Simone Mainardi
92ed28cf4c
Prevents unidirectional traffic alerts from NoIP from being triggered
...
Fixes #4592 along with companion pro commit
2020-10-16 12:20:15 +02:00
Luca Deri
374b97c516
Unexpected protocol plugins default to disable
2020-10-15 21:44:24 +02:00
gabryon99
5db4ec7c5d
gui improvments
2020-10-15 19:05:25 +02:00
Luca Deri
24a5b1f908
Added minimum number of packets transmitted before triggering a retransmision alert
2020-10-14 22:33:02 +02:00
Luca Deri
7d6daf6b1b
Fixes for flow retransmission plugin
2020-10-14 00:02:25 +02:00
Luca Deri
d3d0924e73
Merge pull request #4578 from Wallace4/retry_project
...
Addedd Retransmissions plugin for flows
2020-10-13 23:32:30 +02:00
gabryon99
2ab08a282f
fixed active monitoring navigation ( #4566 )
2020-10-13 19:09:13 +02:00
Simone Mainardi
ce4d69a273
Moves alert and status definitions under lua/modules/
2020-10-12 15:03:39 +02:00
Daniele Zulberti
3b8ee0e9f0
Added use of local variables.
...
Used flow.getInfo() and srv.ip instead flow.getServerKey().
Now the for breaks when a match is found.
2020-10-11 18:09:47 +02:00
Simone Mainardi
735073f832
Reworks System Sidebar
...
Fixes #4565
2020-10-11 17:05:53 +02:00
Luca Deri
31a33b1b11
Removed MUD implementation obsoleted by the service map
...
Fixes #4326
Fixes 3499
2020-10-11 16:42:24 +02:00
Wallace4
24a9825e0a
Changed status file title -> description
2020-10-11 16:32:27 +02:00
Wallace4
8fae098590
Changed some variables name and comments
2020-10-11 16:28:02 +02:00
Wallace4
238e01e111
Removed debug writes
2020-10-11 15:21:38 +02:00
Wallace4
d4f0dfef2d
Added en.lua
2020-10-11 15:15:38 +02:00
Wallace4
e065f7b9de
Status and Alert have now their own variable (not custom)
2020-10-11 15:12:37 +02:00
Wallace4
1837d65784
Added en.lua for lang
2020-10-11 13:44:55 +02:00
Wallace4
7358ce3ef0
Ticket #4425 and project
2020-10-11 13:10:17 +02:00
Daniele Zulberti
fedd1e3218
Added unexpected DHCP plugin
2020-10-10 20:22:06 +02:00
Luca Deri
4565f8af04
Added plugin for detecting unexpected NTP servers
2020-10-10 10:54:19 +02:00
Luca Deri
c323c6f351
Tiny change
2020-10-10 10:35:06 +02:00
Luca Deri
2093488db3
Minor fixe: when the list of DNS/SMTP servers is empty, no check is performed
2020-10-10 10:33:47 +02:00
Daniele Zulberti
d74caa9d2b
Added unexpected SMTP plugin
2020-10-09 17:06:23 +02:00
Daniele Zulberti
cff77b49cf
Added unexpected DNS plugin
2020-10-09 17:06:23 +02:00
Simone Mainardi
049bfdcf4a
Implements bitmap-based limited privileges for non-admins
...
Implements #4489
2020-10-09 15:50:22 +02:00
Alfredo Cardigliano
bafccf2c06
Add malformed/dispatched syslog counters. Inc counters in the Suricata plugin.
2020-10-09 15:00:21 +02:00
gabryon99
ee80638073
fixed invalid graph unity ( #4525 )
2020-10-07 17:10:37 +02:00
gabryon99
026e191be8
improved am alert notifications
2020-10-06 11:16:38 +02:00
gabryon99
0a59f57125
fixed edit am
2020-10-06 10:12:07 +02:00
Simone Mainardi
e1f4bb80f7
Default flow risk handler now sets statuses
...
Implements #4398
2020-10-06 09:56:53 +02:00
gabryon99
89f23846c8
handled IPv6 ( #4520 )
2020-10-05 18:53:57 +02:00
gabryon99
93bafa569d
improved table filtering and fixed #4507
2020-10-05 18:39:07 +02:00
gabryon99
811b3f8e3c
removed references to old ImportModal
2020-10-05 18:39:07 +02:00
Simone Mainardi
f6c42554bc
Fixes slow hash entries purging alert
...
Fixes #4527
2020-10-05 14:38:53 +02:00
Alfredo Cardigliano
50411c94e4
Add endpoints for exporting pools (wip) and all configurations. Improve the import API to import modules in order. ( #4475 )
2020-10-02 11:22:55 +02:00
gabryon99
02d3665670
reworking for Import/Export UI ( #4128 )
...
this commit includes the GUI to manage import/export/reset of SNMP, AM, User Scripts and Notification
2020-10-01 18:57:50 +02:00
Alfredo Cardigliano
339877a1d8
Add active monitoring reset endpoint ( #4433 )
2020-10-01 11:50:30 +02:00
Alfredo Cardigliano
0579477893
Fix include in am_import_export
2020-09-30 17:23:35 +02:00
gabryon99
7d77735ada
moved active_monitoring page template into the am plugin folder
...
fix #4494
2020-09-28 15:28:56 +02:00
Simone Mainardi
2f2a2e63e4
Uses plugin modules as flow-risk handlers
2020-09-24 12:48:09 +02:00
gabryon99
7fab77bf4a
separated am_stats view from control
2020-09-23 23:22:19 +02:00
gabryon99
ea8e30bac0
unified tab style across the pages ( #4471 )
2020-09-23 21:49:35 +02:00
Simone Mainardi
d7b688b955
Adds a no-action risk handler for risks already handled in other scripts
2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9
Reworks nDPI Risks flow plugins to handle all risks and scores
...
Fixes #4432
2020-09-23 17:58:51 +02:00
Alfredo Cardigliano
8f7ab1af85
Add import_export active monitoring module ( #4475 )
2020-09-23 14:40:51 +02:00
gabryon99
c8eba2f222
fix action button style in active monitoring datatable
...
addresses #4473
2020-09-23 08:23:56 +02:00
Simone Mainardi
3ad4522e45
Implements additional plugin hooks
...
The following plugin hooks have been implemented
onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)
Documentation is part of the commit.
Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Alfredo Cardigliano
f83ccb70d5
Add external alert check on flow end event. Remove *if* preventing external alerts from being triggered.
2020-09-21 16:12:36 +02:00
Simone Mainardi
304c5404f2
Implement additional plugin hook script.onUpdateConfig
...
Implements #4451
2020-09-20 13:19:36 +02:00
Alfredo Cardigliano
d15738cd00
Ignore malformed alert events
2020-09-18 18:28:56 +02:00