911 commits

Author	SHA1	Message	Date
emanuele-f	1c38df48c9	Unify character encoding header code	2017-05-04 17:12:06 +02:00
emanuele-f	10be6c2190	Fix host alert configuration issues	2017-05-04 16:30:39 +02:00
emanuele-f	f2eb15ba76	Fix alerts dashboard look	2017-05-03 18:03:03 +02:00
Simone Mainardi	547e623273	Removed debug prints	2017-05-03 17:35:32 +02:00
Simone Mainardi	04ae6a5973	Reworks nagios alerts	2017-05-03 17:32:46 +02:00
emanuele-f	be3d69a435	Fix missing operator	2017-05-03 15:14:25 +02:00
Simone Mainardi	b47b5e1300	Minor fix	2017-05-03 14:41:53 +02:00
emanuele-f	d0d17cef76	Do not allow to delete engaged alerts. ... This is necessary to avoid inconstent state caused in hosts and interfaces counters.	2017-05-03 14:28:10 +02:00
Simone Mainardi	d723fd505d	Improves periodic alerts cleanup	2017-05-03 14:27:00 +02:00
Simone Mainardi	9c0f7499e7	Reduces redis traffic for alerts checks	2017-05-03 13:23:28 +02:00
emanuele-f	2c53dda60b	Fix slack alerts notifications	2017-05-03 13:10:16 +02:00
Simone Mainardi	0586a814ea	Optimizes oldest alerts cleanup	2017-05-03 12:41:36 +02:00
Simone Mainardi	4eeae18cef	Adds alert notes and descriptions	2017-05-02 22:13:43 +02:00
Simone Mainardi	d85302d80f	Fixes host activity alert	2017-05-02 17:19:06 +02:00
emanuele-f	a5e528047d	Use a single redis key to read all host anomalies configuration	2017-05-02 15:38:39 +02:00
emanuele-f	9aa7b31552	Add SafeSearch and Global DNS in traffic bridge preferences.	2017-05-02 12:47:33 +02:00
Luca Deri	24f0808c23	Merge pull request #1197 from emanuele-f/password_change ... Force default admin password change	2017-05-02 12:14:48 +02:00
Luca Deri	1c532234ce	Reworked childSafe display	2017-05-01 23:15:57 +02:00
emanuele-f	dc86847467	Remove frequent pool re-initialization	2017-05-01 00:50:55 +02:00
emanuele-f	21594b834d	Separate syn/flow attacker and victim alert thresholds	2017-04-30 20:07:58 +02:00
Emanuele Faranda	8b8974e56c	Alerts improvements (#1204) ... * Implement flow flood alert * Remove alerts general settings * Implement global threshold alerts for hosts, networks and interfaces * Implement global anomaly alert configuration, lua side * Make the global thresholds not bound to the interface * Implement global anomaly alert configuration, C side * Make the engaged alerts cache per interface to avoid conflics	2017-04-29 12:19:49 +02:00
Emanuele Faranda	a9bcb8b5de	Merge pull request #1203 from danielmeyer/ldap-search-validation ... LDAP search_path parameter allows spaces	2017-04-29 12:05:32 +02:00
emanuele-f	a53ec8b131	Force the release of expired alerts	2017-04-28 16:30:23 +02:00
Daniel Meyer	0ac9dff8cd	Validation mode for search_path parameter updated to support paths containing spaces.	2017-04-28 09:08:48 -04:00
emanuele-f	f516d7edb8	Fix flow alert explorer validation error	2017-04-28 12:30:30 +02:00
emanuele-f	bf803803da	Hide children safe for non-inline interfaces	2017-04-28 11:08:41 +02:00
emanuele-f	011b7f5cdf	Force default admin password change	2017-04-27 21:15:58 +02:00
emanuele-f	f344f55116	Add children safe host pool option	2017-04-27 16:24:28 +02:00
emanuele-f	01816f3e7d	Add category name in flashstart graphs	2017-04-27 15:24:14 +02:00
emanuele-f	cc3191bc4f	Remove flapping-checking code in alert counter	2017-04-27 11:13:40 +02:00
emanuele-f	8b72607c38	Migrate interface alerts to lua logic	2017-04-27 11:07:04 +02:00
emanuele-f	426032426b	Expose the traffic profile validation function	2017-04-26 23:05:31 +02:00
Emanuele Faranda	7d8d26efdc	Merge pull request #1182 from emanuele-f/alerts_with_cache ... Alerts with cache	2017-04-26 20:32:46 +02:00
valentina	4dfa9cb2f3	Changed calls from sudowrapper to run script (nbox integration)	2017-04-26 19:09:39 +02:00
emanuele-f	d6469510ee	Add startup alert engine and use it for MYSQL open files limit check	2017-04-26 18:12:40 +02:00
emanuele-f	63402a848d	Invalidate cache on alerts delete	2017-04-26 18:04:11 +02:00
emanuele-f	22d9d3ad2c	Fix single alert delete	2017-04-26 17:10:05 +02:00
emanuele-f	5e663675f2	Fix flows shown in interface alert configuration	2017-04-26 16:16:12 +02:00
Simone Mainardi	57b592c905	Fixes invalid use of alert engine	2017-04-26 16:09:55 +02:00
emanuele-f	1545dcb73e	Host Flows alert becomes a threshold alert	2017-04-26 15:50:54 +02:00
emanuele-f	4afe4328eb	Enable SYN flood/victim alert generation	2017-04-26 11:23:23 +02:00
emanuele-f	bae63434c1	Implement engaged alerts cache	2017-04-24 17:24:31 +02:00
emanuele-f	52cdd7382a	Fix wrong ajax field used in time quota	2017-04-24 15:30:01 +02:00
emanuele-f	b83a93c6a5	Add preference to enable VLAN rrd dump and display VLAN rrd graphs	2017-04-24 13:00:24 +02:00
Simone Mainardi	7b13e2e6a1	Adds an engine id to the engaged alerts	2017-04-24 12:22:47 +02:00
emanuele-f	eb167e8dee	Fix localization key collision causing blank historical explorer page	2017-04-23 17:21:23 +02:00
Simone Mainardi	c8c4505d9c	Adds VLANs lua getters	2017-04-23 14:20:04 +02:00
emanuele-f	43b3a7f078	Fix AlertCounter based host alerts	2017-04-22 19:48:09 +02:00
emanuele-f	04e01c24b0	Re-enable alerts generation. Use structured format functions.	2017-04-22 18:58:32 +02:00
emanuele-f	bfd2759eeb	Move global status to local status	2017-04-22 17:09:23 +02:00