Commit graph

305 commits

Author SHA1 Message Date
Marco Tranchida
98aa892aab
Implementazione nuovo check, progetto GR (#6074)
* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Add files via upload

* Update en.lua

* Update en.lua

* Update ntop_typedefs.h

* Update HostChecksStatus.h

* Update PktThreshold.cpp
2021-11-18 17:15:07 +01:00
MatteoBiscosi
a8ab396570 Added references to useful infos regarding score anomaly (#5996) 2021-11-02 16:27:07 +01:00
Simone Mainardi
a406391502 Implement stateful SNMP alert to detect too many MACs on non-trunk
Addresses #5893
2021-10-20 12:21:59 +02:00
Simone Mainardi
a63c1dc957 Adds interface throughput check 2021-10-15 14:46:59 +02:00
MatteoBiscosi
fda446fb7c Added ICMP flood alert (#5904) 2021-10-07 11:42:22 +02:00
Simone Mainardi
886537299c Adds traces for (string expected, got light userdata) exceptions 2021-10-07 10:48:09 +02:00
Simone Mainardi
48be233fea Fixes alert_periodicity_changed failing to load graph_map_utils 2021-10-07 10:46:18 +02:00
Simone Mainardi
0987014edb Fixes alert_lateral_movement exceptions on certain versions 2021-10-07 10:43:11 +02:00
Simone Mainardi
08b011acd8 Fixes possible attempts to call nil values in alert defs.
Fixes #5951
2021-10-04 12:24:07 +02:00
Simone Mainardi
cd36f86a2f Simplifies Lua risks (avoids an extra table to be in sync) 2021-10-01 16:32:14 +02:00
MatteoBiscosi
4b197ca2cc Changed alert name (#5805) 2021-10-01 15:52:51 +02:00
Simone Mainardi
9aa1df0296 Removes unused local variables 2021-10-01 11:27:42 +02:00
Simone Mainardi
6da5283ae2 Removes package.path changes possibly causing nil indexing 2021-10-01 11:24:10 +02:00
MatteoBiscosi
1ab8bbe2cd Fixes attempt to index a nil value (global 'dirs') 2021-10-01 11:02:13 +02:00
Simone Mainardi
4509027c1c Fixes attempt to index a nil value (global 'dirs') 2021-10-01 10:27:38 +02:00
Simone Mainardi
63a5df06f6 Implement IPS activities logging (e.g., block, unblock)
Addresses #5900
2021-09-20 16:59:35 +02:00
Simone Mainardi
b01f8e50b8 Fixes TLS version for obsolete TLS alerts via ZMQ
Addresses #5860
2021-09-13 10:21:33 +02:00
Simone Mainardi
5f70c1eff7 Implements support for obsolete client SSH version
Addresses #5861
2021-09-10 12:32:42 +02:00
Simone Mainardi
4b55e02899 Reworks check for Obsolete SSH that was not handling cli and srv
Addresses #5861
2021-09-10 11:58:46 +02:00
MatteoBiscosi
a1e4e21c01 Removed threshold configuration from Score Anomaly check (#5845) 2021-09-07 11:45:16 +02:00
MatteoBiscosi
c15b62407c Separated Score Threshold and Anomaly alert (#5845) 2021-09-07 11:38:48 +02:00
MatteoBiscosi
b82cbe76c9 Reduced length of suspicious dga domain (#5804) 2021-08-26 12:15:19 +02:00
MatteoBiscosi
70e32fd566 Changed redirect icon loc. and added redirect to SuspiciousDgaDomain alert (#5806) 2021-08-26 10:51:12 +02:00
MatteoBiscosi
37267ab935 Removed not used DES structure and Fixed non working alert (#5713) 2021-08-25 16:45:16 +02:00
Francesco Amodeo
de27966413
Implemented countries host check (#5713)
* Added check and alert implementation

* Fixed size of estimation and some typo

* Added HLL counters and DES structure
Co-authored-by: Paolo Junior Mollica <p.mollica@studenti.unipi.it>

* fixes according comments of PR

* decreased memory footprint

* resolved conflicts

* fixed HostCheckID

* Removed wrongly committed file

Co-authored-by: paolo-junior-mollica <paolo.junior.mollica@gmail.com>
Co-authored-by: Matteo Biscosi <49585191+MatteoBiscosi@users.noreply.github.com>
2021-08-25 15:50:07 +02:00
MatteoBiscosi
5df881478d Fixes domain names contacts alert not working 2021-08-25 12:34:38 +02:00
Gaetano Barresi
f650a3700a
Domain Names host check (#5723)
* Adding/modifying .cpp for Domain Names host check

* Adding/modifying .h/.lua for Domain Names host check

* minor synstax fix

* dns_contacts

Co-authored-by: Stefano Russo <55586218+D0kken@users.noreply.github.com>
Co-authored-by: Stefano Russo <s.russo41@studenti.unipi.it>
2021-08-25 11:22:41 +02:00
MatteoBiscosi
156f85e522 Fixes periodicity changed alert link to the map 2021-08-11 16:06:22 +02:00
Simone Mainardi
f6560d1974 Implements and rework alert for flow periodicity change 2021-08-11 15:11:44 +02:00
Simone Mainardi
768c22b6cb Fixes lateral movement link with VLANs 2021-08-11 11:05:40 +02:00
Simone Mainardi
7710386b3c Fixes lateral movement alert links 2021-08-11 10:57:31 +02:00
MatteoBiscosi
4f1a518f7b Removed lua_utils require from lateral movement alert 2021-08-11 09:26:26 +02:00
MatteoBiscosi
d432f28ecd Fixes lateral movement alert not working 2021-08-09 16:25:28 +02:00
Vasilis Tako
4da05360f8 Changed back url from title to href attribute on anchor tags (Issue #5618) 2021-08-04 15:20:04 +02:00
Vasilis Tako
0b0107ab34 Added confirm modal when try to open all external links (Issue #5618) 2021-08-03 19:12:30 +02:00
Simone Mainardi
805b99f03c Adds search by tcp flags in SYN scan alert 2021-08-02 18:43:08 +02:00
Simone Mainardi
92b5f90690 Updates alert flow links for anomaly-based alerts 2021-07-30 15:49:48 +02:00
Simone Mainardi
820e497253 Unifies epoch-related variables in Lua and JS 2021-07-30 15:38:06 +02:00
Simone Mainardi
f563447bd9 Host alert label fixes 2021-07-30 12:51:02 +02:00
Simone Mainardi
7ba9cf0dc5 Adds TCP flag filters in historical flows drilldown 2021-07-28 18:37:43 +02:00
Simone Mainardi
de576aa999 Implements historical floww search function for all host alerts
Addresses #5326
2021-07-28 18:16:32 +02:00
Simone Mainardi
b6913c946d Implements skeleton to drilldown historical flows from alerts
Addresses #5326
2021-07-28 17:19:44 +02:00
Simone Mainardi
5fe995ecfe Implements host check for NTP traffic 2021-07-27 12:19:52 +02:00
Simone Mainardi
1a552d24ec Cleanup excessive traffic check (to be implemented as host check) 2021-07-27 11:39:40 +02:00
Simone Mainardi
aef24d06b0 Implements TLS cert validity check and corresponding test
Addresses https://github.com/ntop/ntopng/issues/5434
Addresses https://github.com/ntop/nDPI/issues/1196
2021-07-14 18:04:00 +02:00
MatteoBiscosi
596ecf87ad Fixes threshold put to 0 for score anomaly (#5657) 2021-07-13 09:53:18 +02:00
MatteoBiscosi
7a04146a00 Added threshold to score anomaly (#5657) 2021-07-12 13:02:31 +02:00
Simone Mainardi
eb41fd4c8f Fixes elephant and long-lived flow alerts visualization
Fixes #5646
2021-07-09 12:12:17 +02:00
Simone Mainardi
04a5a6ea78 Fixes DGA domains not properly handled over ZMQ
Fixes #5649
2021-07-07 19:20:39 +02:00
Simone Mainardi
9c3e4fc5cb Fixes invalid filter for dropped alerts
Fixes #5631
2021-07-07 16:42:17 +02:00