Commit graph

573 commits

Author SHA1 Message Date
Alfredo Cardigliano
77c80a0190 Safety check 2022-07-19 11:11:50 +02:00
MatteoBiscosi
d4eb7a10ce Added check for alerts 2022-07-15 17:10:52 +02:00
Alfredo Cardigliano
7928c96dea Filter domains when showing alert exclusion options 2022-06-29 10:23:14 +02:00
Alfredo Cardigliano
3b12ca84e2 Show server name in place of URL when disabling alerts by domain 2022-06-28 19:04:41 +02:00
Alfredo Cardigliano
ca820b4a36 Code cleanup. Add issuerdn and domain name to alert exclusion in flow details. 2022-06-28 18:36:51 +02:00
MatteoBiscosi
ddc8fa447e Added check for duplicated protocol label (#6731) 2022-06-28 15:34:05 +02:00
MatteoBiscosi
4fc3b32e84 Fixes incorrect field printed 2022-06-27 13:27:26 +02:00
Alfredo Cardigliano
55d00b8f66 Get issuerDN from risk info in case of tls_certificate_selfsigned 2022-06-21 17:07:46 +02:00
Alfredo Cardigliano
4413f41b65 Cleanup code for json field lookup 2022-06-17 09:56:50 +02:00
Alfredo Cardigliano
72dca21d3d Fix getExtraFlowInfoURL 2022-06-15 17:38:50 +02:00
MatteoBiscosi
98f39db18b Added traffic direction filter to alerts (#6666) 2022-06-14 16:21:40 +02:00
Alfredo Cardigliano
e2916e79a2 Add issuerdn to info 2022-06-14 15:06:39 +02:00
Alfredo Cardigliano
0ea7052640 Add flow alert info URL value 2022-06-14 14:56:20 +02:00
Alfredo Cardigliano
7068b089d4 Remove html from alert name 2022-06-14 12:36:50 +02:00
MatteoBiscosi
e8b63b76f2 Possibly fixes issue #6677 2022-06-09 11:52:15 +02:00
Alfredo Cardigliano
8ddf0e6998 Store cli/srv location in alerts 2022-06-09 11:27:41 +02:00
MatteoBiscosi
4b7edebc71 Added confidence filter to alerts 2022-06-07 18:40:02 +02:00
Luca Deri
8e5cc88c8d Warning fix for #6578 2022-05-30 23:04:18 +02:00
MatteoBiscosi
44dc90f30c Generalized clickhouse json search 2022-05-30 16:50:05 +02:00
MatteoBiscosi
5f686624ab Added Error code filter to alerts (#6610) 2022-05-30 15:22:45 +02:00
Alfredo Cardigliano
f6cb982355 Fix alert_store housekeeping 2022-05-30 11:43:18 +02:00
Alfredo Cardigliano
21530068a9 Add get_table_name / get_write_table_name to alert store 2022-05-30 11:25:32 +02:00
Alfredo Cardigliano
502f4cd106 Delete alerts matching domain when adding exception 2022-05-27 16:50:25 +02:00
MatteoBiscosi
e2ad021161 Fixes external link (#6626) 2022-05-27 16:23:26 +02:00
MatteoBiscosi
ee96f77bac Partially fixes external link prot in ntopng (#6626) 2022-05-27 13:04:59 +02:00
Alfredo Cardigliano
94b842284d Add safety check in flow_alert_store:insert with clickhouse 2022-05-26 16:34:13 +02:00
Luca Deri
f26ef05acb Fix for https://github.com/ntop/ntopng/issues/6578 (parameter 22) 2022-05-26 11:34:38 +02:00
MatteoBiscosi
6921aa9dce Fixes external link url proto not correctly used (#6626) 2022-05-25 12:52:56 +02:00
Alfredo Cardigliano
5b0e59b50c Fix hostname match in engaged alerts 2022-05-24 15:34:53 +02:00
MatteoBiscosi
72f814c36c Added vlan support to exclusion lists (#6510) 2022-05-24 12:22:24 +02:00
Luca Deri
bb84f56a5e Warning fix (#6578) 2022-05-24 08:49:21 +02:00
MatteoBiscosi
344946be8f Fixes non working info field filtering (#6564) 2022-05-20 16:25:02 +02:00
MatteoBiscosi
14e85b9888 Unified alert and flow details page style (#6565) 2022-05-20 11:30:44 +02:00
Alfredo Cardigliano
d248d2a158 Handle IPv4 vs IPv6 columns when writing to the flow alerts table using a view 2022-05-11 16:16:23 +02:00
Alfredo Cardigliano
7025b3dd5b Fix string to numeric IP conversion in flow alerts 2022-05-11 15:46:39 +02:00
Alfredo Cardigliano
addecb93e8 Move info field out of the json for flow alerts 2022-05-11 09:47:52 +02:00
uccidibuti
ff14e60c3d Alerts: Add Top Protocols Dropdown menu #6582: enable top protocols even if clickhouse is disabled 2022-05-10 16:24:27 +02:00
uccidibuti
6a0a60047c Alerts: Add Top Protocols Dropdown menu #6582 2022-05-10 16:12:15 +02:00
Alfredo Cardigliano
8d5ddda7d4 Fix flow alert delete with clickhouse view (add IS_ALERT_DELETED flag) 2022-05-10 09:46:21 +02:00
Alfredo Cardigliano
103ffcf370 Fix columns type conversion for flow alerts view 2022-05-09 18:42:03 +02:00
Alfredo Cardigliano
8651e089a1 Handle write operation on flow alerts with clickhouse view 2022-05-09 17:49:48 +02:00
Alfredo Cardigliano
2f0ba125da Add support for 'write' columns which differ from 'view' columns when building where conditions 2022-05-09 14:37:13 +02:00
Alfredo Cardigliano
5308864593 Fix flow alert delete backend with clickhouse view (#6567) 2022-05-06 12:16:28 +02:00
MatteoBiscosi
a338bcd448 Added ICMP type and code formatting to alerts (#6560) 2022-05-03 11:33:30 +02:00
Luca Deri
a28d4f4886 Added error code in flow alerts 2022-05-02 16:18:05 +02:00
Alfredo Cardigliano
8a8805167a Fix alert exclusion with clickhouse view (#6556) 2022-04-29 16:33:54 +02:00
Alfredo Cardigliano
515af750b6 Fix remove of flow alerts when using clickhouse view 2022-04-29 16:16:34 +02:00
Alfredo Cardigliano
0204d4734a Implement acknowledge for flow alerts using the historical flows table 2022-04-26 17:23:25 +02:00
Alfredo Cardigliano
a9f183e478 Safety check as workaround for bad jsons in the db 2022-04-26 12:17:59 +02:00
MatteoBiscosi
5c88bc5b59 Removed score and changed description from alerts 2022-04-22 16:09:53 +02:00