Commit graph

3 commits

Author SHA1 Message Date
Luca Deri
a153717ee3 Added the ability to generate alert when ntopng detects traffic produced by malware hosts. Currently ntopng uses the blacklist generated by EmergingThreads, but it is possible to extend/modify the list of blacklists by modifying blacklist_utils.lua 2016-11-17 08:58:38 +01:00
Simone Mainardi
2bba05150e Implemenst hosts 'stickyness' across ntopng restarts 2016-08-31 19:29:40 +02:00
Simone Mainardi
85c5beb545 Implements alerts on a per-interface per-vlan basis
Interfaces were handled globally before this commit. Now
alerts can be configured per-interface. So for example alerts
for the same host 193.168.2.1 can be handled differently on multiple interfaces.

Old alerts configured should be automatically migrated thanks to script startup.lua

This commits also paves the way to introduce stateful alerts in the professional version
2016-07-27 22:10:17 +02:00