Matteo Biscosi
41163ac7f6
Implements low risk alert type must be further split
...
Implements #5066
2021-02-25 19:09:17 +01:00
Simone Mainardi
c70c635e3f
Fixes TLS-risks sometimes handled twice
2021-02-18 14:45:02 +01:00
Simone Mainardi
823c6ddc81
Fixes flow risks no longer triggering
2021-02-18 11:20:17 +01:00
Matteo Biscosi
0c0ba319c2
Modified default fields for flow risk alert
2021-02-17 11:55:07 +01:00
Matteo Biscosi
711bcb21d0
Added exclusion list to the flow risk script
2021-02-17 11:46:45 +01:00
Simone Mainardi
f4dff6f2e7
Implements risk-based filtering of flow alerts
2021-02-16 15:25:20 +01:00
Alfredo Cardigliano
f245caf83c
Deterministic selection of flow risk
2021-02-12 17:47:54 +01:00
Alfredo Cardigliano
b3cf18d821
Rename alert_tls_old_version -> alert_tls_old_protocol_version everywhere for consistency
2021-01-29 11:10:43 +01:00
Matteo Biscosi
0fbe214a60
Removed default severity from some alerts
2021-01-29 10:51:31 +01:00
Matteo Biscosi
b1134b611f
Added to double severity alert, single default alert
...
Implements #4919
2021-01-28 18:18:22 +01:00
Luca Deri
a1178a0791
Updated (C)
2021-01-02 12:08:23 +01:00
Simone Mainardi
f839b6ba76
Removes flow_consts requires no longer necessary
2020-12-22 18:06:50 +01:00
Matteo Biscosi
bcf2c2c1ed
Migrates alerts to an object-oriented implementation
2020-12-22 14:48:00 +01:00
matteo
e24ef4ef35
Revert "Migrates alerts to an object-oriented implementation"
...
This reverts commit fbc283f12f .
2020-12-22 13:13:57 +01:00
matteo
fbc283f12f
Migrates alerts to an object-oriented implementation
2020-12-22 13:00:25 +01:00
Simone Mainardi
b3dc39c641
Refactors alert_severities into an independend Lua module
2020-11-30 15:28:17 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status ( #4710 )
...
* Modified blacklisted script in view of the new flow_script API
* Modified plugins scripting in view of the new API
* Modified flow scripts with the new trigger API
* Fixed creators severity
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
073fd5f6cd
Fixes flow score to low for suspicious file transfer risk
2020-11-06 13:40:36 +00:00
Simone Mainardi
00f1ae731a
Keeps configured enabled/disabled flow risks into account inside plugin
2020-10-19 11:56:41 +02:00
Simone Mainardi
27c1318ab6
Fixes risk not shown in generated flow-risk alerts
...
Fixes #4594
2020-10-19 11:10:19 +02:00
Luca Deri
a5076c0d27
Implemented multiselect to be used in #4589
2020-10-16 22:29:12 +02:00
Simone Mainardi
d3dda0bb82
Unifies misbehaving with alerted flows
...
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
e1f4bb80f7
Default flow risk handler now sets statuses
...
Implements #4398
2020-10-06 09:56:53 +02:00
Simone Mainardi
2f2a2e63e4
Uses plugin modules as flow-risk handlers
2020-09-24 12:48:09 +02:00
Simone Mainardi
d7b688b955
Adds a no-action risk handler for risks already handled in other scripts
2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9
Reworks nDPI Risks flow plugins to handle all risks and scores
...
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
f7e1ea9709
Reworks plugin loading and structure
...
Implements #4358
2020-09-15 11:33:53 +02:00