Commit graph

1285 commits

Author SHA1 Message Date
emanuele-f
d0d17cef76 Do not allow to delete engaged alerts.
This is necessary to avoid inconstent state caused in hosts and interfaces counters.
2017-05-03 14:28:10 +02:00
Simone Mainardi
d723fd505d Improves periodic alerts cleanup 2017-05-03 14:27:00 +02:00
Simone Mainardi
9c0f7499e7 Reduces redis traffic for alerts checks 2017-05-03 13:23:28 +02:00
emanuele-f
2c53dda60b Fix slack alerts notifications 2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea Optimizes oldest alerts cleanup 2017-05-03 12:41:36 +02:00
Simone Mainardi
4eeae18cef Adds alert notes and descriptions 2017-05-02 22:13:43 +02:00
Simone Mainardi
d85302d80f Fixes host activity alert 2017-05-02 17:19:06 +02:00
emanuele-f
a5e528047d Use a single redis key to read all host anomalies configuration 2017-05-02 15:38:39 +02:00
Simone Mainardi
6f7c2b9616 Reworks default password change 2017-05-02 15:12:52 +02:00
emanuele-f
9aa7b31552 Add SafeSearch and Global DNS in traffic bridge preferences. 2017-05-02 12:47:33 +02:00
Luca Deri
24f0808c23 Merge pull request #1197 from emanuele-f/password_change
Force default admin password change
2017-05-02 12:14:48 +02:00
Luca Deri
1c532234ce Reworked childSafe display 2017-05-01 23:15:57 +02:00
emanuele-f
f137f14ee5 Reload host pools when a new pool is added or configuration is changed 2017-05-01 16:02:32 +02:00
Luca Deri
73b3a3ded6 Added child safe information in host pools
Minor code rework
2017-05-01 15:53:23 +02:00
emanuele-f
dc86847467 Remove frequent pool re-initialization 2017-05-01 00:50:55 +02:00
emanuele-f
21594b834d Separate syn/flow attacker and victim alert thresholds 2017-04-30 20:07:58 +02:00
Emanuele Faranda
8b8974e56c Alerts improvements (#1204)
* Implement flow flood alert

* Remove alerts general settings

* Implement global threshold alerts for hosts, networks and interfaces

* Implement global anomaly alert configuration, lua side

* Make the global thresholds not bound to the interface

* Implement global anomaly alert configuration, C side

* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
Emanuele Faranda
a9bcb8b5de Merge pull request #1203 from danielmeyer/ldap-search-validation
LDAP search_path parameter allows spaces
2017-04-29 12:05:32 +02:00
emanuele-f
a53ec8b131 Force the release of expired alerts 2017-04-28 16:30:23 +02:00
Daniel Meyer
0ac9dff8cd Validation mode for search_path parameter updated to support paths containing spaces. 2017-04-28 09:08:48 -04:00
emanuele-f
f516d7edb8 Fix flow alert explorer validation error 2017-04-28 12:30:30 +02:00
emanuele-f
bf803803da Hide children safe for non-inline interfaces 2017-04-28 11:08:41 +02:00
emanuele-f
011b7f5cdf Force default admin password change 2017-04-27 21:15:58 +02:00
emanuele-f
f344f55116 Add children safe host pool option 2017-04-27 16:24:28 +02:00
emanuele-f
01816f3e7d Add category name in flashstart graphs 2017-04-27 15:24:14 +02:00
emanuele-f
cc3191bc4f Remove flapping-checking code in alert counter 2017-04-27 11:13:40 +02:00
emanuele-f
8b72607c38 Migrate interface alerts to lua logic 2017-04-27 11:07:04 +02:00
emanuele-f
426032426b Expose the traffic profile validation function 2017-04-26 23:05:31 +02:00
emanuele-f
230d2f434c Show SNMP host information in pro version 2017-04-26 22:34:18 +02:00
Emanuele Faranda
7d8d26efdc Merge pull request #1182 from emanuele-f/alerts_with_cache
Alerts with cache
2017-04-26 20:32:46 +02:00
valentina
4dfa9cb2f3 Changed calls from sudowrapper to run script (nbox integration) 2017-04-26 19:09:39 +02:00
emanuele-f
d6469510ee Add startup alert engine and use it for MYSQL open files limit check 2017-04-26 18:12:40 +02:00
emanuele-f
63402a848d Invalidate cache on alerts delete 2017-04-26 18:04:11 +02:00
emanuele-f
22d9d3ad2c Fix single alert delete 2017-04-26 17:10:05 +02:00
emanuele-f
5e663675f2 Fix flows shown in interface alert configuration 2017-04-26 16:16:12 +02:00
Simone Mainardi
57b592c905 Fixes invalid use of alert engine 2017-04-26 16:09:55 +02:00
emanuele-f
1545dcb73e Host Flows alert becomes a threshold alert 2017-04-26 15:50:54 +02:00
emanuele-f
4afe4328eb Enable SYN flood/victim alert generation 2017-04-26 11:23:23 +02:00
emanuele-f
bae63434c1 Implement engaged alerts cache 2017-04-24 17:24:31 +02:00
Simone Mainardi
e36554de9d Bridged interfaces footer gauge
Footer gauge only shows bridged actually bridged traffic
for bridged interfaces
2017-04-24 16:19:03 +02:00
emanuele-f
52cdd7382a Fix wrong ajax field used in time quota 2017-04-24 15:30:01 +02:00
emanuele-f
b83a93c6a5 Add preference to enable VLAN rrd dump and display VLAN rrd graphs 2017-04-24 13:00:24 +02:00
Simone Mainardi
7b13e2e6a1 Adds an engine id to the engaged alerts 2017-04-24 12:22:47 +02:00
emanuele-f
60bb301c76 Fix host search with VLANs 2017-04-24 11:17:36 +02:00
emanuele-f
eb167e8dee Fix localization key collision causing blank historical explorer page 2017-04-23 17:21:23 +02:00
Simone Mainardi
c8c4505d9c Adds VLANs lua getters 2017-04-23 14:20:04 +02:00
Simone Mainardi
2873438712 Handles VLAN statistics in both UI and backend
VLAN statistics are now properly accounted both in the front and
in the backend.

It is now required to add a toggle preference to save their
statistics (presently statistics are always saved) and it is
also requested to browse their historical protocols.
2017-04-23 12:58:10 +02:00
emanuele-f
43b3a7f078 Fix AlertCounter based host alerts 2017-04-22 19:48:09 +02:00
emanuele-f
04e01c24b0 Re-enable alerts generation. Use structured format functions. 2017-04-22 18:58:32 +02:00
emanuele-f
bfd2759eeb Move global status to local status 2017-04-22 17:09:23 +02:00