Commit graph

4714 commits

Author SHA1 Message Date
MatteoBiscosi
de0060da35 Fixes service/periodicity map not working correctly with ip and macs 2021-08-03 11:34:36 +02:00
Simone Mainardi
805b99f03c Adds search by tcp flags in SYN scan alert 2021-08-02 18:43:08 +02:00
Simone Mainardi
a1f73a5a37 Adds nIndex flows link in the alert actions column 2021-08-02 17:27:02 +02:00
Simone Mainardi
d5ebabdd46 Fixes to support IPv6 in nIndex drill down 2021-08-02 16:35:08 +02:00
Simone Mainardi
b04ed93d31 Removes a debug flag 2021-08-02 14:43:16 +02:00
Simone Mainardi
5b8712ba9d Fixes visualization of TCP flags 2021-08-02 14:42:08 +02:00
MatteoBiscosi
8339414ffd Fixes nindex columns order and visualization 2021-08-02 13:34:25 +02:00
Simone Mainardi
bcc9609b7b Fixes historical URLs l4proto link and updates tests 2021-07-30 19:18:50 +02:00
Simone Mainardi
813d93db16 Adds support to link flows from host alerts with VLANs 2021-07-30 17:37:50 +02:00
Alfredo Cardigliano
d9e3b7a35a Fix vlan_id filter 2021-07-30 17:29:44 +02:00
Simone Mainardi
92b5f90690 Updates alert flow links for anomaly-based alerts 2021-07-30 15:49:48 +02:00
Simone Mainardi
820e497253 Unifies epoch-related variables in Lua and JS 2021-07-30 15:38:06 +02:00
Simone Mainardi
f2d9ee41be Improves selection of epochs in alert flows drilldown 2021-07-30 14:56:33 +02:00
Simone Mainardi
af7b722510 Allows "ip" to search for client and server hosts 2021-07-30 12:51:46 +02:00
Simone Mainardi
f563447bd9 Host alert label fixes 2021-07-30 12:51:02 +02:00
Alfredo Cardigliano
205e2cb1bd Add score and master l7 proto to dumped flows 2021-07-29 18:20:15 +02:00
Simone Mainardi
41b23003a1 Implements generation of link from alerts to past flows
Addresses #5326
2021-07-29 16:54:15 +02:00
Alfredo Cardigliano
99e47bdc3f Add tags to locale 2021-07-29 16:04:29 +02:00
Alfredo Cardigliano
5a1423a072 Rename '&' in 'has'. Add support for 'nin' op 2021-07-29 15:50:22 +02:00
Alfredo Cardigliano
4db0a64fe5 Implement bitwise AND operator 2021-07-29 14:46:26 +02:00
Alfredo Cardigliano
18cfb589aa Add src2dst_tcp_flags/dst2src_tcp_flags to lint 2021-07-29 12:04:33 +02:00
Alfredo Cardigliano
a6f30c90eb Fix formatTCPFlags 2021-07-29 11:47:47 +02:00
Simone Mainardi
50e3f40a8b Fixes attempt to concat boolean value
Fixes #5722
2021-07-29 09:15:57 +02:00
Simone Mainardi
5af89ca6aa Unifies drilldown icon 2021-07-28 19:14:25 +02:00
Simone Mainardi
7ba9cf0dc5 Adds TCP flag filters in historical flows drilldown 2021-07-28 18:37:43 +02:00
Alfredo Cardigliano
3acde3b3ec Add formatTCPFlags, used by printTCPFlags 2021-07-28 18:36:20 +02:00
Simone Mainardi
de576aa999 Implements historical floww search function for all host alerts
Addresses #5326
2021-07-28 18:16:32 +02:00
Alfredo Cardigliano
8cc6353c63 nindex tcp flags locale 2021-07-28 18:13:25 +02:00
Simone Mainardi
0ccb7b2864 Removes a debug print 2021-07-28 17:22:49 +02:00
Simone Mainardi
b6913c946d Implements skeleton to drilldown historical flows from alerts
Addresses #5326
2021-07-28 17:19:44 +02:00
Alfredo Cardigliano
65340369ac Fix Chinese locale. Add cn to the options. 2021-07-28 09:59:44 +02:00
Alfredo Cardigliano
89fd70a766 Add revision. Version code cleanup. 2021-07-27 14:35:50 +02:00
Simone Mainardi
0c6392d8c7 Recycles an host alert id 2021-07-27 14:24:49 +02:00
Simone Mainardi
5fe995ecfe Implements host check for NTP traffic 2021-07-27 12:19:52 +02:00
Simone Mainardi
1a552d24ec Cleanup excessive traffic check (to be implemented as host check) 2021-07-27 11:39:40 +02:00
Simone Mainardi
c9601bdefa Fixes InfluxDB unexpected query error 2021-07-26 16:27:07 +02:00
Simone Mainardi
68b97e540d Reworks handling of MAC addresses in service and periodicity maps
Addresses #5625
2021-07-23 16:35:34 +02:00
Simone Mainardi
bf28842f7f Removes a debug print 2021-07-23 11:43:15 +02:00
Alfredo Cardigliano
de481dceee Fix compatibility with lua alerts 2021-07-23 10:42:44 +02:00
Luca Deri
d2426a75ed Added the ability to specify a backlink instead on javascript back 2021-07-22 19:59:21 +02:00
MatteoBiscosi
a04526cc8b Major fixes to Service/Periodicity Map serialization (#5625) 2021-07-21 16:57:22 +02:00
Simone Mainardi
870a2f2bea Fix for builtin endpoint when upgrading from 4.2 to 5.0 2021-07-21 15:42:50 +02:00
Simone Mainardi
9d9e0a2511 Fixes import of exported pools
Addresses #5701
2021-07-20 16:38:31 +02:00
Simone Mainardi
5a18948505 Fixes factory reset of recipients
Addresses #5701
2021-07-20 16:31:06 +02:00
Simone Mainardi
d600001c7a Fixes reset of check exclusions
Addresses #5701
2021-07-20 16:20:49 +02:00
MatteoBiscosi
dd81214573 Fixes nil observation point value (#5669) 2021-07-20 12:01:53 +02:00
MatteoBiscosi
04aa2741b1 Changed alias naming format into [] instead of () (#5669) 2021-07-20 11:21:42 +02:00
Simone Mainardi
27951ae8a1 Fixes invalid traffic totals when reading large timespans
Addresses #5683
2021-07-20 11:14:38 +02:00
Alfredo Cardigliano
67657f1952 Fix filters with 0 value 2021-07-20 11:04:23 +02:00
MatteoBiscosi
1000b450d1 Fixed hostname must be lowercase (#5681) 2021-07-20 10:32:46 +02:00