Commit graph

2150 commits

Author SHA1 Message Date
emanuele-f
b66b71fd7e Implement alert on JA3 malicious signatures
Closes #2788
2019-08-28 18:33:13 +02:00
emanuele-f
a8cb972e7d Implement ghost networks alerts 2019-08-28 16:42:18 +02:00
emanuele-f
3bf6ed1ecd Add syn-vs-rst and misbehaving-vs-total-flows alerts 2019-08-27 16:33:53 +02:00
Simone Mainardi
606e681d8e Fixes flow alerts exploration
Fixes #2782
2019-08-27 15:42:35 +02:00
emanuele-f
300ea49b10 Little localization fix 2019-08-27 14:37:01 +02:00
emanuele-f
01c586119e Remove ICMP ratio alert and enable ratio alerts by default in 5mins 2019-08-27 14:32:24 +02:00
emanuele-f
b3bdfcff32 Cleanup of the too-many-drops interface alert 2019-08-27 13:04:53 +02:00
emanuele-f
eb3542d7e7 Address too much ratio alerts generated after host deserialization 2019-08-27 11:02:28 +02:00
emanuele-f
57e623da04 Implement ICMP and HTTP requests vs replies ratio alert 2019-08-27 10:33:08 +02:00
emanuele-f
5dd88985f4 Improve and fix DNS replies/requests ratio 2019-08-27 09:57:59 +02:00
emanuele-f
a0761db1e8 Implement replies/requests ratio alert 2019-08-26 18:38:34 +02:00
emanuele-f
b0ba13f0bc Syn/flow flood alerts now use their own alert type 2019-08-26 17:36:27 +02:00
Simone Mainardi
11aa854cba Handles hosts HASSH fingerprints 2019-08-26 16:55:39 +02:00
emanuele-f
abdc3d54a3 Handle alert config default values
Closes #2747
2019-08-23 19:23:05 +02:00
emanuele-f
16b839828d Reduce alerts drop message severity 2019-08-23 14:29:48 +02:00
emanuele-f
de7a5a49d8 Implement optimized hasAlerts to reduce alerts page load time 2019-08-23 13:00:52 +02:00
Simone Mainardi
c8fb20bed9 Makes alert database tables rowid as autoincrement 2019-08-23 10:31:56 +02:00
emanuele-f
2814a94077 Report curl error while a list download fails
Fixes #2777
2019-08-23 09:52:58 +02:00
Simone Mainardi
061eb632a6 Initial implementation of the icinga2 checker plugin 2019-08-22 17:16:14 +02:00
emanuele-f
f43f4b7dd9 Add engaged alerts type exclusion filter
Fixes #2780
2019-08-22 16:30:45 +02:00
emanuele-f
7534fa4636 Fix ifid handling in disabled alerts 2019-08-22 15:53:29 +02:00
emanuele-f
65b2bd6ffb Fix missing alerts filters when a filter is in place 2019-08-22 15:25:54 +02:00
emanuele-f
3a3e4c6880 Properly handle alert filters dropdowns
Closes #2778
2019-08-22 15:13:54 +02:00
emanuele-f
e2a0299857 Add past alerts and flow alerts to host details 2019-08-22 12:50:11 +02:00
emanuele-f
1032af0d8f Add network engage_alerts timeseries 2019-08-21 17:07:58 +02:00
emanuele-f
69cd896a9f Implement engaged alerts and flow alerts timeseries 2019-08-21 16:57:14 +02:00
emanuele-f
2b2a74af79 Fix bad time resolution of values for some host exported timeseries
- active_flows.as_client
- active_flows.as_server
- total_flows.as_client
- total_flows.as_server
- contacts.as_client
- contacts.as_server
- DNS, TCP, ICMP stats

Fixes #2776
2019-08-21 15:37:17 +02:00
emanuele-f
951cb1a4e9 Fix alert issues due to invalid granularities 2019-08-21 10:27:15 +02:00
emanuele-f
7893c1f78a Implement RTT host engage/release alert 2019-08-20 19:02:58 +02:00
emanuele-f
87ba28195b Add support to engage/release on external alerts 2019-08-20 19:02:58 +02:00
Simone Mainardi
6300b3ce4e Fixes flows explorer localtime calculation when time is DST
Fixes #2771
2019-08-20 16:45:40 +02:00
Simone Mainardi
15794cb49f Adds dropped flows column in nedge users page 2019-08-20 12:26:43 +02:00
emanuele-f
403e2316f2 Delete un-suppressed alerts prefs from hash 2019-08-20 12:18:31 +02:00
emanuele-f
0751a59093 Alert settings gui changes 2019-08-20 12:06:11 +02:00
emanuele-f
d1c5275302 Move suppressed alerts flag to C to reduce Redis load 2019-08-20 11:54:25 +02:00
Simone Mainardi
3413a6afd0 Implements stats rather than grouped hosts data for host pools stats 2019-08-20 11:45:11 +02:00
Simone Mainardi
74c545d079 Uses stats rather than grouped hosts data for network stats 2019-08-19 17:39:51 +02:00
Simone Mainardi
3a5de882fe Fixes lua nil-call exception upon InfluxDB errors
Fixes
WARNING: Script failure [/home/simone/ntopng/scripts/callbacks/system/timeseries.lua][/home/simone/ntopng/scripts/lua/modules/alerts_api.lua:223: attempt to call a nil value (global 'alertEntity')]
2019-08-16 20:48:11 +02:00
Alfredo Cardigliano
b8f20724c6 Using cache to check for completed extraction jobs only when there are pending jobs (#2767) 2019-08-16 14:33:55 +02:00
emanuele-f
ee3a5e7413 Use check_module key instead of script name 2019-08-08 18:03:16 +02:00
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46 Implement alerts based on potentially dangerous flows nDPI classification 2019-08-07 14:29:06 +02:00
emanuele-f
3ab6ff7901 Add support for on/off alert configuration 2019-08-06 17:29:35 +02:00
emanuele-f
c1b114e151 Fix invalid influxdb/lists alert entity 2019-08-06 15:36:15 +02:00
Simone Mainardi
abd7041dd4 Allows host pools to be configured for view interfaces 2019-08-06 10:23:39 +02:00
emanuele-f
b365cd28df Prevent possible timestamp-based rrd_update errors from occurring 2019-08-02 11:52:40 +02:00
emanuele-f
ebc204b0cc Fix RRD update errors due to invalid min timestamp calculation
SNMP hosts appear into ntopng during 5min script run, so their timestamp corresponds exactly
to the 5min script timestamp. This triggered the issue.

Fixes #2734
2019-08-02 10:42:01 +02:00
emanuele-f
eebf8674ac Add nil checks 2019-08-02 09:57:27 +02:00
emanuele-f
e82c66fb7c Fix mixed global/per-interface nindex checks
Fix #2725
2019-08-01 11:53:55 +02:00
emanuele-f
ba91b62f0a Allow spaces in password fields
Fixes #2732
2019-08-01 11:12:30 +02:00