Commit graph

410 commits

Author SHA1 Message Date
Simone Mainardi
92ed28cf4c Prevents unidirectional traffic alerts from NoIP from being triggered
Fixes #4592 along with companion pro commit
2020-10-16 12:20:15 +02:00
Luca Deri
374b97c516 Unexpected protocol plugins default to disable 2020-10-15 21:44:24 +02:00
gabryon99
5db4ec7c5d gui improvments 2020-10-15 19:05:25 +02:00
Luca Deri
24a5b1f908 Added minimum number of packets transmitted before triggering a retransmision alert 2020-10-14 22:33:02 +02:00
Luca Deri
7d6daf6b1b Fixes for flow retransmission plugin 2020-10-14 00:02:25 +02:00
Luca Deri
d3d0924e73
Merge pull request #4578 from Wallace4/retry_project
Addedd Retransmissions plugin for flows
2020-10-13 23:32:30 +02:00
gabryon99
2ab08a282f fixed active monitoring navigation (#4566) 2020-10-13 19:09:13 +02:00
Simone Mainardi
ce4d69a273 Moves alert and status definitions under lua/modules/ 2020-10-12 15:03:39 +02:00
Daniele Zulberti
3b8ee0e9f0 Added use of local variables.
Used flow.getInfo() and srv.ip instead flow.getServerKey().
Now the for breaks when a match is found.
2020-10-11 18:09:47 +02:00
Simone Mainardi
735073f832 Reworks System Sidebar
Fixes #4565
2020-10-11 17:05:53 +02:00
Luca Deri
31a33b1b11 Removed MUD implementation obsoleted by the service map
Fixes #4326
Fixes 3499
2020-10-11 16:42:24 +02:00
Wallace4
24a9825e0a Changed status file title -> description 2020-10-11 16:32:27 +02:00
Wallace4
8fae098590 Changed some variables name and comments 2020-10-11 16:28:02 +02:00
Wallace4
238e01e111 Removed debug writes 2020-10-11 15:21:38 +02:00
Wallace4
d4f0dfef2d Added en.lua 2020-10-11 15:15:38 +02:00
Wallace4
e065f7b9de Status and Alert have now their own variable (not custom) 2020-10-11 15:12:37 +02:00
Wallace4
1837d65784 Added en.lua for lang 2020-10-11 13:44:55 +02:00
Wallace4
7358ce3ef0 Ticket #4425 and project 2020-10-11 13:10:17 +02:00
Daniele Zulberti
fedd1e3218 Added unexpected DHCP plugin 2020-10-10 20:22:06 +02:00
Luca Deri
4565f8af04 Added plugin for detecting unexpected NTP servers 2020-10-10 10:54:19 +02:00
Luca Deri
c323c6f351 Tiny change 2020-10-10 10:35:06 +02:00
Luca Deri
2093488db3 Minor fixe: when the list of DNS/SMTP servers is empty, no check is performed 2020-10-10 10:33:47 +02:00
Daniele Zulberti
d74caa9d2b Added unexpected SMTP plugin 2020-10-09 17:06:23 +02:00
Daniele Zulberti
cff77b49cf Added unexpected DNS plugin 2020-10-09 17:06:23 +02:00
Simone Mainardi
049bfdcf4a Implements bitmap-based limited privileges for non-admins
Implements #4489
2020-10-09 15:50:22 +02:00
Alfredo Cardigliano
bafccf2c06 Add malformed/dispatched syslog counters. Inc counters in the Suricata plugin. 2020-10-09 15:00:21 +02:00
gabryon99
ee80638073 fixed invalid graph unity (#4525) 2020-10-07 17:10:37 +02:00
gabryon99
026e191be8 improved am alert notifications 2020-10-06 11:16:38 +02:00
gabryon99
0a59f57125 fixed edit am 2020-10-06 10:12:07 +02:00
Simone Mainardi
e1f4bb80f7 Default flow risk handler now sets statuses
Implements #4398
2020-10-06 09:56:53 +02:00
gabryon99
89f23846c8 handled IPv6 (#4520) 2020-10-05 18:53:57 +02:00
gabryon99
93bafa569d improved table filtering and fixed #4507 2020-10-05 18:39:07 +02:00
gabryon99
811b3f8e3c removed references to old ImportModal 2020-10-05 18:39:07 +02:00
Simone Mainardi
f6c42554bc Fixes slow hash entries purging alert
Fixes #4527
2020-10-05 14:38:53 +02:00
Alfredo Cardigliano
50411c94e4 Add endpoints for exporting pools (wip) and all configurations. Improve the import API to import modules in order. (#4475) 2020-10-02 11:22:55 +02:00
gabryon99
02d3665670 reworking for Import/Export UI (#4128)
this commit includes the GUI to manage import/export/reset of SNMP, AM, User Scripts and Notification
2020-10-01 18:57:50 +02:00
Alfredo Cardigliano
339877a1d8 Add active monitoring reset endpoint (#4433) 2020-10-01 11:50:30 +02:00
Alfredo Cardigliano
0579477893 Fix include in am_import_export 2020-09-30 17:23:35 +02:00
gabryon99
7d77735ada moved active_monitoring page template into the am plugin folder
fix #4494
2020-09-28 15:28:56 +02:00
Simone Mainardi
2f2a2e63e4 Uses plugin modules as flow-risk handlers 2020-09-24 12:48:09 +02:00
gabryon99
7fab77bf4a separated am_stats view from control 2020-09-23 23:22:19 +02:00
gabryon99
ea8e30bac0 unified tab style across the pages (#4471) 2020-09-23 21:49:35 +02:00
Simone Mainardi
d7b688b955 Adds a no-action risk handler for risks already handled in other scripts 2020-09-23 18:02:57 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Alfredo Cardigliano
8f7ab1af85 Add import_export active monitoring module (#4475) 2020-09-23 14:40:51 +02:00
gabryon99
c8eba2f222 fix action button style in active monitoring datatable
addresses #4473
2020-09-23 08:23:56 +02:00
Simone Mainardi
3ad4522e45 Implements additional plugin hooks
The following plugin hooks have been implemented

onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)

Documentation is part of the commit.

Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Alfredo Cardigliano
f83ccb70d5 Add external alert check on flow end event. Remove *if* preventing external alerts from being triggered. 2020-09-21 16:12:36 +02:00
Simone Mainardi
304c5404f2 Implement additional plugin hook script.onUpdateConfig
Implements #4451
2020-09-20 13:19:36 +02:00
Alfredo Cardigliano
d15738cd00 Ignore malformed alert events 2020-09-18 18:28:56 +02:00