Commit graph

681 commits

Author SHA1 Message Date
Simone Mainardi
1703488796 Fixes system CPU load 2020-07-29 11:42:39 +02:00
Simone Mainardi
8418d932ec Avoids spawning num_interfaces + threads to update stats 2020-07-27 15:50:11 +02:00
Luca Deri
ab6455329a Alert improvements
- check areAlertsEnabled() result is now cached
- housekeeping.lua skips alerts when disabled
2020-07-23 17:53:59 +02:00
Alfredo Cardigliano
f038baf804 Alerts are no longer enqueued if disabled 2020-07-23 00:49:28 +02:00
Simone Mainardi
c623f21ba0 Refactors old host_pools_utils to nEdge-only host_pools_nedge 2020-07-16 18:17:19 +02:00
Simone Mainardi
012ef619da Avoids calling old initPools on non-nEdge 2020-07-16 17:59:19 +02:00
Simone Mainardi
d89d97e59b Migrates snmp user scripts to the new snmp device pools configuration 2020-07-10 19:46:34 +02:00
Simone Mainardi
92c88c7924 Migrates interface user scripts to the new interface pools configuration 2020-07-10 19:32:03 +02:00
Simone Mainardi
cf400216e2 Implements caching of member-to-confiset_id as Lua pool class member 2020-07-10 19:22:47 +02:00
Simone Mainardi
bd4921df55 Migrates local network user scripts to the new host pools configuration 2020-07-10 18:45:19 +02:00
Simone Mainardi
09c69edb22 Major rework of user_scripts.lua to use new pools 2020-07-10 13:01:29 +02:00
Luca Deri
7388bcdd44 Added startup tracing 2020-07-03 17:17:25 +02:00
Simone Mainardi
5ade224d85 Implements global host pools
Implements #4086

Refactors host pools to global

Implements host pools migration

Migration fixes

nEdge changes for host pools migration

Create README.host_pools_migration.md
2020-07-01 12:02:09 +02:00
Alfredo Cardigliano
a03c2158d8 Remove useless chart with duplicated info 2020-07-01 11:54:25 +02:00
Simone Mainardi
46c5439549 Removes SNMP interfaces_status no longer used 2020-06-15 18:09:47 +02:00
Simone Mainardi
cd4a513b0f Implements snmp_consts.lua with SNMP consts 2020-06-10 15:40:47 +02:00
Simone Mainardi
0bbb30e13e Refactors snmp_utils global methods into module functions 2020-06-10 13:09:30 +02:00
Simone Mainardi
8a3e65ac50 Requires snmp_utils as local module 2020-06-10 12:17:25 +02:00
Simone Mainardi
54dd2e5c8a Adds a safety check on cached_device 2020-06-09 19:05:13 +02:00
Simone Mainardi
8609e0bc2e Avoids adding URLs for SNMP device interfaces no longer existing 2020-06-09 11:48:28 +02:00
Simone Mainardi
c2847398c2 Adjusts SNMP device interface scripts to use snmp_cached_dev.lua 2020-06-09 10:57:54 +02:00
Simone Mainardi
220359981f Adjusts SNMP device scripts to use snmp_cached_dev.lua 2020-06-09 09:47:33 +02:00
emanuele-f
aedf348534 Move interface timeseries prefs to the global config
Addresses #3979
2020-05-27 13:48:27 +02:00
emanuele-f
340462ad73 Cleanup of the timeseries ring and NetworkInterfaceTsPoint 2020-05-20 15:18:03 +02:00
Alfredo Cardigliano
fcd43fb880 Add plugin configuration to syslog plugins 2020-05-19 16:57:54 +02:00
Simone Mainardi
b6447bbfb0 Implements ordering for flow Lua callbacks 2020-05-17 14:12:08 +02:00
Alfredo Cardigliano
c6e061e62b Improve syslog API, add host log plugin skeleton 2020-05-16 11:35:32 +02:00
emanuele-f
d43d4e5e74 Make DHCP names cache expire after 1 day
Addresses #3641
2020-05-08 10:15:31 +02:00
Simone Mainardi
f3a5d7b10e Fixes external suricata alerts 2020-04-28 20:37:50 +02:00
Alfredo Cardigliano
c22f3b00e1 Fix alert ids source match 2020-04-28 16:12:03 +02:00
Alfredo Cardigliano
963cff670f Cleanup severity for external alerts 2020-04-27 18:04:41 +02:00
Simone Mainardi
83c4d36e34 Simplifies flow.triggerStatus using internal flow status reference 2020-04-27 17:48:56 +02:00
Simone Mainardi
efe4f9a8be Unifies alerts generation format with flow statuses 2020-04-27 14:37:04 +02:00
Simone Mainardi
ab1690ad9e Implements builders for each flow status definition
[FlowsK] alert_blacklisted_country.lua

[FlowsK] alert_flow_blacklisted.lua

[FlowsK] alert_device_protocol_not_allowed.lua

[FlowsK] external_alert.lua

[FlowsK] alert_potentially_dangerous_protocol.lua

[FlowsK] tls_certificate_mismatch.lua

[FlowsK] tls_certificate_expired.lua

[FlowsK] tls_malicious_signature.lua

[FlowsK] elephant_flows.lua

[FlowsK] not_purged.lua

[FlowsK] web_mining.lua

[FlowsK] potentially_dangerous.lua

[FlowsK] alert_flow_blocked.lua
2020-04-27 12:43:37 +02:00
Simone Mainardi
0a9a7015e0 Unifies status_id and status_key 2020-04-15 14:29:03 +02:00
Simone Mainardi
1eb02b2c2b Unifies alert_id and alert_key 2020-04-15 14:29:03 +02:00
Simone Mainardi
e487427aab Refactors alert_utils and enterprise_alert_utils
Addresses #3720

Alerts Refactor: alert_utils as module

Alerts Refactor: notify_ntopng_start and notify_ntopng_stop

Alerts Refactor: processAlertNotifications

Alerts Refactor: checkStoreAlertsFromC

Alerts Refactor: formatAlertNotification

Alerts Refactor: notification_timestamp_rev

Alerts Refactor: formatAlertMessage

Alerts Refactor: getConfigsetAlertLink

Alerts Refactor: alertNotificationActionToLabel

Alerts Refactor: flushAlertsData

Alerts Refactor: disableAlertsGeneration

Alerts Refactor: newAlertsWorkingStatus and other

Alerts Refactor: drawAlerts

Alerts Refactor: drawAlertTables

Alerts Refactor: printAlertTables

Alerts Refactor: checkDeleteStoredAlerts

Alerts Refactor: getUnpagedAlertOptions

Alerts Refactor: getTabParameters

Alerts Refactor: getAlerts

Alerts Refactor: getNumAlerts

Alerts Refactor: performAlertsQuery

Alerts Refactor: sec2granularity

Alerts Refactor: granularity2id

Alerts Refactor: granularity2sec

Alerts Refactor: alertEngineLabel

Alerts Refactor: alertEngine

Alerts Refactor: alertEngineRaw

Alerts Refactor: alertTypeDescription

Alerts Refactor: alertType

Alerts Refactor: alertTypeLabel

Alerts Refactor: alertTypeRaw

Alerts Refactor: alertSeverity

Alerts Refactor: alertSeverityLabel

Alerts Refactor: alertSeverityRaw

Alerts Refactor: get_make_room_keys

Alerts Refactor: enterprise_alert_utils
2020-04-10 14:03:20 +02:00
emanuele-f
c848ea2395 Fix script failure due to removed host.getLocalhostInfo 2020-04-02 18:42:52 +02:00
Alfredo Cardigliano
2425134f05 Replace isEnterprise with isEnterpriseM 2020-04-02 12:36:34 +00:00
Simone Mainardi
daf7f0a05c Minor Fix 2020-04-01 13:12:55 +02:00
Simone Mainardi
a9776b5013 Documents internals periodic activities 2020-04-01 13:03:13 +02:00
emanuele-f
983fea5701 Fix bad SNMP interface formatter
Fixes #3659
2020-03-27 17:40:51 +01:00
Simone Mainardi
3144bc8bdf Renames alert_config to user_script_config 2020-03-26 14:51:53 +01:00
emanuele-f
61ab06fcd7 Fix SyslogParserInterface plugins loading 2020-03-26 14:47:51 +01:00
Luca Deri
7769beecad Added blog check at startup 2020-03-25 08:12:04 +01:00
emanuele-f
60da5a0c13 Blog notifications fix 2020-03-24 17:12:41 +01:00
gabryon99
b1251aef5f created blog notification 2020-03-22 23:52:59 +01:00
emanuele-f
1ec35cadbf Fix invalid engaged/dropped alerts ts on system interface
Fixes #3556
2020-03-17 12:25:36 +01:00
Simone Mainardi
04f5b99342 Calculates and charts RRD queue length 2020-03-09 22:46:35 +01:00
emanuele-f
c17ddb486e Ensure monotonic time in uSecDiffPeriodicActivityBody 2020-03-05 17:09:40 +01:00