378 commits

Author	SHA1	Message	Date
emanuele-f	b3a8c6d49a	Migrate C flow status alerts to Lua user scripts ... - Alerts and flow status cleanup - Community flow user scripts migration - Implement scripts filters by l7 proto and packet interface only - Migrate flow2statusinfojson - Lower flow periodic update to 30 seconds if there is flow activity - Display flow scripts without a gui section	2019-10-22 10:42:22 +02:00
Simone Mainardi	6fd7386c03	Fixes possible collisions when looking up flows by key	2019-10-16 19:04:10 +02:00
emanuele-f	873b96c20a	Split alert types definitions in multiple files	2019-10-16 12:04:07 +02:00
emanuele-f	7a14a9cf11	Improvements in status definition API	2019-10-16 10:33:19 +02:00
emanuele-f	9ea7ff01b8	Improve flow alert trigger logic and fix support for custom message	2019-10-15 18:36:41 +02:00
emanuele-f	b217909966	Split flow status definitions in multiple files	2019-10-15 17:28:45 +02:00
Simone Mainardi	b258f45858	Fixes deletion of old alerts when above a certain threshold	2019-10-14 18:03:16 +02:00
emanuele-f	7bd6feb622	Rename check_module -> user_script	2019-10-10 18:14:53 +02:00
Simone Mainardi	4ef7d35296	Benchmarks for hosts interface and network scripts	2019-10-10 11:54:31 +02:00
emanuele-f	ab0094c1c3	Unify syslog with user scripts API	2019-10-09 18:53:19 +02:00
emanuele-f	ffd3b4c1ee	Users scripts api changes and initial documentation	2019-10-09 15:12:28 +02:00
emanuele-f	ede9a7940a	Generalize periodic and flows callbacks ... Now periodic callbacks are properly called even when alerts are disabled The granularity filter and check_function has been replaced with a more generic hooks list	2019-10-07 19:05:43 +02:00
Simone Mainardi	aceb123ebb	Adds About/directories page listing custom scripts directories	2019-10-07 11:34:39 +02:00
emanuele-f	bee1efdded	Move callbacks scripts into separate tab	2019-10-04 10:48:13 +02:00
Simone Mainardi	d5df15d123	Fixes flow alerts missing from external alert endpoints	2019-10-03 16:37:59 +02:00
emanuele-f	1bf89fdb4d	Add server malicious JA3 signature check and improve alert information ... Closes #2880	2019-09-24 13:30:32 +02:00
Simone Mainardi	3ea092093f	Adds generic probes tab to the alerts pages	2019-09-23 18:50:43 +02:00
emanuele-f	66827f9baa	Remove duplicate table in disabled-alerts	2019-09-23 13:05:51 +02:00
emanuele-f	6233606057	Fix disabled alerts bad interface selection	2019-09-23 12:33:01 +02:00
emanuele-f	f735749716	Add flow alert information into the flow defails	2019-09-18 15:10:41 +02:00
Simone Mainardi	b3d595653e	Initial implementation of lua flow callback scripts and blacklisted alerts ... Partially implements #2842	2019-09-16 18:27:46 +02:00
Simone Mainardi	cc75605d0d	Adds hyperlink to engaged alerts historical timeseries ... Implements #2850	2019-09-13 15:38:41 +02:00
Simone Mainardi	9fe404772d	Handles flow alerts and alert queues in view interfaces ... Implements #2828	2019-09-10 15:48:39 +02:00
emanuele-f	b2a0956e0d	Fix host disabled flow status settings page error	2019-09-10 15:10:27 +02:00
emanuele-f	06f3077da8	Avoid excessive redis lookups for hosts when hosts cache is disabled	2019-09-09 12:42:35 +02:00
Alfredo Cardigliano	141622f151	Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info	2019-09-04 22:20:51 +02:00
emanuele-f	d630cce58a	Fix script failures in SNMP message formatters	2019-09-04 15:36:46 +02:00
emanuele-f	b62e4183f0	Add ability to manually release an alert	2019-09-04 12:29:13 +02:00
emanuele-f	08e616a5d4	Fix "Could not retrieve alert information" on pcap dump interfaces	2019-09-03 18:59:19 +02:00
emanuele-f	3bf6ed1ecd	Add syn-vs-rst and misbehaving-vs-total-flows alerts	2019-08-27 16:33:53 +02:00
Simone Mainardi	606e681d8e	Fixes flow alerts exploration ... Fixes #2782	2019-08-27 15:42:35 +02:00
emanuele-f	01c586119e	Remove ICMP ratio alert and enable ratio alerts by default in 5mins	2019-08-27 14:32:24 +02:00
emanuele-f	b3bdfcff32	Cleanup of the too-many-drops interface alert	2019-08-27 13:04:53 +02:00
emanuele-f	a0761db1e8	Implement replies/requests ratio alert	2019-08-26 18:38:34 +02:00
emanuele-f	abdc3d54a3	Handle alert config default values ... Closes #2747	2019-08-23 19:23:05 +02:00
emanuele-f	de7a5a49d8	Implement optimized hasAlerts to reduce alerts page load time	2019-08-23 13:00:52 +02:00
Simone Mainardi	c8fb20bed9	Makes alert database tables rowid as autoincrement	2019-08-23 10:31:56 +02:00
emanuele-f	f43f4b7dd9	Add engaged alerts type exclusion filter ... Fixes #2780	2019-08-22 16:30:45 +02:00
emanuele-f	7534fa4636	Fix ifid handling in disabled alerts	2019-08-22 15:53:29 +02:00
emanuele-f	65b2bd6ffb	Fix missing alerts filters when a filter is in place	2019-08-22 15:25:54 +02:00
emanuele-f	3a3e4c6880	Properly handle alert filters dropdowns ... Closes #2778	2019-08-22 15:13:54 +02:00
emanuele-f	e2a0299857	Add past alerts and flow alerts to host details	2019-08-22 12:50:11 +02:00
emanuele-f	403e2316f2	Delete un-suppressed alerts prefs from hash	2019-08-20 12:18:31 +02:00
emanuele-f	0751a59093	Alert settings gui changes	2019-08-20 12:06:11 +02:00
emanuele-f	d1c5275302	Move suppressed alerts flag to C to reduce Redis load	2019-08-20 11:54:25 +02:00
emanuele-f	ee3a5e7413	Use check_module key instead of script name	2019-08-08 18:03:16 +02:00
emanuele-f	3ab6ff7901	Add support for on/off alert configuration	2019-08-06 17:29:35 +02:00
emanuele-f	eebf8674ac	Add nil checks	2019-08-02 09:57:27 +02:00
emanuele-f	e82c66fb7c	Fix mixed global/per-interface nindex checks ... Fix #2725	2019-08-01 11:53:55 +02:00
emanuele-f	444916fa14	Fix wrong engaged alerts number when a filter is applied	2019-07-31 15:05:26 +02:00