7396 commits

Author	SHA1	Message	Date
YellowMan	dc24919182	fixed missing information in historical flow details (#8872)	2024-12-12 11:42:13 +01:00
Matteo Biscosi	c0c1773777	Added function to convert from flow to flow_alert	2024-12-12 11:06:12 +01:00
Matteo Biscosi	faa34b614c	Fixes alert score not correctlt working (#8851)	2024-12-11 19:25:30 +01:00
Matteo Biscosi	e3487d445f	Fixes alerts incorrectly displayed	2024-12-11 19:25:30 +01:00
YellowMan	c712750200	Remote to local insecure flow (#8871) ... * Fixed domain names contact alert behaviour * enanched remote to local insecure flow alert description * minor fix	2024-12-11 16:54:01 +01:00
Matteo Biscosi	5d76ee3ec7	Fixes score calculation error (#8868)	2024-12-11 12:32:20 +01:00
Matteo Biscosi	715cc5ddd9	Fixes compatibility with new alert format	2024-12-10 18:05:47 +01:00
Alfredo Cardigliano	e1c385985c	Fix backward compatibility	2024-12-10 14:40:32 +01:00
Alfredo Cardigliano	d8d7330f11	Rework alert serialization. Change alert info format (info for all triggered alerts are now generated)	2024-12-10 13:27:57 +01:00
Matteo Biscosi	c214ffca9a	Fixes blacklists timeseries not correctly showing values (#8817)	2024-12-09 13:28:55 +01:00
Alfredo Cardigliano	027a4ebbf4	Add missing require	2024-12-09 09:24:45 +01:00
Matteo Biscosi	609b059745	Added networks policies (#8812)	2024-12-05 16:51:26 +01:00
Alfredo Cardigliano	ae5128c620	Split protocol and alert info from ALERT_JSON: new PROTOCOL_INFO_JSON column	2024-12-05 15:13:16 +01:00
Matteo Biscosi	358660a56f	Added startup delete on all radius keys	2024-12-05 13:15:49 +01:00
Luca Deri	76e47112e8	Fixes invalid format error	2024-12-05 12:22:23 +01:00
YellowMan	2ffe95845d	Added application latency in historical flow information (#8855)	2024-12-05 10:10:05 +01:00
Matteo Biscosi	0ebe2b9e88	Fixes missing blacklist (#8841)	2024-12-02 18:34:00 +01:00
Matteo Biscosi	2a47b8667f	Fixes mac addresses alerts	2024-12-02 17:32:55 +01:00
Matteo Biscosi	07ef54c7cc	Added ACL violation ARP alert (#8696)	2024-12-02 13:07:56 +01:00
Matteo Biscosi	f160e11007	Added is in memory parameter and removed port 0 (#8843)	2024-11-29 12:02:58 +01:00
Matteo Biscosi	819f39830b	Added ACL Violation alert (#8696)	2024-11-28 18:02:53 +01:00
Matteo Biscosi	736932e977	Added error handling in case of edit/add/delete (#8696)	2024-11-28 11:23:18 +01:00
Luca Deri	fb06400fe2	Changed alert serialization	2024-11-28 09:34:57 +01:00
Luca Deri	084e295af8	Minor fixes	2024-11-27 15:26:31 +01:00
Luca Deri	6b4afa074a	Removed OS stats	2024-11-26 10:23:04 +01:00
Matteo Biscosi	d50cce28d3	First implementation of acl (#8696)	2024-11-25 19:37:01 +01:00
Luca Deri	6294343086	Reworked OS and hot fingerprint	2024-11-24 23:08:38 +01:00
Luca Deri	d3e469a316	Mergec TCP Probing and Probin attempt	2024-11-20 22:08:07 +01:00
Matteo Biscosi	70f257d909	Added manufacturer to historical flows (#8534)	2024-11-20 15:20:40 +01:00
Matteo Biscosi	170725e5eb	Removed not used import	2024-11-20 14:56:51 +01:00
Matteo Biscosi	40bb18ebdc	Fixes missing nDPI alerts description (#8570)	2024-11-20 13:59:58 +01:00
Alfredo Cardigliano	8c0094f354	Fix flow alerts lookup for non predominant alerts (alerts_map_h/alerts_map_l integer columns)	2024-11-20 11:44:06 +01:00
YellowMan	d396297985	Tcp Probing Attempt Alert (#8821) ... * Implemented TCP Probing Attempt Alert --------- Co-authored-by: DiPalmaGiuseppe <g.dipalma6@studenti.unipi.it>	2024-11-20 10:58:36 +01:00
Matteo Biscosi	63df3c6858	Added l7 exporters timeseries	2024-11-19 15:52:22 +01:00
Alfredo Cardigliano	3785284bd5	Fix getFullLocalNetworkName	2024-11-19 09:54:03 +01:00
Alfredo Cardigliano	a8cb1a3359	Fix network print	2024-11-19 09:46:14 +01:00
Matteo Biscosi	efdd1c8673	Fixes missing invert direction to the exporters l7 timeseries	2024-11-15 11:31:23 +01:00
Matteo Biscosi	d01b790182	Fixes top timeseries not working for influxdb (#8815)	2024-11-14 18:15:39 +01:00
Matteo Biscosi	ed3b24a786	Added top l7 protocols timeseries to exporters	2024-11-14 17:00:52 +01:00
Matteo Biscosi	9dab48aedf	Fixes l7 protocol not correctly calculated for exporters	2024-11-14 16:35:10 +01:00
Alfredo Cardigliano	3d5a351508	Fix typo	2024-11-13 16:38:15 +01:00
Matteo Biscosi	310af5f9b2	Added tracing for radius accounting update	2024-11-12 18:41:32 +01:00
Alfredo Cardigliano	2aa46f98ac	Implement aggregated page for all alert families	2024-11-12 16:22:06 +01:00
Alfredo Cardigliano	125787909a	Add rowid to engaged alerts for all families	2024-11-12 11:53:59 +01:00
Matteo Biscosi	b2a37ea016	Fixes missing protocol mapping (#8805)	2024-11-12 11:07:47 +01:00
Matteo Biscosi	b33cd7f697	Removed duplicated help link (#8799)	2024-11-12 10:26:48 +01:00
Alfredo Cardigliano	6f9d0690c6	Add require_attention to all alert families on SQLite. Cleanup SQLite schema	2024-11-11 18:12:27 +01:00
Alfredo Cardigliano	2da5925181	Fix all alerts page. Fix require attention results.	2024-11-11 15:59:58 +01:00
Alfredo Cardigliano	f3963c9eb1	Split alert_status (engaged, historical, acknowledged) and require_attention flag	2024-11-11 12:46:25 +01:00
Alfredo Cardigliano	6bde30030d	Check engaged alerts up to 1 day before to avoid full db scan	2024-11-11 10:50:58 +01:00