267 commits

Author	SHA1	Message	Date
Simone Mainardi	f61ffc045b	Merge branch 'c-user-scripts' into dev	2021-03-22 10:36:13 +01:00
Simone Mainardi	aea9138bfb	Implements flow callbacks and alerts in C++	2021-03-22 09:51:36 +01:00
Matteo Biscosi	97c83e1d75	Fixes delete alerts older then	2021-03-04 18:21:00 +01:00
Alfredo Cardigliano	fa311e3ade	Rework user script working sets (a single configset is supported now)	2021-03-01 15:37:45 +01:00
Simone Mainardi	696bcb33e5	Implements alert exclusions for hosts, interfaces, local networks	2021-02-23 15:36:14 +01:00
Matteo Biscosi	c62c2c232e	Removed useless requires for enchanting performances ... Removed, where it was possible, the lua requires, with the objective of enchanting the performances of periodic activities	2021-02-23 10:51:50 +01:00
Simone Mainardi	a9aef2c70a	Update for test alert_dns_data_exfiltration_02	2021-02-19 18:50:25 +01:00
Simone Mainardi	9049cb327f	Update for test alert_dns_data_exfiltration_02	2021-02-19 18:41:36 +01:00
Simone Mainardi	e3dab26574	Fixes flow status not set under certain conditions	2021-02-18 11:12:26 +01:00
Simone Mainardi	9314f36cc5	Fixes remote to remote alerts setting nil scores	2021-02-18 10:59:36 +01:00
Simone Mainardi	0d39732d1c	Implements telemetry for alter filters	2021-02-17 12:08:40 +01:00
Simone Mainardi	84ac0f4dfc	Implements filtering of flow user scripts	2021-02-12 12:56:06 +01:00
Alfredo Cardigliano	7bee78fe75	Sort modules by prio and then by name to provide deterministic results	2021-02-11 16:28:41 +01:00
Matteo Biscosi	1d9b44eb18	Implements script failure in daily.lua ... Implements #5031	2021-02-09 15:53:55 +01:00
Simone Mainardi	38d31a474a	Makes multiple score increments status-dependent ... Implements #4993	2021-01-30 12:45:04 +01:00
Matteo Biscosi	10fb8bbecc	Implements #4919 custom alert severity	2021-01-27 12:29:19 +01:00
Matteo Biscosi	3c6674e32d	Fixed #2611 automatically delete alert older than	2021-01-18 18:12:53 +01:00
Matteo Biscosi	371edc0b43	Fixed interface periodic top sites update	2021-01-13 16:34:11 +01:00
Luca Deri	a1178a0791	Updated (C)	2021-01-02 12:08:23 +01:00
Simone Mainardi	a3383c5e2c	Honors status_always_notify also for the internal SQLite recipient	2020-12-30 19:31:23 +01:00
Simone Mainardi	e3eda6e082	Implements ability to trigger flow alerts even if already triggered	2020-12-30 13:08:55 +01:00
Simone Mainardi	56a4c999a3	Initial flow status rework to remove globals	2020-12-30 12:06:33 +01:00
Simone Mainardi	dc007ba88b	Disables user script benchmarks calculated but not used by default ... Partially addresses #4673	2020-12-28 14:51:42 +01:00
Simone Mainardi	8d6dafc897	Unifies new alerts and flow alerts API	2020-12-04 17:03:23 +01:00
Simone Mainardi	5c0c23feb6	Fixes execution of periodicUpdate flow callback ... Fixes #4687	2020-11-06 18:17:54 +01:00
Simone Mainardi	d7f1ce0d8c	Reworks and optimizes flow alerted status	2020-10-19 16:50:22 +02:00
Alfredo Cardigliano	a5a8030e35	Cleanup trigger flow external alert	2020-10-19 13:12:31 +02:00
Simone Mainardi	d3dda0bb82	Unifies misbehaving with alerted flows ... Implements #4596	2020-10-16 18:58:20 +02:00
Simone Mainardi	b7bdd1edaf	Massive cleanup of alerts (disabled/suppressed) ... Fixes #4504	2020-10-01 18:40:11 +02:00
Simone Mainardi	0db456c0cf	Reworks flow user scripts execution in C++	2020-09-30 18:41:36 +02:00
Simone Mainardi	8392e126f8	Simplifies and reduces the number of threads for purging idle entries	2020-09-29 18:51:44 +02:00
Simone Mainardi	5133af720f	Reworks view interfaces with queues; rework idling and flow hooks exec	2020-09-29 18:30:10 +02:00
Simone Mainardi	90a5a57b36	Implements user script queues (avoids 5-sec HT walk)	2020-09-28 11:45:00 +02:00
Simone Mainardi	814ee67cf9	Reworks nDPI Risks flow plugins to handle all risks and scores ... Fixes #4432	2020-09-23 17:58:51 +02:00
Simone Mainardi	6c1280a8e5	Reworks recipients.lua as static rather than (useless) instance	2020-09-23 15:03:07 +02:00
Alfredo Cardigliano	7bda229e8f	Use score to filter flow alerts when supported (Enterprise)	2020-09-22 04:22:58 +02:00
Simone Mainardi	db0d7730a8	Implements per-category host score ... Implements #4413	2020-09-18 18:34:28 +02:00
Simone Mainardi	b7341506f7	Implements checks for script type and alert severity in dispatch_notification	2020-09-16 13:08:07 +02:00
Simone Mainardi	9e99fa1403	Uses new in-memory queues for alert recipients (avoid Redis)	2020-09-08 18:36:18 +02:00
Simone Mainardi	85f555a908	Removes intermediate alert queues - only leaves recipient queues ... Implements #4366	2020-09-04 17:41:55 +02:00
Simone Mainardi	7f241d71d5	Implements attack mitigation via SNMP ... Implements #3833 along with companion pro commit	2020-08-24 15:05:35 +02:00
Luca Deri	f5e572cb5e	Split pruge of idled entries from hashtable ste transition	2020-08-13 10:21:59 +02:00
Luca Deri	f7bddc7e0a	Improved low-threshold script skip	2020-08-12 11:36:51 +02:00
Luca Deri	10b27b12c8	Added check for reducing load pressure when too many idle flow instances are present in the system	2020-08-12 10:54:57 +02:00
Simone Mainardi	dc980bef0a	Adds anti-stall checks on host user scripts	2020-08-05 11:18:10 +02:00
Simone Mainardi	330234e3f7	Optimized hosts scripts using direct pool_id to retrieve config	2020-07-30 19:57:16 +02:00
Simone Mainardi	516451aa6c	Uses actual host pool id when executing host scripts	2020-07-30 11:39:15 +02:00
Simone Mainardi	4e96ae7e26	Refactors user_scripts method names	2020-07-29 15:17:31 +02:00
Simone Mainardi	c291fe91c9	Adds periodic_user_scripts.lua for the execution of periodic scripts	2020-07-29 14:47:11 +02:00
Simone Mainardi	8418d932ec	Avoids spawning num_interfaces + threads to update stats	2020-07-27 15:50:11 +02:00