Commit graph

79 commits

Author SHA1 Message Date
Luca Deri
0a26fdd485 Code cleanup 2020-03-18 09:29:10 +01:00
gabryon99
5b1f7eb32c added new rtt gui page 2020-03-17 22:48:41 +01:00
Luca Deri
7296331121 Minor label change 2020-03-17 21:20:48 +01:00
Luca Deri
370aa95c01 Skeleton of the RTT get host 2020-03-17 21:00:40 +01:00
emanuele-f
3c9412ca58 Allow host names as valid domain names 2020-03-17 13:04:00 +01:00
emanuele-f
1ec35cadbf Fix invalid engaged/dropped alerts ts on system interface
Fixes #3556
2020-03-17 12:25:36 +01:00
emanuele-f
0357bd8e80 Implement RTT URL input validation 2020-03-17 11:16:57 +01:00
emanuele-f
8cab0d8933 Rework home link target when an RTT is selected 2020-03-16 18:24:53 +01:00
emanuele-f
5d0ac6049d Add unreachable alert when resolution fails before the ping 2020-03-16 17:59:46 +01:00
emanuele-f
b07485121b RTT improvements 2020-03-16 15:38:36 +01:00
emanuele-f
a86b215485 Improve RTT alert information
Closes #3555
2020-03-16 12:21:07 +01:00
emanuele-f
71e13cdc83 Specify full host label in alert messages
Fixes #3559
2020-03-16 12:04:24 +01:00
emanuele-f
23ccf89cc1 Implement columns sorting in the RTT page
Closes #3557
2020-03-16 11:44:45 +01:00
emanuele-f
26520abf34 Add IPv6 support in HTTP monitor and don't follow the redirects
Fixes #3560
Fixes #3554
2020-03-16 11:23:37 +01:00
emanuele-f
0be214cfae Implement HTTP RTT Monitoring 2020-03-13 19:03:33 +01:00
emanuele-f
fa730db28f Fixes for capture from nProbe Agent
- Add missing protocol guess
- Fix flows filter by L4 protocol
- Fix traffic profile filter validation
- Fix missing apps in the l7 dropdown
- Fix bad unidirectional flow status with ebpf flows
- Fix broken flows refresh in username_details.lua
2020-03-11 19:22:31 +01:00
emanuele-f
c7b2f12cc1 MUD improvements
- Handle configuration reset from gui
- Handle validation
- Show general and special device types info description
2020-03-05 11:56:23 +01:00
emanuele-f
94f175194b Initial changes for MUD recording 2020-03-04 17:05:53 +01:00
Simone Mainardi
1e82eb073b Adds and enforces periodic activities max duration
Implements #3477
2020-03-02 19:09:54 +01:00
Simone Mainardi
5695d2c190 Adds plugin user script to write system alert timeseries 2020-02-28 17:55:28 +01:00
Simone Mainardi
19dabd2c97 Adds timeseries for system alerts counters 2020-02-28 17:54:16 +01:00
Simone Mainardi
82a01c521a Computes CPU states every 5 seconds in the system interface 2020-02-27 16:48:08 +01:00
Simone Mainardi
ef06f9e1d3 Refactors system stats in a module system_utils.lua 2020-02-27 12:24:23 +01:00
Simone Mainardi
b8a510cd61 Implements system script to compute CPU states 2020-02-27 12:04:54 +01:00
Simone Mainardi
ef14382915 Fixes nil alert drops label in issues dropdown 2020-02-27 10:51:07 +01:00
Simone Mainardi
91ad5f05cd Implements CPU states estimator as a system user script 2020-02-26 19:44:24 +01:00
Simone Mainardi
fee595eabf Caps du -s execution using a timeout to prevent long activities 2020-02-26 16:22:22 +01:00
emanuele-f
a6dab125d5 Improve dropped alerts information
- Add informative label
- Add dropped alerts timeseries and chart
- Generate a system alert whenever alerts are dropped on a network interface
- Add a periodic activity warning when some alerts are dropped on that activity

Closes #3025
2020-02-26 16:05:19 +01:00
emanuele-f
bd803e9ce2 Improve slow activity message 2020-02-24 15:35:39 +01:00
Alfredo Cardigliano
dbe07bbfcd Score computation fix (external alerts) 2020-02-24 12:27:48 +01:00
Simone Mainardi
55d5912729 Moves unused slow_stats_update alert to attic 2020-02-21 14:14:01 +01:00
Simone Mainardi
649baa3a84 Implements system alerts for slow periodic activities 2020-02-21 14:05:55 +01:00
Simone Mainardi
bd46b7268e Implements system alerts for not executed activities 2020-02-21 14:00:06 +01:00
Simone Mainardi
d1f11c7de7 Implements slow and not executed periodic activity alerts 2020-02-21 13:29:20 +01:00
emanuele-f
8edee160ed Add missing alert type 2020-02-20 17:09:38 +01:00
emanuele-f
0750d38c05 Label fix 2020-02-19 18:44:42 +01:00
emanuele-f
a6a863d38e Calculate disk space stats once per hour 2020-02-19 17:03:16 +01:00
emanuele-f
7c534a557c Add the is_critical_ts flag to force timeseries write 2020-02-19 15:31:36 +01:00
emanuele-f
d1140ec9fd Avoid timeseries read operations to display the chart icon
Now the icon is displayed whenever the timeseries are enabled for the given context
2020-02-19 13:27:20 +01:00
emanuele-f
15898e8dad Flow dissection code cleanup.
The Flow API is now composed of the following methods:
  - Flow::setDetectedProtocol to manually set a protocol on the flow
    and terminate the dissection
  - Flow::processPacket to run the nDPI dissection on the raw packets
  - Flow::endProtocolDissection to terminate or give up the dissection

Also fixes the flow sampling rate preference, which was never used.
2020-02-17 17:36:06 +01:00
emanuele-f
58b3d42d22 Set max score on hosts contacting blacklisted hosts 2020-02-17 15:16:01 +01:00
emanuele-f
d339c81e5c Remove unused version field form the plugins 2020-02-10 11:55:12 +01:00
emanuele-f
130e540667 Disable redis monitoring script in Windows
This fixes the "unable to persist data" error
2020-02-10 10:56:43 +01:00
emanuele-f
e3d3d3992f Replace an existing flow alert if a more critical problem is found
Also add the flow score into the database
2020-02-07 19:20:57 +01:00
emanuele-f
13ec0d2f44 Use the flow score to determine the status priority 2020-02-07 19:17:07 +01:00
emanuele-f
96925a7e03 Fix invalid flow.triggerStatus calls 2020-02-06 10:31:22 +01:00
Luca
a4c91fd2bd Added value check 2020-01-30 18:58:16 +01:00
emanuele-f
4f6788fb58 New page_utils api to handle sidebar subitems selection 2020-01-30 11:53:13 +01:00
emanuele-f
9833a87cbc Implement alert on InfluxDB error messages 2020-01-28 15:09:24 +01:00
Simone Mainardi
0d70d7c8b9 Fixes title and descr for networks syn scan victim 2020-01-25 18:38:30 +01:00