55 commits

Author	SHA1	Message	Date
Luca Deri	cb03021f4e	Updated DB asset schema ... Fixed URL in host details	2025-03-27 19:36:56 +01:00
Alfredo Cardigliano	b246fe94b0	Cleanup old flow_alerts table schema	2025-03-19 16:00:13 +01:00
Alfredo Cardigliano	97ca40a349	Add ja4 client fingerprint and custom queries	2025-03-12 16:57:10 +01:00
Alfredo Cardigliano	bb9216ba7b	Add QOE_SCORE column	2025-02-25 09:39:05 +01:00
Matteo Biscosi	5c4509c62e	Removed unused tables	2025-01-14 17:59:48 +01:00
Alfredo Cardigliano	a4b7228a3a	Cleanup CH schema	2024-12-31 10:23:23 +01:00
Matteo Biscosi	a63dec0dcc	Reworked assets table	2024-12-30 12:37:54 +01:00
Alfredo Cardigliano	ae5128c620	Split protocol and alert info from ALERT_JSON: new PROTOCOL_INFO_JSON column	2024-12-05 15:13:16 +01:00
Alfredo Cardigliano	0447fe89a7	Fix asset_management schema	2024-11-19 13:05:47 +01:00
Alfredo Cardigliano	173e0aaca0	Add in-memory tables for all alert families. Add aggregated views for all families.	2024-11-12 09:57:02 +01:00
Alfredo Cardigliano	12407d6604	Add require_attention to all alert families on CH	2024-11-11 18:23:21 +01:00
Alfredo Cardigliano	6f9d0690c6	Add require_attention to all alert families on SQLite. Cleanup SQLite schema	2024-11-11 18:12:27 +01:00
Alfredo Cardigliano	2da5925181	Fix all alerts page. Fix require attention results.	2024-11-11 15:59:58 +01:00
Alfredo Cardigliano	f3963c9eb1	Split alert_status (engaged, historical, acknowledged) and require_attention flag	2024-11-11 12:46:25 +01:00
Alfredo Cardigliano	7dedfa1a8c	Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse	2024-11-08 12:46:41 +01:00
Matteo Biscosi	679ef8edab	Possible fix for asset management not working	2024-11-05 15:51:03 +01:00
Matteo Biscosi	20ed95fcb0	Added asset management table	2024-11-05 13:46:57 +01:00
Alfredo Cardigliano	89f59cde5a	Migrate local networks type from 16 to 32 bit	2024-10-29 15:31:37 +01:00
Alfredo Cardigliano	fb30f7592f	Fix schema. Add DOMAIN_NAME.	2024-10-28 11:22:36 +01:00
Alfredo Cardigliano	1eab4beac5	Restore SRC_NETWORK_ID DST_NETWORK_ID data type to UInt16 for the time being	2024-10-25 11:59:17 +02:00
Alfredo Cardigliano	d25e23a599	Remove SRC_NETWORK_ID DST_NETWORK_ID type change from init (to be moved to the startup script)	2024-10-25 11:55:17 +02:00
Alfredo Cardigliano	5fd9b1c1f6	Change SRC_NETWORK_ID DST_NETWORK_ID from UInt16 to UInt32	2024-10-25 11:05:41 +02:00
Matteo Biscosi	1fe009b9cc	Fixes issue with ntopng report page (#8688)	2024-09-30 15:31:39 +02:00
Alfredo Cardigliano	d9057e8236	Add WLAN_SSID WTP_MAC_ADDRESS to hourly_flows	2024-09-19 12:39:22 +02:00
Alfredo Cardigliano	7b291f5fca	Dump WLAN_SSID and WTP_MAC_ADDRESS in historical flows	2024-09-16 18:31:42 +02:00
DGabri	869fcbf626	Added useful columns in table, removed unnecessary columns	2024-08-19 18:11:40 +02:00
DGabri	35b1700620	Added documentation for clickhouse tables and added forgotten columns to flow_alerts_view	2024-08-19 18:05:14 +02:00
Alfredo Cardigliano	5768dd88d6	Add mitre table and flow/host alerts views on clickhouse cluster	2024-08-19 09:00:41 +02:00
Alfredo Cardigliano	d944725bbb	Optimize selects for left join	2024-08-09 16:04:04 +02:00
Alfredo Cardigliano	1ddc1ab77a	Fix left join for flow alerts view in case of no mitre id for the alert	2024-08-09 15:57:27 +02:00
DGabri	b13c3e3361	Removed old flow alert view	2024-08-05 16:18:43 +02:00
DGabri	7b6a12fbc3	Implemented mitre views. Ticket: #8592	2024-08-05 16:12:52 +02:00
Luca Ferretti	7cceb656c0	fixed typo (#8565) ... * added netbox documentation * Update asset_inventory.rst * added ndpi-protocols ipv6 rules * updated ipv6 check for custom rule * fix typo * implemented mitre_table_info inside database * fixed typo * changed tecnique to technique typo * Update host_alert_scan_detected.lua	2024-07-24 18:23:47 +02:00
Matteo Biscosi	ba8027f103	Updated mitre table	2024-07-24 16:50:58 +02:00
Luca Ferretti	c2c33011b0	Implemented mitre_table_info inside database (#8554) ... * added netbox documentation * Update asset_inventory.rst * added ndpi-protocols ipv6 rules * updated ipv6 check for custom rule * fix typo * implemented mitre_table_info inside database	2024-07-24 15:50:07 +02:00
Matteo Biscosi	d795bf3474	Added NAT info in clickhouse (#8384)	2024-05-10 10:22:55 -04:00
Nicolò Maio	2d150103b7	Add TCP flow connection state (#8210) ... * Add TCP flow connection state (#8140) * Add Major and Minor connection states (#8140) * Remove ZMQ connection state parsing. (#8140) * Update doc with major and minor conn states. (#8140)	2024-02-28 14:45:49 +01:00
Nicolo Maio	c17db2e3b3	Add INTERFACE_ID in hourly_flows table. (#8197)	2024-02-01 12:38:06 +01:00
Alfredo Cardigliano	c0dcf3f83e	Fix end of statement in clickhouse schema	2024-01-17 09:36:40 +01:00
Matteo Biscosi	7f26e855b6	Fixes misstype error	2023-11-27 10:27:35 +00:00
Luca Deri	bb61ac57ad	SQL fixes	2023-11-27 10:56:15 +01:00
Nicolo Maio	7dc3ec89ec	[VS] Rename INFO and REPORT_INFO columns into JSON_INFO and REPORT_JSON_INFO.	2023-11-20 17:55:02 +01:00
Nicolo Maio	34f7a42308	[VS] Add historical reports. (#8015) (#7950)	2023-11-20 17:06:23 +01:00
Alfredo Cardigliano	98504cc1b4	Add SRC_LABEL/DST_LABEL to hourly flows	2023-08-23 10:12:27 +02:00
Alfredo Cardigliano	2e31851f43	Fix all_alerts_view definition	2023-06-22 09:44:21 +02:00
Alfredo Cardigliano	246e5a5142	Add alert_category column	2023-06-20 17:25:54 +02:00
Luca Deri	2d90099c1e	Modified SNMP alerts table	2023-06-07 16:13:56 +02:00
Luca Deri	4c66ddebbf	Reworked clickhouse aggregated flows table	2023-06-05 12:21:05 +02:00
Luca Deri	2b5027e136	Updated table name	2023-05-19 16:37:13 +02:00
Luca Deri	dba12047e3	Added creation of clickhouse aggregated flows table	2023-05-19 16:17:09 +02:00