Simone Mainardi
|
cd4a513b0f
|
Implements snmp_consts.lua with SNMP consts
|
2020-06-10 15:40:47 +02:00 |
|
Simone Mainardi
|
0bbb30e13e
|
Refactors snmp_utils global methods into module functions
|
2020-06-10 13:09:30 +02:00 |
|
Simone Mainardi
|
8a3e65ac50
|
Requires snmp_utils as local module
|
2020-06-10 12:17:25 +02:00 |
|
Simone Mainardi
|
54dd2e5c8a
|
Adds a safety check on cached_device
|
2020-06-09 19:05:13 +02:00 |
|
Simone Mainardi
|
8609e0bc2e
|
Avoids adding URLs for SNMP device interfaces no longer existing
|
2020-06-09 11:48:28 +02:00 |
|
Simone Mainardi
|
c2847398c2
|
Adjusts SNMP device interface scripts to use snmp_cached_dev.lua
|
2020-06-09 10:57:54 +02:00 |
|
Simone Mainardi
|
220359981f
|
Adjusts SNMP device scripts to use snmp_cached_dev.lua
|
2020-06-09 09:47:33 +02:00 |
|
emanuele-f
|
aedf348534
|
Move interface timeseries prefs to the global config
Addresses #3979
|
2020-05-27 13:48:27 +02:00 |
|
emanuele-f
|
340462ad73
|
Cleanup of the timeseries ring and NetworkInterfaceTsPoint
|
2020-05-20 15:18:03 +02:00 |
|
Alfredo Cardigliano
|
fcd43fb880
|
Add plugin configuration to syslog plugins
|
2020-05-19 16:57:54 +02:00 |
|
Simone Mainardi
|
b6447bbfb0
|
Implements ordering for flow Lua callbacks
|
2020-05-17 14:12:08 +02:00 |
|
Alfredo Cardigliano
|
c6e061e62b
|
Improve syslog API, add host log plugin skeleton
|
2020-05-16 11:35:32 +02:00 |
|
emanuele-f
|
d43d4e5e74
|
Make DHCP names cache expire after 1 day
Addresses #3641
|
2020-05-08 10:15:31 +02:00 |
|
Simone Mainardi
|
f3a5d7b10e
|
Fixes external suricata alerts
|
2020-04-28 20:37:50 +02:00 |
|
Alfredo Cardigliano
|
c22f3b00e1
|
Fix alert ids source match
|
2020-04-28 16:12:03 +02:00 |
|
Alfredo Cardigliano
|
963cff670f
|
Cleanup severity for external alerts
|
2020-04-27 18:04:41 +02:00 |
|
Simone Mainardi
|
83c4d36e34
|
Simplifies flow.triggerStatus using internal flow status reference
|
2020-04-27 17:48:56 +02:00 |
|
Simone Mainardi
|
efe4f9a8be
|
Unifies alerts generation format with flow statuses
|
2020-04-27 14:37:04 +02:00 |
|
Simone Mainardi
|
ab1690ad9e
|
Implements builders for each flow status definition
[FlowsK] alert_blacklisted_country.lua
[FlowsK] alert_flow_blacklisted.lua
[FlowsK] alert_device_protocol_not_allowed.lua
[FlowsK] external_alert.lua
[FlowsK] alert_potentially_dangerous_protocol.lua
[FlowsK] tls_certificate_mismatch.lua
[FlowsK] tls_certificate_expired.lua
[FlowsK] tls_malicious_signature.lua
[FlowsK] elephant_flows.lua
[FlowsK] not_purged.lua
[FlowsK] web_mining.lua
[FlowsK] potentially_dangerous.lua
[FlowsK] alert_flow_blocked.lua
|
2020-04-27 12:43:37 +02:00 |
|
Simone Mainardi
|
0a9a7015e0
|
Unifies status_id and status_key
|
2020-04-15 14:29:03 +02:00 |
|
Simone Mainardi
|
1eb02b2c2b
|
Unifies alert_id and alert_key
|
2020-04-15 14:29:03 +02:00 |
|
Simone Mainardi
|
e487427aab
|
Refactors alert_utils and enterprise_alert_utils
Addresses #3720
Alerts Refactor: alert_utils as module
Alerts Refactor: notify_ntopng_start and notify_ntopng_stop
Alerts Refactor: processAlertNotifications
Alerts Refactor: checkStoreAlertsFromC
Alerts Refactor: formatAlertNotification
Alerts Refactor: notification_timestamp_rev
Alerts Refactor: formatAlertMessage
Alerts Refactor: getConfigsetAlertLink
Alerts Refactor: alertNotificationActionToLabel
Alerts Refactor: flushAlertsData
Alerts Refactor: disableAlertsGeneration
Alerts Refactor: newAlertsWorkingStatus and other
Alerts Refactor: drawAlerts
Alerts Refactor: drawAlertTables
Alerts Refactor: printAlertTables
Alerts Refactor: checkDeleteStoredAlerts
Alerts Refactor: getUnpagedAlertOptions
Alerts Refactor: getTabParameters
Alerts Refactor: getAlerts
Alerts Refactor: getNumAlerts
Alerts Refactor: performAlertsQuery
Alerts Refactor: sec2granularity
Alerts Refactor: granularity2id
Alerts Refactor: granularity2sec
Alerts Refactor: alertEngineLabel
Alerts Refactor: alertEngine
Alerts Refactor: alertEngineRaw
Alerts Refactor: alertTypeDescription
Alerts Refactor: alertType
Alerts Refactor: alertTypeLabel
Alerts Refactor: alertTypeRaw
Alerts Refactor: alertSeverity
Alerts Refactor: alertSeverityLabel
Alerts Refactor: alertSeverityRaw
Alerts Refactor: get_make_room_keys
Alerts Refactor: enterprise_alert_utils
|
2020-04-10 14:03:20 +02:00 |
|
emanuele-f
|
c848ea2395
|
Fix script failure due to removed host.getLocalhostInfo
|
2020-04-02 18:42:52 +02:00 |
|
Alfredo Cardigliano
|
2425134f05
|
Replace isEnterprise with isEnterpriseM
|
2020-04-02 12:36:34 +00:00 |
|
Simone Mainardi
|
daf7f0a05c
|
Minor Fix
|
2020-04-01 13:12:55 +02:00 |
|
Simone Mainardi
|
a9776b5013
|
Documents internals periodic activities
|
2020-04-01 13:03:13 +02:00 |
|
emanuele-f
|
983fea5701
|
Fix bad SNMP interface formatter
Fixes #3659
|
2020-03-27 17:40:51 +01:00 |
|
Simone Mainardi
|
3144bc8bdf
|
Renames alert_config to user_script_config
|
2020-03-26 14:51:53 +01:00 |
|
emanuele-f
|
61ab06fcd7
|
Fix SyslogParserInterface plugins loading
|
2020-03-26 14:47:51 +01:00 |
|
Luca Deri
|
7769beecad
|
Added blog check at startup
|
2020-03-25 08:12:04 +01:00 |
|
emanuele-f
|
60da5a0c13
|
Blog notifications fix
|
2020-03-24 17:12:41 +01:00 |
|
gabryon99
|
b1251aef5f
|
created blog notification
|
2020-03-22 23:52:59 +01:00 |
|
emanuele-f
|
1ec35cadbf
|
Fix invalid engaged/dropped alerts ts on system interface
Fixes #3556
|
2020-03-17 12:25:36 +01:00 |
|
Simone Mainardi
|
04f5b99342
|
Calculates and charts RRD queue length
|
2020-03-09 22:46:35 +01:00 |
|
emanuele-f
|
c17ddb486e
|
Ensure monotonic time in uSecDiffPeriodicActivityBody
|
2020-03-05 17:09:40 +01:00 |
|
emanuele-f
|
1c7dabf247
|
Pass current periodic activity time from C
This prevents possible inconsistencies between the C and lua time
|
2020-03-05 17:09:40 +01:00 |
|
emanuele-f
|
0facf0e27d
|
Implement host timeseries off/light/mode selection
Closes #3466
|
2020-03-03 15:52:04 +01:00 |
|
emanuele-f
|
f9bd2973c8
|
Avoid cpu load timeseries creation on non linux platforms
|
2020-03-02 16:04:02 +01:00 |
|
Simone Mainardi
|
3405b7184e
|
Writes new_flow timeseries every minute (not every second)
Implements #3456
|
2020-02-28 15:35:16 +01:00 |
|
Simone Mainardi
|
a1905609a2
|
Prevents writing ZMQ timeseries for non-ZMQ interfaces
Addresses #3456
|
2020-02-28 15:11:18 +01:00 |
|
Simone Mainardi
|
ec724babcf
|
Unifies all internals timeseries in a single preference
Implements #3459
|
2020-02-28 15:00:51 +01:00 |
|
Simone Mainardi
|
474fe19e07
|
Writes CPU load every 5 secs (/proc/loadavg doesn't update faster)
Additional fix for #3465
|
2020-02-28 11:55:26 +01:00 |
|
Simone Mainardi
|
f6bd1b3493
|
Adds timeseries of iowait
|
2020-02-27 18:20:42 +01:00 |
|
Simone Mainardi
|
82a01c521a
|
Computes CPU states every 5 seconds in the system interface
|
2020-02-27 16:48:08 +01:00 |
|
emanuele-f
|
b194643a18
|
Join exported and dropped flows into a single timeseries
|
2020-02-27 12:15:53 +01:00 |
|
emanuele-f
|
ea4f936d07
|
Join interface packets and drops into a single timeseries
|
2020-02-27 12:09:43 +01:00 |
|
emanuele-f
|
8abdb926cd
|
Handle /proc/net/dev counters wrapping on 32bit platforms.
Fixes #3398
|
2020-02-25 16:56:58 +01:00 |
|
Alfredo Cardigliano
|
b3ceaf9db4
|
Moved external alert score computation (fix #3447)
|
2020-02-24 15:01:21 +01:00 |
|
Alfredo Cardigliano
|
dbe07bbfcd
|
Score computation fix (external alerts)
|
2020-02-24 12:27:48 +01:00 |
|
Simone Mainardi
|
bd46b7268e
|
Implements system alerts for not executed activities
|
2020-02-21 14:00:06 +01:00 |
|