Commit graph

4904 commits

Author SHA1 Message Date
Simone Mainardi
879858639a Exposes {periodicity,service} maps in nEdge UI
Addresses #5917
2021-09-28 12:23:31 +02:00
Simone Mainardi
ae66546f31 Fixes REST API incompat. ({v1,v2}/get/alert/type/counters.lua)
Addresses #5754
2021-09-27 16:04:29 +02:00
MatteoBiscosi
98f39fc351 Implements probe name ordering (#5908) 2021-09-27 16:02:44 +02:00
MatteoBiscosi
9afce40299 Added service/periodicity map alerted view (#5782) 2021-09-23 09:43:04 +02:00
Simone Mainardi
4e750c8cde Implements 'All' checks tab to have all checks in a single place
Addresses #5610
2021-09-21 16:25:42 +02:00
Simone Mainardi
63a5df06f6 Implement IPS activities logging (e.g., block, unblock)
Addresses #5900
2021-09-20 16:59:35 +02:00
Simone Mainardi
d2a28ac1b6 Fixes cerain alert descriptions and types missing 2021-09-20 14:23:37 +02:00
Simone Mainardi
fce9a5ed5b Fix for system interface alerts showing up as unknown 2021-09-20 14:06:04 +02:00
Simone Mainardi
ba64aad551 Introduces the IPS/IDS cat. to further classify checks
Addresses #5899
2021-09-20 11:55:47 +02:00
MatteoBiscosi
54d6554549 Fixes top l7 table not filtering properly (#5868) 2021-09-17 16:55:47 +02:00
Luca Deri
4cddc6c280 Added DNS fragment and packet too long alerts 2021-09-17 16:31:02 +02:00
Simone Mainardi
aecc1e3e65 Adds HTTP susp. content risk as example
Addresses #5743
2021-09-15 16:13:14 +02:00
Simone Mainardi
98bebc850c Fixes dynamic loading of Lua flow risk alerts
Addresses #5743
2021-09-15 16:11:09 +02:00
Simone Mainardi
b5640f2b7b Implements lua {check,alert}_definitions for all unhandled risks
Addresses #5743
2021-09-15 16:08:44 +02:00
Simone Mainardi
fef7723445 Implements dynamic loading of flow risk alerts in Lua
Addresses #5743
2021-09-15 13:57:43 +02:00
Simone Mainardi
b01f8e50b8 Fixes TLS version for obsolete TLS alerts via ZMQ
Addresses #5860
2021-09-13 10:21:33 +02:00
Simone Mainardi
5f70c1eff7 Implements support for obsolete client SSH version
Addresses #5861
2021-09-10 12:32:42 +02:00
Simone Mainardi
4b55e02899 Reworks check for Obsolete SSH that was not handling cli and srv
Addresses #5861
2021-09-10 11:58:46 +02:00
Simone Mainardi
2cb849c98f Implements alert filters by score
Implements #5859
2021-09-09 18:27:01 +02:00
MatteoBiscosi
d468ee8f45 Added score to flow alert description (#5862) 2021-09-09 17:01:18 +02:00
MatteoBiscosi
6b7bcef800 Added flow verdict icon (#5854) 2021-09-09 16:37:32 +02:00
Matteo Biscosi
120cd82c39 Changed format and position of Flow Verdict information 2021-09-08 15:47:23 +02:00
MatteoBiscosi
031c006f6d Fixes top senders/receivers only showing local hosts (#5832) 2021-09-07 15:45:12 +02:00
Alfredo Cardigliano
bd7f390d02 Move updates js to the footer to reduce noise 2021-09-07 15:44:44 +02:00
MatteoBiscosi
040dfcbbf8 Added non nil session check 2021-09-07 12:27:11 +02:00
MatteoBiscosi
a1e4e21c01 Removed threshold configuration from Score Anomaly check (#5845) 2021-09-07 11:45:16 +02:00
MatteoBiscosi
c15b62407c Separated Score Threshold and Anomaly alert (#5845) 2021-09-07 11:38:48 +02:00
Simone Mainardi
243bcce623 Adds DNS request type to flow details
Implements #5841
2021-09-06 11:02:51 +02:00
MatteoBiscosi
f83a474f17 Added AS Name to nindex flow export (#5834) 2021-09-03 17:08:49 +02:00
MatteoBiscosi
b697113866 Added at simbol to username pattern (#5835) 2021-09-02 18:21:03 +02:00
MatteoBiscosi
b577afcf0e Generalized get first ip from mac function 2021-09-02 11:13:57 +02:00
MatteoBiscosi
d4f0396568 Changed alerted flow title position (#5820) 2021-08-31 12:46:54 +02:00
MatteoBiscosi
04347a99d8 Implements host pools edit button (#4916) 2021-08-31 11:08:32 +02:00
Vasilis Tako
1ae418344f Implemented date format user preference (#4399) 2021-08-30 19:58:59 +02:00
Vasilis Tako
fe0806a09d Implemented date format UI preference (#4399) 2021-08-27 16:31:12 +02:00
MatteoBiscosi
b0e4dc5d40 Implements Geo Map stats customization (#5802) 2021-08-27 12:27:35 +02:00
Vasilis Tako
432fd040f6 Added custom notes to host config (Issue #5619) 2021-08-26 16:31:10 +02:00
MatteoBiscosi
b82cbe76c9 Reduced length of suspicious dga domain (#5804) 2021-08-26 12:15:19 +02:00
MatteoBiscosi
954f68a5c9 Implements interface dropdown pref to show only name (#5505) 2021-08-26 11:53:13 +02:00
MatteoBiscosi
70e32fd566 Changed redirect icon loc. and added redirect to SuspiciousDgaDomain alert (#5806) 2021-08-26 10:51:12 +02:00
MatteoBiscosi
37267ab935 Removed not used DES structure and Fixed non working alert (#5713) 2021-08-25 16:45:16 +02:00
Francesco Amodeo
de27966413
Implemented countries host check (#5713)
* Added check and alert implementation

* Fixed size of estimation and some typo

* Added HLL counters and DES structure
Co-authored-by: Paolo Junior Mollica <p.mollica@studenti.unipi.it>

* fixes according comments of PR

* decreased memory footprint

* resolved conflicts

* fixed HostCheckID

* Removed wrongly committed file

Co-authored-by: paolo-junior-mollica <paolo.junior.mollica@gmail.com>
Co-authored-by: Matteo Biscosi <49585191+MatteoBiscosi@users.noreply.github.com>
2021-08-25 15:50:07 +02:00
MatteoBiscosi
5df881478d Fixes domain names contacts alert not working 2021-08-25 12:34:38 +02:00
Gaetano Barresi
f650a3700a
Domain Names host check (#5723)
* Adding/modifying .cpp for Domain Names host check

* Adding/modifying .h/.lua for Domain Names host check

* minor synstax fix

* dns_contacts

Co-authored-by: Stefano Russo <55586218+D0kken@users.noreply.github.com>
Co-authored-by: Stefano Russo <s.russo41@studenti.unipi.it>
2021-08-25 11:22:41 +02:00
Alfredo Cardigliano
f4ef606041 Fix connectivity check (use a secure TLS endpoint) 2021-08-23 09:31:34 +02:00
MatteoBiscosi
6d51c6cc68 Simplify service/periodicity map logic and implements #5764 2021-08-19 16:53:02 +02:00
Luca Deri
eb4004024c Tiny improvements for the throughput calculation banner 2021-08-17 22:26:42 +02:00
MatteoBiscosi
6d52f5c488 Fixes laptop not showing in service/periodicity tables 2021-08-16 18:27:16 +02:00
Vasilis Tako
c2bd4c118c Added Dropdown To Select Hosts In Memory Or Not 2021-08-16 16:17:32 +02:00
Simone Mainardi
c1cabfff41 Reworks throughput refresh and unifies refresh rates
Addresses #5768
2021-08-16 14:11:38 +02:00