header code 2017-05-04 17:12:06 +02:00
emanuele-f
10be6c2190 Fix host alert configuration issues 2017-05-04 16:30:39 +02:00
emanuele-f
f2eb15ba76 Fix alerts dashboard look 2017-05-03 18:03:03 +02:00
Simone Mainardi
547e623273 Removed debug prints 2017-05-03 17:35:32 +02:00
Simone Mainardi
04ae6a5973 Reworks nagios alerts 2017-05-03 17:32:46 +02:00
emanuele-f
be3d69a435 Fix missing operator 2017-05-03 15:14:25 +02:00
Simone Mainardi
b47b5e1300 Minor fix 2017-05-03 14:41:53 +02:00
emanuele-f
d0d17cef76 Do not allow to delete engaged alerts.
This is necessary to avoid inconstent state caused in hosts and interfaces counters.
2017-05-03 14:28:10 +02:00
Simone Mainardi
d723fd505d Improves periodic alerts cleanup 2017-05-03 14:27:00 +02:00
Simone Mainardi
9c0f7499e7 Reduces redis traffic for alerts checks 2017-05-03 13:23:28 +02:00
emanuele-f
2c53dda60b Fix slack alerts notifications 2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea Optimizes oldest alerts cleanup 2017-05-03 12:41:36 +02:00
Simone Mainardi
4eeae18cef Adds alert notes and descriptions 2017-05-02 22:13:43 +02:00
Simone Mainardi
d85302d80f Fixes host activity alert 2017-05-02 17:19:06 +02:00
emanuele-f
a5e528047d Use a single redis key to read all host anomalies configuration 2017-05-02 15:38:39 +02:00
emanuele-f
9aa7b31552 Add SafeSearch and Global DNS in traffic bridge preferences. 2017-05-02 12:47:33 +02:00
Luca Deri
24f0808c23 Merge pull request #1197 from emanuele-f/password_change
Force default admin password change
2017-05-02 12:14:48 +02:00
Luca Deri
1c532234ce Reworked childSafe display 2017-05-01 23:15:57 +02:00
emanuele-f
dc86847467 Remove frequent pool re-initialization 2017-05-01 00:50:55 +02:00
emanuele-f
21594b834d Separate syn/flow attacker and victim alert thresholds 2017-04-30 20:07:58 +02:00
Emanuele Faranda
8b8974e56c Alerts improvements (#1204)
* Implement flow flood alert

* Remove alerts general settings

* Implement global threshold alerts for hosts, networks and interfaces

* Implement global anomaly alert configuration, lua side

* Make the global thresholds not bound to the interface

* Implement global anomaly alert configuration, C side

* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
Emanuele Faranda
a9bcb8b5de Merge pull request #1203 from danielmeyer/ldap-search-validation
LDAP search_path parameter allows spaces
2017-04-29 12:05:32 +02:00
emanuele-f
a53ec8b131 Force the release of expired alerts 2017-04-28 16:30:23 +02:00
Daniel Meyer
0ac9dff8cd Validation mode for search_path parameter updated to support paths containing spaces. 2017-04-28 09:08:48 -04:00
emanuele-f
f516d7edb8 Fix flow alert explorer validation error 2017-04-28 12:30:30 +02:00
emanuele-f
bf803803da Hide children safe for non-inline interfaces 2017-04-28 11:08:41 +02:00
emanuele-f
011b7f5cdf Force default admin password change 2017-04-27 21:15:58 +02:00
emanuele-f
f344f55116 Add children safe host pool option 2017-04-27 16:24:28 +02:00
emanuele-f
01816f3e7d Add category name in flashstart graphs 2017-04-27 15:24:14 +02:00
emanuele-f
cc3191bc4f Remove flapping-checking code in alert counter 2017-04-27 11:13:40 +02:00
emanuele-f
8b72607c38 Migrate interface alerts to lua logic 2017-04-27 11:07:04 +02:00
emanuele-f
426032426b Expose the traffic profile validation function 2017-04-26 23:05:31 +02:00
Emanuele Faranda
7d8d26efdc Merge pull request #1182 from emanuele-f/alerts_with_cache
Alerts with cache
2017-04-26 20:32:46 +02:00