Commit graph

7003 commits

Author SHA1 Message Date
Luca Deri
8f49ce0f4b Cleaned up bkaclisted flow label (removed UID) 2024-04-25 11:04:12 +02:00
Nicolo Maio
2bed18ea1e Add retransmissions, out-of-order, and lost packets filters in historical flows. (#7948) 2024-04-24 18:00:43 +02:00
Nicolò Maio
59075f5e10
Splitting blacklisted flow alert and creating two new alerts. (#8354) (#8355)
* Splitting blacklisted flow alert and creating two new alerts. (#8354)

* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)
2024-04-24 17:37:30 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. (#8264) (#8348)
* Add Flow Reset Alert and counter. (#8264)

* Renaming to TCP Flow Reset. (#8264)

* Renaming the value retrieved by the getName method. (#8264)
2024-04-24 17:15:20 +02:00
Luca Deri
dac2cb60ad Added missing dirs variable definition 2024-04-23 22:22:24 +02:00
Matteo Biscosi
d397d47555 Lowered the maximum amount of alert for jailed host (#8311) and added cleanup at startup 2024-04-23 10:03:50 -04:00
Alfredo Cardigliano
260510289e Fix match on alert type 2024-04-23 16:02:55 +02:00
Luca Deri
5779579a20 Fixes protocol categories and reverts 5b4629f9e5 2024-04-23 12:48:23 +02:00
Alfredo Cardigliano
3dbdcc4966 Fix filters on alert types for non host/flow alerts 2024-04-22 18:39:55 +02:00
Alfredo Cardigliano
6c02a54e20 Fix entity for alerts triggered from lua 2024-04-22 13:19:16 +02:00
Matteo Biscosi
6ee1026112 Added top blacklists charts (#8092) 2024-04-19 10:05:18 -04:00
Alfredo Cardigliano
e709a6818e Limit results to the max set in the backend 2024-04-19 15:51:17 +02:00
Alfredo Cardigliano
d7415c156d Add option to limit rows 2024-04-19 15:41:27 +02:00
Nicolo Maio
07d2f1417a Minor fix on historical flow details page. 2024-04-19 15:38:27 +02:00
Nicolo Maio
21379070f5 Add IssuerDN and Last Server filters. (#7032) 2024-04-18 17:30:06 +02:00
Nicolò Maio
fd6b0958c3
Rename the alert to "Remote to Local Insecure Flow". (#8257) (#8339) 2024-04-18 12:45:54 +02:00
Nicolò Maio
3d5fadf66b
Save backup on Disk (#8272) (#8332)
* Save backup on Disk (#8272)

* Utilize ntop.readdir and eliminate the usage of io.popen (#8272)
2024-04-18 12:45:15 +02:00
Nicolo Maio
b34a674427 Fix usage of COLLATE option. 2024-04-18 12:19:11 +02:00
Nicolo Maio
96cd811123 Fix incorrect historical hosts location. (#8338) 2024-04-17 12:55:29 +02:00
Nicolo Maio
2caddb8b04 Add absolute percentage as a metric in SNMP rules. 2024-04-16 14:47:19 +02:00
Matteo Biscosi
2671a71f1a Fixes historical detail not working 2024-04-16 06:08:15 -04:00
Matteo Biscosi
377281779e Fixes missing link to configuration page 2024-04-15 10:58:51 -04:00
Luca Deri
e888e6fb69 Typo 2024-04-13 08:50:26 +02:00
Luca Deri
4a93fe8a87 Added support in flow details for STUN MAPPED-ADDRESS 2024-04-12 21:14:38 +02:00
Matteo Biscosi
7d0a946007 Fixed missing fields in TLS alerts 2024-04-12 11:20:40 -04:00
Matteo Biscosi
0cfd1246c1 Fixes some alerts description 2024-04-12 11:03:33 -04:00
Matteo Biscosi
dc7eeba386 Changed score order 2024-04-12 10:48:08 -04:00
Matteo Biscosi
289c398783 Fixes fields disappearing in different rests 2024-04-12 09:29:15 -04:00
Matteo Biscosi
d326926680 Removed cpu and time intensive query 2024-04-12 09:11:12 -04:00
Matteo Biscosi
abc7330c14 Removed info duplicated field 2024-04-12 09:09:12 -04:00
Matteo Biscosi
1f37ed9cfd Reworked historical flow details page 2024-04-12 07:14:09 -04:00
Alfredo Cardigliano
76c2696dcb Fix vlan as wan interfaces 2024-04-12 12:27:28 +02:00
Matteo Biscosi
0fecdee1e4 Reworked blacklists page 2024-04-11 12:48:59 -04:00
Nicolo Maio
3cbe170730 Add SNMP import functionality for CSV files (#8295) 2024-04-11 16:32:58 +02:00
Alfredo Cardigliano
925332d70f Add selected WAN interfaces to the list of gateways if not already there 2024-04-11 16:29:07 +02:00
Matteo Biscosi
8076ddc67f Possible fix for attempt to index a string value 2024-04-11 06:04:27 -04:00
Matteo Biscosi
785ac74633 Fixes possible alert message issue 2024-04-11 05:08:02 -04:00
Matteo Biscosi
1460eda751 Fixes SQL injection description 2024-04-10 07:16:13 -04:00
Matteo Biscosi
f8ab508a68 Removed html and added json format from flow_related_info 2024-04-10 07:11:32 -04:00
Matteo Biscosi
1c30f0c4d7 Removed not needed package cleanup (#8320) 2024-04-10 06:04:44 -04:00
Matteo Biscosi
726f562598 Removed shorten string in backend (#8315) 2024-04-09 11:20:41 -04:00
Matteo Biscosi
48fbd19a51 Added host location to flow page (#8293) 2024-04-09 05:31:48 -04:00
Luca Deri
ee6b67ed0c Added support for nDPI's NDPI_BINARY_DATA_TRANSFER 2024-04-09 10:35:49 +02:00
Matteo Biscosi
99cde4e030 Removed debug tprint 2024-04-08 13:11:17 -04:00
Luca Deri
f26d56959c Renamed HostBlackHoleContactsAlert to HostScannerAlert 2024-04-08 18:35:49 +02:00
Matteo Biscosi
436bf03e56 Removed html when not requested and fixed some alerts description(#8304) 2024-04-08 10:45:11 -04:00
Matteo Biscosi
cbec26e3b4 Fixes missing alert descriptions (#8314 #8313) 2024-04-08 07:02:17 -04:00
Luca Deri
6551cd51da Added check for ignoring private IPs in blacklists 2024-04-04 12:38:39 +02:00
Matteo Biscosi
afe48631e6 Fixes missing filter alert on remote/local host 2024-04-03 09:47:25 -04:00
Nicolo Maio
f75927175a Add SNMP Import (#8295) 2024-04-03 12:07:38 +02:00