Simone Mainardi
3ada168fb7
Fixes engaged/dropped alert timeseries wrongly typed
...
Partially addresses #5678
2021-07-14 12:53:55 +02:00
Alfredo Cardigliano
4955ed4757
Fix housekeeping script failure in nEdge
2021-07-13 14:44:21 +02:00
Alfredo Cardigliano
f02986dff5
Add missing require
2021-07-09 16:01:15 +02:00
Alfredo Cardigliano
bb297048c7
Add connectivity check at startup. If offline, check hourly.
2021-07-09 15:45:04 +02:00
Simone Mainardi
2e8a6de0fc
Major terminology unification (user scripts -> checks)
2021-06-17 12:39:43 +02:00
Simone Mainardi
4a526c3cdf
Decouples checks from alerts (removes unnecessary flag is_alert)
2021-06-17 11:43:12 +02:00
Simone Mainardi
76fd315d1b
Refactors user_scripts into checks (lua)
2021-06-16 18:02:22 +02:00
Luca Deri
4c27f6f98c
Implemented handlig of hello message from nprobe
2021-05-28 19:34:11 +02:00
Matteo Biscosi
abd51d295f
Changed nProbe policy push
2021-05-27 15:00:55 +02:00
Matteo Biscosi
79a563c1a9
Added IPS policy load at startup
2021-05-27 14:57:49 +02:00
Matteo Biscosi
b678a2128e
Added jailed hosts refresh when removed a member and at startup
2021-05-27 11:38:32 +02:00
Luca Deri
6d93ae5a72
Added check for banned hosts processing
2021-05-26 23:26:30 +02:00
Alfredo Cardigliano
9bc4dbe078
Move ips pool creation after recipients initialization
2021-05-26 09:52:13 +02:00
Matteo Biscosi
c7b6e038cb
Implements add host to drop pool by alert callback ( #5405 )
2021-05-25 17:57:26 +02:00
Matteo Biscosi
1336855981
Removed debug print
2021-05-25 12:19:00 +02:00
Matteo Biscosi
900a867a9b
Standardized host pool name
2021-05-25 12:15:22 +02:00
Matteo Biscosi
b06ea2e8a0
Added default drop hosts poll creation at boot
2021-05-25 11:22:32 +02:00
Simone Mainardi
44861bcc0c
Fixes deletion of old alerts
2021-05-03 16:48:30 +02:00
Matteo Biscosi
97c83e1d75
Fixes delete alerts older then
2021-03-04 18:21:00 +01:00
Simone Mainardi
716d907ff1
Configset initialization fixes
2021-03-01 18:19:38 +01:00
Alfredo Cardigliano
fa311e3ade
Rework user script working sets (a single configset is supported now)
2021-03-01 15:37:45 +01:00
Simone Mainardi
696bcb33e5
Implements alert exclusions for hosts, interfaces, local networks
2021-02-23 15:36:14 +01:00
Matteo Biscosi
c62c2c232e
Removed useless requires for enchanting performances
...
Removed, where it was possible, the lua requires, with the objective of enchanting the performances of periodic activities
2021-02-23 10:51:50 +01:00
Luca Deri
f1c87e533f
Simplified housekeeping.lua
2021-02-22 18:03:25 +01:00
Luca Deri
a4a2a13fed
Added migration for old service map keys
...
Added dynamic memory management of ntop.getHashCache()
2021-02-04 17:16:14 +01:00
Matteo Biscosi
98917ee686
Implements #4937 top sites generation broken
2021-01-21 15:44:15 +01:00
Simone Mainardi
c3c2a58c3a
String fix
2021-01-12 15:47:00 +01:00
Luca Deri
a1178a0791
Updated (C)
2021-01-02 12:08:23 +01:00
Simone Mainardi
d989f8d2c6
Reworks notifications thread to avoid Redis accesses
...
Fixes #4673
2020-12-29 18:48:55 +01:00
Simone Mainardi
dc007ba88b
Disables user script benchmarks calculated but not used by default
...
Partially addresses #4673
2020-12-28 14:51:42 +01:00
Simone Mainardi
3baa932a01
Migrates alerts to an object-oriented implementation
...
Migrates alert_malicious_signature alert_elephant_local_to_remote alert_elephant_remote_to_local
Migrates long_lived
Migrates alert_flow_blocked
Migrates alert_tls_old_version
Migrates alert_tls_certificate_mismatch
Migrates alert_tls_certificate_expired
Migrates alert_tls_unsafe_ciphers
Migrates alert_tls_certificate_selfsigned
Migrates alert_potentially_dangerous_protocol
Migrates alert_snmp_device_reset
Migrates alert_port_mac_changed
Migrates alert_port_duplexstatus_change
Mirgates alert_port_errors
Migrates alert_port_status_change
Migrates alert_port_load_threshold_exceeded
Migrates alert_data_exfiltration
Migrates alert_dns_data_exfiltration
Migrates alert_suspicious_tcp_probing alert_suspicious_tcp_syn_probing alert_tcp_connection_refused
Migrates alert_dns_invalid_query
Migrates alert_attack_mitigation_via_snmp
Migrates alert_lateral_movement
Migrates alert_periodicity_update
Migrates alert_dns_positive_error_ratio
Migrates alert_iec104_error
2020-12-22 09:56:38 +01:00
Simone Mainardi
1a71ba4f5f
Removes remote assistance
...
Fixes #4785
2020-12-17 19:41:37 +01:00
Alfredo Cardigliano
d19db6b678
Run ntopng on the bridge interface when running in bridge mode as appliance
2020-11-27 16:43:31 +01:00
gabryon99
15772bd0fe
refactor for endpoints and recipients ( #4707 )
2020-11-25 16:25:55 +01:00
Alfredo Cardigliano
9a26717a71
System config cleanup, add startup initialization, add more admin checks, move reset code to nf_config
2020-11-20 15:47:21 +01:00
Alfredo Cardigliano
8e62a71eee
Rename system_utils.lua -> cpu_utils.lua to avoid confusion
2020-11-17 12:41:06 +01:00
Alfredo Cardigliano
ba9c501c4d
Add support for system configuration (WIP)
2020-11-17 11:54:47 +01:00
Luca Deri
216b1532da
IEC 60870 dissection improvements and hardening
2020-11-04 15:46:36 +01:00
Luca Deri
ea83944609
Cosmetic message changes
2020-10-29 09:46:29 +01:00
Luca
3449593087
Reworked notifications and fixed a bug that caused them to be fetched too often putting pressure on the blog feed
2020-10-16 09:31:04 +02:00
Luca Deri
77ab1e3a8a
Added fix for #4534
...
- in case of startup crash and automtic restart, ntopng would reload lists resetting errors. This caused the storm of updates
- updated the URL to https://snort.org/downloads/ip-block-list
- in case of failure we retry the URL only once (it used to be twice) after one hour.
2020-10-15 17:17:35 +02:00
Simone Mainardi
6fc182412f
Reworks factory reset
2020-10-13 15:16:59 +02:00
Simone Mainardi
5b878a2a7a
Reworks reload of in-mem preferences and runtimeprefs.json dump
2020-10-13 12:49:48 +02:00
Simone Mainardi
efe6bcf691
Fixes notifications.lua running for too long
...
Fixes #4523
2020-10-05 13:14:55 +02:00
Simone Mainardi
72e4382333
Reworks purging of idle entries without Lua periodic scripts
2020-10-01 16:08:21 +02:00
Simone Mainardi
36aec9019a
Adds missing interface selection in purge_idle.lua
2020-09-29 19:16:50 +02:00
Simone Mainardi
8392e126f8
Simplifies and reduces the number of threads for purging idle entries
2020-09-29 18:51:44 +02:00
Simone Mainardi
6c1280a8e5
Reworks recipients.lua as static rather than (useless) instance
2020-09-23 15:03:07 +02:00
Simone Mainardi
3ad4522e45
Implements additional plugin hooks
...
The following plugin hooks have been implemented
onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)
Documentation is part of the commit.
Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Simone Mainardi
8b9038a70c
Waits plugins reload before initializing recipients
2020-09-17 14:13:30 +02:00