Commit graph

22 commits

Author SHA1 Message Date
Simone Mainardi
4f717649e1 Removes multiple score increases for TCP zero window alerts
Fixes #4993
2021-02-02 10:34:37 +01:00
Simone Mainardi
38d31a474a Makes multiple score increments status-dependent
Implements #4993
2021-01-30 12:45:04 +01:00
Matteo Biscosi
10fb8bbecc Implements #4919 custom alert severity 2021-01-27 12:29:19 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
c1bdfb8722 Unifies flow_keys and status_keys 2020-12-22 19:14:16 +01:00
Simone Mainardi
f839b6ba76 Removes flow_consts requires no longer necessary 2020-12-22 18:06:50 +01:00
Matteo Biscosi
bcf2c2c1ed Migrates alerts to an object-oriented implementation 2020-12-22 14:48:00 +01:00
matteo
e24ef4ef35 Revert "Migrates alerts to an object-oriented implementation"
This reverts commit fbc283f12f.
2020-12-22 13:13:57 +01:00
matteo
fbc283f12f Migrates alerts to an object-oriented implementation 2020-12-22 13:00:25 +01:00
Simone Mainardi
b3dc39c641 Refactors alert_severities into an independend Lua module 2020-11-30 15:28:17 +01:00
Simone Mainardi
6898a136f6 Fixes label for zero tcp window 2020-11-17 17:37:05 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status (#4710)
* Modified blacklisted script in view of the new flow_script API

* Modified plugins scripting in view of the new API

* Modified flow scripts with the new trigger API

* Fixed creators severity

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
d42057baf5 Additional fixes for Zero TCP window detection 2020-11-07 15:38:39 +01:00
Simone Mainardi
a091efcb09 Fixes for Zero TCP window detection user script 2020-11-07 10:58:16 +01:00
Luca Deri
83816cefae Zero window alert improvement 2020-11-07 00:41:02 +01:00
Simone Mainardi
5c0c23feb6 Fixes execution of periodicUpdate flow callback
Fixes #4687
2020-11-06 18:17:54 +01:00
Luca Deri
e5d97d7120 Removed trace 2020-11-06 10:41:29 +01:00
Luca Deri
6d5178c9e5 Fixes bug in TCP zero windows alert report 2020-11-06 10:40:51 +01:00
Luca Deri
ecc3208e10
Removed debug code 2020-11-05 22:09:47 +01:00
Luca
e84f2be741 Added missing initialization 2020-11-05 19:32:39 +01:00
Luca
3455f79e9f Zero window fixes 2020-11-05 18:53:19 +01:00
Matteo Biscosi
e5a48cb5d2
TCP Zero Window alert from issue #3417 (#4684)
* Added no_if_activity alert to user script keys

* Added no_if_activity description alert

* Fixes #4648 trigger an alert when no flows are collected

* Changed the time past one call of the alert and an other

* Fixes #4648 reorganized files and cache management

* Added status flow check regarding issue #3417

* Removed debug code

Co-authored-by: matteo <biscosi@ntop.org>
Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
2020-11-05 18:20:09 +01:00