Commit graph

321 commits

Author SHA1 Message Date
Simone Mainardi
3ada168fb7 Fixes engaged/dropped alert timeseries wrongly typed
Partially addresses #5678
2021-07-14 12:53:55 +02:00
Alfredo Cardigliano
4955ed4757 Fix housekeeping script failure in nEdge 2021-07-13 14:44:21 +02:00
Alfredo Cardigliano
f02986dff5 Add missing require 2021-07-09 16:01:15 +02:00
Alfredo Cardigliano
bb297048c7 Add connectivity check at startup. If offline, check hourly. 2021-07-09 15:45:04 +02:00
Simone Mainardi
2e8a6de0fc Major terminology unification (user scripts -> checks) 2021-06-17 12:39:43 +02:00
Simone Mainardi
4a526c3cdf Decouples checks from alerts (removes unnecessary flag is_alert) 2021-06-17 11:43:12 +02:00
Simone Mainardi
76fd315d1b Refactors user_scripts into checks (lua) 2021-06-16 18:02:22 +02:00
Luca Deri
4c27f6f98c Implemented handlig of hello message from nprobe 2021-05-28 19:34:11 +02:00
Matteo Biscosi
abd51d295f Changed nProbe policy push 2021-05-27 15:00:55 +02:00
Matteo Biscosi
79a563c1a9 Added IPS policy load at startup 2021-05-27 14:57:49 +02:00
Matteo Biscosi
b678a2128e Added jailed hosts refresh when removed a member and at startup 2021-05-27 11:38:32 +02:00
Luca Deri
6d93ae5a72 Added check for banned hosts processing 2021-05-26 23:26:30 +02:00
Alfredo Cardigliano
9bc4dbe078 Move ips pool creation after recipients initialization 2021-05-26 09:52:13 +02:00
Matteo Biscosi
c7b6e038cb Implements add host to drop pool by alert callback (#5405) 2021-05-25 17:57:26 +02:00
Matteo Biscosi
1336855981 Removed debug print 2021-05-25 12:19:00 +02:00
Matteo Biscosi
900a867a9b Standardized host pool name 2021-05-25 12:15:22 +02:00
Matteo Biscosi
b06ea2e8a0 Added default drop hosts poll creation at boot 2021-05-25 11:22:32 +02:00
Simone Mainardi
44861bcc0c Fixes deletion of old alerts 2021-05-03 16:48:30 +02:00
Matteo Biscosi
97c83e1d75 Fixes delete alerts older then 2021-03-04 18:21:00 +01:00
Simone Mainardi
716d907ff1 Configset initialization fixes 2021-03-01 18:19:38 +01:00
Alfredo Cardigliano
fa311e3ade Rework user script working sets (a single configset is supported now) 2021-03-01 15:37:45 +01:00
Simone Mainardi
696bcb33e5 Implements alert exclusions for hosts, interfaces, local networks 2021-02-23 15:36:14 +01:00
Matteo Biscosi
c62c2c232e Removed useless requires for enchanting performances
Removed, where it was possible, the lua requires, with the objective of enchanting the performances of periodic activities
2021-02-23 10:51:50 +01:00
Luca Deri
f1c87e533f Simplified housekeeping.lua 2021-02-22 18:03:25 +01:00
Luca Deri
a4a2a13fed Added migration for old service map keys
Added dynamic memory management of ntop.getHashCache()
2021-02-04 17:16:14 +01:00
Matteo Biscosi
98917ee686 Implements #4937 top sites generation broken 2021-01-21 15:44:15 +01:00
Simone Mainardi
c3c2a58c3a String fix 2021-01-12 15:47:00 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
d989f8d2c6 Reworks notifications thread to avoid Redis accesses
Fixes #4673
2020-12-29 18:48:55 +01:00
Simone Mainardi
dc007ba88b Disables user script benchmarks calculated but not used by default
Partially addresses #4673
2020-12-28 14:51:42 +01:00
Simone Mainardi
3baa932a01 Migrates alerts to an object-oriented implementation
Migrates alert_malicious_signature alert_elephant_local_to_remote alert_elephant_remote_to_local

Migrates long_lived

Migrates alert_flow_blocked

Migrates alert_tls_old_version

Migrates alert_tls_certificate_mismatch

Migrates alert_tls_certificate_expired

Migrates alert_tls_unsafe_ciphers

Migrates alert_tls_certificate_selfsigned

Migrates alert_potentially_dangerous_protocol

Migrates alert_snmp_device_reset

Migrates alert_port_mac_changed

Migrates alert_port_duplexstatus_change

Mirgates alert_port_errors

Migrates alert_port_status_change

Migrates alert_port_load_threshold_exceeded

Migrates alert_data_exfiltration

Migrates alert_dns_data_exfiltration

Migrates alert_suspicious_tcp_probing alert_suspicious_tcp_syn_probing alert_tcp_connection_refused

Migrates alert_dns_invalid_query

Migrates alert_attack_mitigation_via_snmp

Migrates alert_lateral_movement

Migrates alert_periodicity_update

Migrates alert_dns_positive_error_ratio

Migrates alert_iec104_error
2020-12-22 09:56:38 +01:00
Simone Mainardi
1a71ba4f5f Removes remote assistance
Fixes #4785
2020-12-17 19:41:37 +01:00
Alfredo Cardigliano
d19db6b678 Run ntopng on the bridge interface when running in bridge mode as appliance 2020-11-27 16:43:31 +01:00
gabryon99
15772bd0fe refactor for endpoints and recipients (#4707) 2020-11-25 16:25:55 +01:00
Alfredo Cardigliano
9a26717a71 System config cleanup, add startup initialization, add more admin checks, move reset code to nf_config 2020-11-20 15:47:21 +01:00
Alfredo Cardigliano
8e62a71eee Rename system_utils.lua -> cpu_utils.lua to avoid confusion 2020-11-17 12:41:06 +01:00
Alfredo Cardigliano
ba9c501c4d Add support for system configuration (WIP) 2020-11-17 11:54:47 +01:00
Luca Deri
216b1532da IEC 60870 dissection improvements and hardening 2020-11-04 15:46:36 +01:00
Luca Deri
ea83944609 Cosmetic message changes 2020-10-29 09:46:29 +01:00
Luca
3449593087 Reworked notifications and fixed a bug that caused them to be fetched too often putting pressure on the blog feed 2020-10-16 09:31:04 +02:00
Luca Deri
77ab1e3a8a Added fix for #4534
- in case of startup crash and automtic restart, ntopng would reload lists resetting errors. This caused the storm of updates
- updated the URL to https://snort.org/downloads/ip-block-list
- in case of failure we retry the URL only once (it used to be twice) after one hour.
2020-10-15 17:17:35 +02:00
Simone Mainardi
6fc182412f Reworks factory reset 2020-10-13 15:16:59 +02:00
Simone Mainardi
5b878a2a7a Reworks reload of in-mem preferences and runtimeprefs.json dump 2020-10-13 12:49:48 +02:00
Simone Mainardi
efe6bcf691 Fixes notifications.lua running for too long
Fixes #4523
2020-10-05 13:14:55 +02:00
Simone Mainardi
72e4382333 Reworks purging of idle entries without Lua periodic scripts 2020-10-01 16:08:21 +02:00
Simone Mainardi
36aec9019a Adds missing interface selection in purge_idle.lua 2020-09-29 19:16:50 +02:00
Simone Mainardi
8392e126f8 Simplifies and reduces the number of threads for purging idle entries 2020-09-29 18:51:44 +02:00
Simone Mainardi
6c1280a8e5 Reworks recipients.lua as static rather than (useless) instance 2020-09-23 15:03:07 +02:00
Simone Mainardi
3ad4522e45 Implements additional plugin hooks
The following plugin hooks have been implemented

onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)

Documentation is part of the commit.

Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Simone Mainardi
8b9038a70c Waits plugins reload before initializing recipients 2020-09-17 14:13:30 +02:00