Luca Deri
8f49ce0f4b
Cleaned up bkaclisted flow label (removed UID)
2024-04-25 11:04:12 +02:00
Nicolo Maio
2bed18ea1e
Add retransmissions, out-of-order, and lost packets filters in historical flows. ( #7948 )
2024-04-24 18:00:43 +02:00
Nicolò Maio
59075f5e10
Splitting blacklisted flow alert and creating two new alerts. ( #8354 ) ( #8355 )
...
* Splitting blacklisted flow alert and creating two new alerts. (#8354 )
* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354 )
2024-04-24 17:37:30 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. ( #8264 ) ( #8348 )
...
* Add Flow Reset Alert and counter. (#8264 )
* Renaming to TCP Flow Reset. (#8264 )
* Renaming the value retrieved by the getName method. (#8264 )
2024-04-24 17:15:20 +02:00
Luca Deri
dac2cb60ad
Added missing dirs variable definition
2024-04-23 22:22:24 +02:00
Matteo Biscosi
d397d47555
Lowered the maximum amount of alert for jailed host ( #8311 ) and added cleanup at startup
2024-04-23 10:03:50 -04:00
Alfredo Cardigliano
260510289e
Fix match on alert type
2024-04-23 16:02:55 +02:00
Luca Deri
5779579a20
Fixes protocol categories and reverts 5b4629f9e5
2024-04-23 12:48:23 +02:00
Alfredo Cardigliano
3dbdcc4966
Fix filters on alert types for non host/flow alerts
2024-04-22 18:39:55 +02:00
Alfredo Cardigliano
6c02a54e20
Fix entity for alerts triggered from lua
2024-04-22 13:19:16 +02:00
Matteo Biscosi
6ee1026112
Added top blacklists charts ( #8092 )
2024-04-19 10:05:18 -04:00
Alfredo Cardigliano
e709a6818e
Limit results to the max set in the backend
2024-04-19 15:51:17 +02:00
Alfredo Cardigliano
d7415c156d
Add option to limit rows
2024-04-19 15:41:27 +02:00
Nicolo Maio
07d2f1417a
Minor fix on historical flow details page.
2024-04-19 15:38:27 +02:00
Nicolo Maio
21379070f5
Add IssuerDN and Last Server filters. ( #7032 )
2024-04-18 17:30:06 +02:00
Nicolò Maio
fd6b0958c3
Rename the alert to "Remote to Local Insecure Flow". ( #8257 ) ( #8339 )
2024-04-18 12:45:54 +02:00
Nicolò Maio
3d5fadf66b
Save backup on Disk ( #8272 ) ( #8332 )
...
* Save backup on Disk (#8272 )
* Utilize ntop.readdir and eliminate the usage of io.popen (#8272 )
2024-04-18 12:45:15 +02:00
Nicolo Maio
b34a674427
Fix usage of COLLATE option.
2024-04-18 12:19:11 +02:00
Nicolo Maio
96cd811123
Fix incorrect historical hosts location. ( #8338 )
2024-04-17 12:55:29 +02:00
Nicolo Maio
2caddb8b04
Add absolute percentage as a metric in SNMP rules.
2024-04-16 14:47:19 +02:00
Matteo Biscosi
2671a71f1a
Fixes historical detail not working
2024-04-16 06:08:15 -04:00
Matteo Biscosi
377281779e
Fixes missing link to configuration page
2024-04-15 10:58:51 -04:00
Luca Deri
e888e6fb69
Typo
2024-04-13 08:50:26 +02:00
Luca Deri
4a93fe8a87
Added support in flow details for STUN MAPPED-ADDRESS
2024-04-12 21:14:38 +02:00
Matteo Biscosi
7d0a946007
Fixed missing fields in TLS alerts
2024-04-12 11:20:40 -04:00
Matteo Biscosi
0cfd1246c1
Fixes some alerts description
2024-04-12 11:03:33 -04:00
Matteo Biscosi
dc7eeba386
Changed score order
2024-04-12 10:48:08 -04:00
Matteo Biscosi
289c398783
Fixes fields disappearing in different rests
2024-04-12 09:29:15 -04:00
Matteo Biscosi
d326926680
Removed cpu and time intensive query
2024-04-12 09:11:12 -04:00
Matteo Biscosi
abc7330c14
Removed info duplicated field
2024-04-12 09:09:12 -04:00
Matteo Biscosi
1f37ed9cfd
Reworked historical flow details page
2024-04-12 07:14:09 -04:00
Alfredo Cardigliano
76c2696dcb
Fix vlan as wan interfaces
2024-04-12 12:27:28 +02:00
Matteo Biscosi
0fecdee1e4
Reworked blacklists page
2024-04-11 12:48:59 -04:00
Nicolo Maio
3cbe170730
Add SNMP import functionality for CSV files ( #8295 )
2024-04-11 16:32:58 +02:00
Alfredo Cardigliano
925332d70f
Add selected WAN interfaces to the list of gateways if not already there
2024-04-11 16:29:07 +02:00
Matteo Biscosi
8076ddc67f
Possible fix for attempt to index a string value
2024-04-11 06:04:27 -04:00
Matteo Biscosi
785ac74633
Fixes possible alert message issue
2024-04-11 05:08:02 -04:00
Matteo Biscosi
1460eda751
Fixes SQL injection description
2024-04-10 07:16:13 -04:00
Matteo Biscosi
f8ab508a68
Removed html and added json format from flow_related_info
2024-04-10 07:11:32 -04:00
Matteo Biscosi
1c30f0c4d7
Removed not needed package cleanup ( #8320 )
2024-04-10 06:04:44 -04:00
Matteo Biscosi
726f562598
Removed shorten string in backend ( #8315 )
2024-04-09 11:20:41 -04:00
Matteo Biscosi
48fbd19a51
Added host location to flow page ( #8293 )
2024-04-09 05:31:48 -04:00
Luca Deri
ee6b67ed0c
Added support for nDPI's NDPI_BINARY_DATA_TRANSFER
2024-04-09 10:35:49 +02:00
Matteo Biscosi
99cde4e030
Removed debug tprint
2024-04-08 13:11:17 -04:00
Luca Deri
f26d56959c
Renamed HostBlackHoleContactsAlert to HostScannerAlert
2024-04-08 18:35:49 +02:00
Matteo Biscosi
436bf03e56
Removed html when not requested and fixed some alerts description( #8304 )
2024-04-08 10:45:11 -04:00
Matteo Biscosi
cbec26e3b4
Fixes missing alert descriptions ( #8314 #8313 )
2024-04-08 07:02:17 -04:00
Luca Deri
6551cd51da
Added check for ignoring private IPs in blacklists
2024-04-04 12:38:39 +02:00
Matteo Biscosi
afe48631e6
Fixes missing filter alert on remote/local host
2024-04-03 09:47:25 -04:00
Nicolo Maio
f75927175a
Add SNMP Import ( #8295 )
2024-04-03 12:07:38 +02:00