88 commits

Author	SHA1	Message	Date
Simone Mainardi	b87e641086	Fixes validation of unexpected servers whitelist	2020-11-14 17:39:59 +01:00
Matteo Biscosi	c08707010e	Fixed "attempt to index a nil value (global 'alerts_api')" error	2020-11-13 13:13:00 +01:00
Matteo Biscosi	0e341f3d0b	Modified flow scripts in view of the new trigger_status (#4710) ... * Modified blacklisted script in view of the new flow_script API * Modified plugins scripting in view of the new API * Modified flow scripts with the new trigger API * Fixed creators severity Co-authored-by: matteo <biscosi@ntop.org>	2020-11-12 13:52:53 +01:00
Simone Mainardi	d16ff997ef	Removes a debug flag	2020-11-10 15:13:24 +01:00
Simone Mainardi	93920ccdce	Implements example of simplified flow alerts	2020-11-10 15:10:54 +01:00
Simone Mainardi	073fd5f6cd	Fixes flow score to low for suspicious file transfer risk	2020-11-06 13:40:36 +00:00
gabryon99	cf16003826	add notification for unexpected plugins (#4659)	2020-11-02 11:42:30 +01:00
Luca Deri	966b743e78	Retrasmissions are accunted only when 10 pkts per directions are observed ... Tiny cosmetic changes	2020-10-25 18:56:00 +01:00
Wallace4	ca88369ef3	New version of retransmission plugin, fixed and tested	2020-10-19 16:40:22 +02:00
Simone Mainardi	00f1ae731a	Keeps configured enabled/disabled flow risks into account inside plugin	2020-10-19 11:56:41 +02:00
Simone Mainardi	27c1318ab6	Fixes risk not shown in generated flow-risk alerts ... Fixes #4594	2020-10-19 11:10:19 +02:00
Luca Deri	a5076c0d27	Implemented multiselect to be used in #4589	2020-10-16 22:29:12 +02:00
Simone Mainardi	d3dda0bb82	Unifies misbehaving with alerted flows ... Implements #4596	2020-10-16 18:58:20 +02:00
Luca Deri	374b97c516	Unexpected protocol plugins default to disable	2020-10-15 21:44:24 +02:00
Luca Deri	24a5b1f908	Added minimum number of packets transmitted before triggering a retransmision alert	2020-10-14 22:33:02 +02:00
Luca Deri	7d6daf6b1b	Fixes for flow retransmission plugin	2020-10-14 00:02:25 +02:00
Luca Deri	d3d0924e73	Merge pull request #4578 from Wallace4/retry_project ... Addedd Retransmissions plugin for flows	2020-10-13 23:32:30 +02:00
Simone Mainardi	ce4d69a273	Moves alert and status definitions under lua/modules/	2020-10-12 15:03:39 +02:00
Daniele Zulberti	3b8ee0e9f0	Added use of local variables. ... Used flow.getInfo() and srv.ip instead flow.getServerKey(). Now the for breaks when a match is found.	2020-10-11 18:09:47 +02:00
Wallace4	24a9825e0a	Changed status file title -> description	2020-10-11 16:32:27 +02:00
Wallace4	8fae098590	Changed some variables name and comments	2020-10-11 16:28:02 +02:00
Wallace4	238e01e111	Removed debug writes	2020-10-11 15:21:38 +02:00
Wallace4	d4f0dfef2d	Added en.lua	2020-10-11 15:15:38 +02:00
Wallace4	e065f7b9de	Status and Alert have now their own variable (not custom)	2020-10-11 15:12:37 +02:00
Wallace4	1837d65784	Added en.lua for lang	2020-10-11 13:44:55 +02:00
Wallace4	7358ce3ef0	Ticket #4425 and project	2020-10-11 13:10:17 +02:00
Daniele Zulberti	fedd1e3218	Added unexpected DHCP plugin	2020-10-10 20:22:06 +02:00
Luca Deri	4565f8af04	Added plugin for detecting unexpected NTP servers	2020-10-10 10:54:19 +02:00
Luca Deri	c323c6f351	Tiny change	2020-10-10 10:35:06 +02:00
Luca Deri	2093488db3	Minor fixe: when the list of DNS/SMTP servers is empty, no check is performed	2020-10-10 10:33:47 +02:00
Daniele Zulberti	d74caa9d2b	Added unexpected SMTP plugin	2020-10-09 17:06:23 +02:00
Daniele Zulberti	cff77b49cf	Added unexpected DNS plugin	2020-10-09 17:06:23 +02:00
Simone Mainardi	e1f4bb80f7	Default flow risk handler now sets statuses ... Implements #4398	2020-10-06 09:56:53 +02:00
Simone Mainardi	2f2a2e63e4	Uses plugin modules as flow-risk handlers	2020-09-24 12:48:09 +02:00
Simone Mainardi	d7b688b955	Adds a no-action risk handler for risks already handled in other scripts	2020-09-23 18:02:57 +02:00
Simone Mainardi	814ee67cf9	Reworks nDPI Risks flow plugins to handle all risks and scores ... Fixes #4432	2020-09-23 17:58:51 +02:00
Simone Mainardi	f12ad8c028	Increases default script thresholds ... Fixes #4424 with companion pro commit	2020-09-18 11:17:46 +02:00
Simone Mainardi	f7e1ea9709	Reworks plugin loading and structure ... Implements #4358	2020-09-15 11:33:53 +02:00