Simone Mainardi
76006d6250
Fixes IP reassignment code that is now per-interface
...
Implements #5038
2021-02-26 11:21:04 +01:00
Matteo Biscosi
6a4c6cf30c
Implements noisy low goodput alert
...
Implements #5068
2021-02-25 12:21:29 +01:00
Matteo Biscosi
49ae038c3f
Implements #5038 cleanup IP reassigment code
...
Removed debug print and used setPref instead of setCache
2021-02-25 11:00:09 +01:00
Matteo Biscosi
9632c62bfa
Implements cleanup IP reassignment code
...
Implements #5038
2021-02-19 15:36:27 +01:00
Simone Mainardi
9314f36cc5
Fixes remote to remote alerts setting nil scores
2021-02-18 10:59:36 +01:00
Simone Mainardi
f4dff6f2e7
Implements risk-based filtering of flow alerts
2021-02-16 15:25:20 +01:00
Simone Mainardi
6d651f0661
mplements layer-4 protocol as filter for flow user scripts
2021-02-12 16:25:45 +01:00
Simone Mainardi
c0ee292530
Implements l7_proto as filter for flow user scripts
2021-02-12 16:08:27 +01:00
Simone Mainardi
84ac0f4dfc
Implements filtering of flow user scripts
2021-02-12 12:56:06 +01:00
Matteo Biscosi
d6d0780507
Implements add the ability to suppress specific alerts
...
Implements #4942
2021-02-11 17:13:07 +01:00
Matteo Biscosi
769658268f
Implements add the ability to suppress specific alerts
...
Implements #4942
Partially implemented alerts exclusion list
Added User Script exclusion list to settings
Implements add the ability to suppress specific alerts
Implements #4942
2021-02-10 15:35:54 +01:00
Matteo Biscosi
d3853aaf90
Implements internet resources misuse script with exception list
...
Implements #4984
2021-02-04 15:10:52 +01:00
Matteo Biscosi
88251ea79d
Implements #4984 core Internet resources misuse script
...
Fixes no release by the alert
2021-02-03 15:42:14 +01:00
Simone Mainardi
63bd289bbf
Fixes for contacts-based alerts
2021-02-03 15:16:41 +01:00
Simone Mainardi
12fd088bce
Fixes SMTP Contacts default
2021-02-03 14:31:08 +01:00
Matteo Biscosi
eba1aaa359
Implements #4984 core Internet resources misuse script
2021-02-03 12:41:18 +01:00
Alfredo Cardigliano
570bce94f7
Add missing default values. Format bytes with the proper unit.
2021-02-02 16:38:31 +01:00
Simone Mainardi
4f717649e1
Removes multiple score increases for TCP zero window alerts
...
Fixes #4993
2021-02-02 10:34:37 +01:00
Simone Mainardi
38d31a474a
Makes multiple score increments status-dependent
...
Implements #4993
2021-01-30 12:45:04 +01:00
Matteo Biscosi
76765da78b
Implements #4984 core Internet resources misuse script
2021-01-29 18:15:06 +01:00
Matteo Biscosi
10fb8bbecc
Implements #4919 custom alert severity
2021-01-27 12:29:19 +01:00
Matteo Biscosi
8a232fec62
Fixed #4914 Alert/Error In home system screen
2021-01-14 16:50:22 +01:00
Luca Deri
a1178a0791
Updated (C)
2021-01-02 12:08:23 +01:00
Simone Mainardi
c1bdfb8722
Unifies flow_keys and status_keys
2020-12-22 19:14:16 +01:00
Simone Mainardi
f839b6ba76
Removes flow_consts requires no longer necessary
2020-12-22 18:06:50 +01:00
Matteo Biscosi
bcf2c2c1ed
Migrates alerts to an object-oriented implementation
2020-12-22 14:48:00 +01:00
matteo
e24ef4ef35
Revert "Migrates alerts to an object-oriented implementation"
...
This reverts commit fbc283f12f
2020-12-22 13:13:57 +01:00
matteo
fbc283f12f
Migrates alerts to an object-oriented implementation
2020-12-22 13:00:25 +01:00
Simone Mainardi
dbd325429b
Fixes TCP connection issues alert
2020-12-02 10:22:53 +01:00
Simone Mainardi
b3dc39c641
Refactors alert_severities into an independend Lua module
2020-11-30 15:28:17 +01:00
Simone Mainardi
6898a136f6
Fixes label for zero tcp window
2020-11-17 17:37:05 +01:00
Simone Mainardi
658b48994d
Fixes and cleanup for low goodput user script
2020-11-17 17:33:52 +01:00
Luca Deri
a7518905a4
No longer necessary
2020-11-16 12:42:07 +01:00
Matteo Biscosi
a8cf3836d7
Fixes #4709 unexpected new device plugin ( #4728 )
...
* Added unexpected new device plugin, needs review
* Fixes #4709 unexpected new device plugin
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-16 12:41:19 +01:00
Luca Deri
d94920d858
Typo
2020-11-14 01:11:52 +01:00
Luca Deri
7485843a7c
Updated low goodput description
2020-11-14 00:28:13 +01:00
Luca Deri
2120bf2486
Added alert for log goodput flows
2020-11-14 00:23:35 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status ( #4710 )
...
* Modified blacklisted script in view of the new flow_script API
* Modified plugins scripting in view of the new API
* Modified flow scripts with the new trigger API
* Fixed creators severity
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
d42057baf5
Additional fixes for Zero TCP window detection
2020-11-07 15:38:39 +01:00
Simone Mainardi
a091efcb09
Fixes for Zero TCP window detection user script
2020-11-07 10:58:16 +01:00
Luca Deri
83816cefae
Zero window alert improvement
2020-11-07 00:41:02 +01:00
Simone Mainardi
5c0c23feb6
Fixes execution of periodicUpdate flow callback
...
Fixes #4687
2020-11-06 18:17:54 +01:00
Luca Deri
e5d97d7120
Removed trace
2020-11-06 10:41:29 +01:00
Luca Deri
6d5178c9e5
Fixes bug in TCP zero windows alert report
2020-11-06 10:40:51 +01:00
Luca Deri
ecc3208e10
Removed debug code
2020-11-05 22:09:47 +01:00
Luca
e84f2be741
Added missing initialization
2020-11-05 19:32:39 +01:00
Luca
3455f79e9f
Zero window fixes
2020-11-05 18:53:19 +01:00
Matteo Biscosi
e5a48cb5d2
TCP Zero Window alert from issue #3417 ( #4684 )
...
* Added no_if_activity alert to user script keys
* Added no_if_activity description alert
* Fixes #4648 trigger an alert when no flows are collected
* Changed the time past one call of the alert and an other
* Fixes #4648 reorganized files and cache management
* Added status flow check regarding issue #3417
* Removed debug code
Co-authored-by: matteo <biscosi@ntop.org>
Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
2020-11-05 18:20:09 +01:00
Simone Mainardi
389f9c2beb
Reworks TCP issues flow user script
2020-10-30 15:56:36 +01:00
Luca Deri
966b743e78
Retrasmissions are accunted only when 10 pkts per directions are observed
...
Tiny cosmetic changes
2020-10-25 18:56:00 +01:00
