Marco Tranchida
|
98aa892aab
|
Implementazione nuovo check, progetto GR (#6074)
* Add files via upload
* Add files via upload
* Add files via upload
* Add files via upload
* Add files via upload
* Add files via upload
* Add files via upload
* Add files via upload
* Add files via upload
* Update en.lua
* Update en.lua
* Update ntop_typedefs.h
* Update HostChecksStatus.h
* Update PktThreshold.cpp
|
2021-11-18 17:15:07 +01:00 |
|
MatteoBiscosi
|
a8ab396570
|
Added references to useful infos regarding score anomaly (#5996)
|
2021-11-02 16:27:07 +01:00 |
|
Simone Mainardi
|
a406391502
|
Implement stateful SNMP alert to detect too many MACs on non-trunk
Addresses #5893
|
2021-10-20 12:21:59 +02:00 |
|
Simone Mainardi
|
a63c1dc957
|
Adds interface throughput check
|
2021-10-15 14:46:59 +02:00 |
|
MatteoBiscosi
|
fda446fb7c
|
Added ICMP flood alert (#5904)
|
2021-10-07 11:42:22 +02:00 |
|
Simone Mainardi
|
886537299c
|
Adds traces for (string expected, got light userdata) exceptions
|
2021-10-07 10:48:09 +02:00 |
|
Simone Mainardi
|
48be233fea
|
Fixes alert_periodicity_changed failing to load graph_map_utils
|
2021-10-07 10:46:18 +02:00 |
|
Simone Mainardi
|
0987014edb
|
Fixes alert_lateral_movement exceptions on certain versions
|
2021-10-07 10:43:11 +02:00 |
|
Simone Mainardi
|
08b011acd8
|
Fixes possible attempts to call nil values in alert defs.
Fixes #5951
|
2021-10-04 12:24:07 +02:00 |
|
Simone Mainardi
|
cd36f86a2f
|
Simplifies Lua risks (avoids an extra table to be in sync)
|
2021-10-01 16:32:14 +02:00 |
|
MatteoBiscosi
|
4b197ca2cc
|
Changed alert name (#5805)
|
2021-10-01 15:52:51 +02:00 |
|
Simone Mainardi
|
9aa1df0296
|
Removes unused local variables
|
2021-10-01 11:27:42 +02:00 |
|
Simone Mainardi
|
6da5283ae2
|
Removes package.path changes possibly causing nil indexing
|
2021-10-01 11:24:10 +02:00 |
|
MatteoBiscosi
|
1ab8bbe2cd
|
Fixes attempt to index a nil value (global 'dirs')
|
2021-10-01 11:02:13 +02:00 |
|
Simone Mainardi
|
4509027c1c
|
Fixes attempt to index a nil value (global 'dirs')
|
2021-10-01 10:27:38 +02:00 |
|
Simone Mainardi
|
63a5df06f6
|
Implement IPS activities logging (e.g., block, unblock)
Addresses #5900
|
2021-09-20 16:59:35 +02:00 |
|
Simone Mainardi
|
b01f8e50b8
|
Fixes TLS version for obsolete TLS alerts via ZMQ
Addresses #5860
|
2021-09-13 10:21:33 +02:00 |
|
Simone Mainardi
|
5f70c1eff7
|
Implements support for obsolete client SSH version
Addresses #5861
|
2021-09-10 12:32:42 +02:00 |
|
Simone Mainardi
|
4b55e02899
|
Reworks check for Obsolete SSH that was not handling cli and srv
Addresses #5861
|
2021-09-10 11:58:46 +02:00 |
|
MatteoBiscosi
|
a1e4e21c01
|
Removed threshold configuration from Score Anomaly check (#5845)
|
2021-09-07 11:45:16 +02:00 |
|
MatteoBiscosi
|
c15b62407c
|
Separated Score Threshold and Anomaly alert (#5845)
|
2021-09-07 11:38:48 +02:00 |
|
MatteoBiscosi
|
b82cbe76c9
|
Reduced length of suspicious dga domain (#5804)
|
2021-08-26 12:15:19 +02:00 |
|
MatteoBiscosi
|
70e32fd566
|
Changed redirect icon loc. and added redirect to SuspiciousDgaDomain alert (#5806)
|
2021-08-26 10:51:12 +02:00 |
|
MatteoBiscosi
|
37267ab935
|
Removed not used DES structure and Fixed non working alert (#5713)
|
2021-08-25 16:45:16 +02:00 |
|
Francesco Amodeo
|
de27966413
|
Implemented countries host check (#5713)
* Added check and alert implementation
* Fixed size of estimation and some typo
* Added HLL counters and DES structure
Co-authored-by: Paolo Junior Mollica <p.mollica@studenti.unipi.it>
* fixes according comments of PR
* decreased memory footprint
* resolved conflicts
* fixed HostCheckID
* Removed wrongly committed file
Co-authored-by: paolo-junior-mollica <paolo.junior.mollica@gmail.com>
Co-authored-by: Matteo Biscosi <49585191+MatteoBiscosi@users.noreply.github.com>
|
2021-08-25 15:50:07 +02:00 |
|
MatteoBiscosi
|
5df881478d
|
Fixes domain names contacts alert not working
|
2021-08-25 12:34:38 +02:00 |
|
Gaetano Barresi
|
f650a3700a
|
Domain Names host check (#5723)
* Adding/modifying .cpp for Domain Names host check
* Adding/modifying .h/.lua for Domain Names host check
* minor synstax fix
* dns_contacts
Co-authored-by: Stefano Russo <55586218+D0kken@users.noreply.github.com>
Co-authored-by: Stefano Russo <s.russo41@studenti.unipi.it>
|
2021-08-25 11:22:41 +02:00 |
|
MatteoBiscosi
|
156f85e522
|
Fixes periodicity changed alert link to the map
|
2021-08-11 16:06:22 +02:00 |
|
Simone Mainardi
|
f6560d1974
|
Implements and rework alert for flow periodicity change
|
2021-08-11 15:11:44 +02:00 |
|
Simone Mainardi
|
768c22b6cb
|
Fixes lateral movement link with VLANs
|
2021-08-11 11:05:40 +02:00 |
|
Simone Mainardi
|
7710386b3c
|
Fixes lateral movement alert links
|
2021-08-11 10:57:31 +02:00 |
|
MatteoBiscosi
|
4f1a518f7b
|
Removed lua_utils require from lateral movement alert
|
2021-08-11 09:26:26 +02:00 |
|
MatteoBiscosi
|
d432f28ecd
|
Fixes lateral movement alert not working
|
2021-08-09 16:25:28 +02:00 |
|
Vasilis Tako
|
4da05360f8
|
Changed back url from title to href attribute on anchor tags (Issue #5618)
|
2021-08-04 15:20:04 +02:00 |
|
Vasilis Tako
|
0b0107ab34
|
Added confirm modal when try to open all external links (Issue #5618)
|
2021-08-03 19:12:30 +02:00 |
|
Simone Mainardi
|
805b99f03c
|
Adds search by tcp flags in SYN scan alert
|
2021-08-02 18:43:08 +02:00 |
|
Simone Mainardi
|
92b5f90690
|
Updates alert flow links for anomaly-based alerts
|
2021-07-30 15:49:48 +02:00 |
|
Simone Mainardi
|
820e497253
|
Unifies epoch-related variables in Lua and JS
|
2021-07-30 15:38:06 +02:00 |
|
Simone Mainardi
|
f563447bd9
|
Host alert label fixes
|
2021-07-30 12:51:02 +02:00 |
|
Simone Mainardi
|
7ba9cf0dc5
|
Adds TCP flag filters in historical flows drilldown
|
2021-07-28 18:37:43 +02:00 |
|
Simone Mainardi
|
de576aa999
|
Implements historical floww search function for all host alerts
Addresses #5326
|
2021-07-28 18:16:32 +02:00 |
|
Simone Mainardi
|
b6913c946d
|
Implements skeleton to drilldown historical flows from alerts
Addresses #5326
|
2021-07-28 17:19:44 +02:00 |
|
Simone Mainardi
|
5fe995ecfe
|
Implements host check for NTP traffic
|
2021-07-27 12:19:52 +02:00 |
|
Simone Mainardi
|
1a552d24ec
|
Cleanup excessive traffic check (to be implemented as host check)
|
2021-07-27 11:39:40 +02:00 |
|
Simone Mainardi
|
aef24d06b0
|
Implements TLS cert validity check and corresponding test
Addresses https://github.com/ntop/ntopng/issues/5434
Addresses https://github.com/ntop/nDPI/issues/1196
|
2021-07-14 18:04:00 +02:00 |
|
MatteoBiscosi
|
596ecf87ad
|
Fixes threshold put to 0 for score anomaly (#5657)
|
2021-07-13 09:53:18 +02:00 |
|
MatteoBiscosi
|
7a04146a00
|
Added threshold to score anomaly (#5657)
|
2021-07-12 13:02:31 +02:00 |
|
Simone Mainardi
|
eb41fd4c8f
|
Fixes elephant and long-lived flow alerts visualization
Fixes #5646
|
2021-07-09 12:12:17 +02:00 |
|
Simone Mainardi
|
04a5a6ea78
|
Fixes DGA domains not properly handled over ZMQ
Fixes #5649
|
2021-07-07 19:20:39 +02:00 |
|
Simone Mainardi
|
9c3e4fc5cb
|
Fixes invalid filter for dropped alerts
Fixes #5631
|
2021-07-07 16:42:17 +02:00 |
|