Alfredo Cardigliano
b84ca05217
Fix validation of list of networks with vlan ( fix #3068 )
2019-11-22 19:11:06 +01:00
Simone Mainardi
2d33f550b2
Implements progress bars to express hash tables usage and entries by state
...
Implements #3042
2019-11-18 17:21:54 +01:00
Alfredo Cardigliano
e38835a603
Rename SSL to TLS ( fix #3013 )
2019-11-15 12:40:01 +01:00
emanuele-f
4d322c3c09
Add missing max devices check
2019-11-05 16:00:26 +01:00
emanuele-f
54140b6f1a
Migrate alertable disabled alerts preference to lua
...
This avoids performing multiple hget on redis, thus increasing performance
2019-11-05 14:59:38 +01:00
emanuele-f
8a2d3dafff
Fix interface paused icon
2019-10-25 16:44:20 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
5e60fb19c9
Implements two-way traffic filter for hosts
2019-10-16 11:01:22 +02:00
emanuele-f
b217909966
Split flow status definitions in multiple files
2019-10-15 17:28:45 +02:00
emanuele-f
2fdc860ed2
Add support for custom flow alerts in user scripts
2019-10-11 19:48:11 +02:00
Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
Simone Mainardi
1af92887fe
Fixes wrong syslog priorities
2019-10-09 01:09:29 +02:00
Simone Mainardi
6bcb8b18a2
Prevents TCP state filter from being shown on non-TCP flows
2019-10-07 18:51:16 +02:00
emanuele-f
1bf89fdb4d
Add server malicious JA3 signature check and improve alert information
...
Closes #2880
2019-09-24 13:30:32 +02:00
emanuele-f
beddb433b7
Add a message when POST form submission fails
2019-09-23 16:00:25 +02:00
emanuele-f
54843a7865
Fix n2disk license validation error
...
Fixes #2872
2019-09-20 12:12:02 +02:00
emanuele-f
50c5395a1c
Replace flow status warning icon to avoid confusion with alerted state
2019-09-18 15:33:33 +02:00
Simone Mainardi
b3d595653e
Initial implementation of lua flow callback scripts and blacklisted alerts
...
Partially implements #2842
2019-09-16 18:27:46 +02:00
Simone Mainardi
b364116e7b
Fixes inteface speed visualization with non-needed decimals
2019-09-11 18:10:28 +02:00
Simone Mainardi
f151fba989
Allows top talkers generation to be enabled/disabled
2019-09-11 16:42:26 +02:00
emanuele-f
6e14f978d6
Flow alerts status cleanup
2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
0d38479297
Fix formatMaliciousSignature with no flowstatus_info
2019-09-09 11:21:26 +02:00
Alfredo Cardigliano
38a53ec1fa
Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page.
2019-09-05 17:55:00 +02:00
Alfredo Cardigliano
141622f151
Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info
2019-09-04 22:20:51 +02:00
emanuele-f
a0d8cd7595
Add l4_proto_to_id
2019-09-02 20:08:38 +02:00
Alfredo Cardigliano
13d032d185
Formatting IDS alerts
2019-08-29 11:20:41 +02:00
emanuele-f
a37bb425ea
Add JA3 signature link in alerts
2019-08-28 18:41:17 +02:00
emanuele-f
b66b71fd7e
Implement alert on JA3 malicious signatures
...
Closes #2788
2019-08-28 18:33:13 +02:00
Simone Mainardi
6300b3ce4e
Fixes flows explorer localtime calculation when time is DST
...
Fixes #2771
2019-08-20 16:45:40 +02:00
Emanuele Faranda
c829c4c3c3
Unify os ( #2755 )
...
* Unify OS information.
Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.
* Fix network discovery OS
* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46
Implement alerts based on potentially dangerous flows nDPI classification
2019-08-07 14:29:06 +02:00
emanuele-f
e82c66fb7c
Fix mixed global/per-interface nindex checks
...
Fix #2725
2019-08-01 11:53:55 +02:00
emanuele-f
ba91b62f0a
Allow spaces in password fields
...
Fixes #2732
2019-08-01 11:12:30 +02:00
Simone Mainardi
c9223590d9
Workaround to handle \n forcefully set when decoding ZMQ tlv
2019-07-31 16:06:15 +02:00
Simone Mainardi
5270d09490
Allows alerts to be configured on view interfaces
2019-07-19 12:43:31 +02:00
emanuele-f
2cdc180c9b
Remove unused function
2019-07-16 14:09:32 +02:00
Simone Mainardi
883b99dce9
Fixes attempt to index a nil value with Syslog alerts
2019-07-16 13:05:27 +02:00
Simone Mainardi
cc97be85ca
Fixes host alerts key generation
2019-07-15 22:54:09 +02:00
Alfredo Cardigliano
2e7e9dcb70
Fixed l4_proto_to_string to return the proto ID with unknown protocols
2019-07-12 16:34:32 +02:00
Alfredo Cardigliano
c63831bfa3
Computing L4 protocol statistics for flows
2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236
Filter flows by L4 protocol
2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
b4f21d1d9b
Moved host 'name' from hostinfo2url which is not supported (and leads to errors in lint)
2019-07-11 14:59:12 +02:00
emanuele-f
ecdf88b8a0
Host alerts migration to new api
2019-07-09 18:50:45 +02:00
emanuele-f
0748ef191d
Initial system interface data delete
2019-07-04 11:09:33 +02:00
emanuele-f
7b936a1a4c
Mesbehaving flows documentation
2019-07-02 16:32:12 +02:00
Simone Mainardi
8c9bf94f4b
Handles possibly missing nindex_utils as in Windows
2019-07-02 16:27:34 +02:00
Simone Mainardi
ae4770fe7d
Improves visualization of containers/pods in flows
2019-06-27 17:00:17 +02:00
emanuele-f
cfa9986671
Implement InfluxDB export statistics
2019-06-10 15:52:06 +02:00
emanuele-f
3ecc032c14
Hide system properties for restricted users
...
This will also hide SNMP devices
2019-06-03 12:42:23 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
...
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
