Commit graph

678 commits

Author SHA1 Message Date
emanuele-f
b66b71fd7e Implement alert on JA3 malicious signatures
Closes #2788
2019-08-28 18:33:13 +02:00
Simone Mainardi
6300b3ce4e Fixes flows explorer localtime calculation when time is DST
Fixes #2771
2019-08-20 16:45:40 +02:00
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46 Implement alerts based on potentially dangerous flows nDPI classification 2019-08-07 14:29:06 +02:00
emanuele-f
e82c66fb7c Fix mixed global/per-interface nindex checks
Fix #2725
2019-08-01 11:53:55 +02:00
emanuele-f
ba91b62f0a Allow spaces in password fields
Fixes #2732
2019-08-01 11:12:30 +02:00
Simone Mainardi
c9223590d9 Workaround to handle \n forcefully set when decoding ZMQ tlv 2019-07-31 16:06:15 +02:00
Simone Mainardi
5270d09490 Allows alerts to be configured on view interfaces 2019-07-19 12:43:31 +02:00
emanuele-f
2cdc180c9b Remove unused function 2019-07-16 14:09:32 +02:00
Simone Mainardi
883b99dce9 Fixes attempt to index a nil value with Syslog alerts 2019-07-16 13:05:27 +02:00
Simone Mainardi
cc97be85ca Fixes host alerts key generation 2019-07-15 22:54:09 +02:00
Alfredo Cardigliano
2e7e9dcb70 Fixed l4_proto_to_string to return the proto ID with unknown protocols 2019-07-12 16:34:32 +02:00
Alfredo Cardigliano
c63831bfa3 Computing L4 protocol statistics for flows 2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236 Filter flows by L4 protocol 2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
b4f21d1d9b Moved host 'name' from hostinfo2url which is not supported (and leads to errors in lint) 2019-07-11 14:59:12 +02:00
emanuele-f
ecdf88b8a0 Host alerts migration to new api 2019-07-09 18:50:45 +02:00
emanuele-f
0748ef191d Initial system interface data delete 2019-07-04 11:09:33 +02:00
emanuele-f
7b936a1a4c Mesbehaving flows documentation 2019-07-02 16:32:12 +02:00
Simone Mainardi
8c9bf94f4b Handles possibly missing nindex_utils as in Windows 2019-07-02 16:27:34 +02:00
Simone Mainardi
ae4770fe7d Improves visualization of containers/pods in flows 2019-06-27 17:00:17 +02:00
emanuele-f
cfa9986671 Implement InfluxDB export statistics 2019-06-10 15:52:06 +02:00
emanuele-f
3ecc032c14 Hide system properties for restricted users
This will also hide SNMP devices
2019-06-03 12:42:23 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
emanuele-f
9d72c72cb3 Fix warning sign on normal flows 2019-05-31 09:39:52 +02:00
Luca Deri
e03b7f0f5f Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2019-05-29 00:17:39 +02:00
Luca Deri
93ed8c009a Added SSL protocol handling 2019-05-29 00:12:26 +02:00
emanuele-f
1c9a4d3461 Implement ICMP data exfiltration alerts
Closes #256
2019-05-28 10:37:59 +02:00
Luca Deri
1228ddc2ca Added unsafe SSL ciphers detection 2019-05-20 23:19:53 +02:00
Alfredo Cardigliano
22b4d1d7bc Description fix for icmp type 8 (see #2597) 2019-05-20 19:25:20 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
3b99717db6 TCP connection issues threshold and double severity level based on ratio (#2593) 2019-05-20 16:07:48 +02:00
emanuele-f
cd7d987ac8 Fix long lived flow status
Fixes #2550
2019-05-13 18:01:40 +02:00
emanuele-f
b01f104a36 Move process information into client/server column 2019-04-29 12:09:44 +02:00
emanuele-f
939ca8c166 Implement eBPF flows view and improve containers/pods pages 2019-04-26 15:34:53 +02:00
emanuele-f
fdc7772519 Implement simplified flows page with container filter 2019-04-26 10:44:44 +02:00
Simone Mainardi
d7342798ca Improves SSL certificates mismatch alerts
Implements #2510
2019-04-05 18:21:54 +02:00
Simone Mainardi
b4f849a51d Domain in blacklisted alerts 2019-04-05 18:02:23 +02:00
emanuele-f
387543f8e9 Fix top talkers when mac address is used as LBD hosts ID 2019-04-05 17:49:22 +02:00
Simone Mainardi
a85b7cd398 Improves description of blacklisted flow alerts
Implements #2511
2019-04-05 15:40:33 +02:00
Alfredo Cardigliano
3f442f28b0 Rendering signature/severity for ids alerts 2019-04-04 16:31:13 +02:00
Alfredo Cardigliano
96954bdabb new ids alert type and configuration 2019-04-04 11:02:01 +02:00
emanuele-f
ad77797482 Fix flow status formatting when no flowstatus_info is available 2019-03-28 11:59:14 +01:00
emanuele-f
021812a238 Add ability to search by network cidr/alias in search box 2019-03-25 17:21:22 +01:00
emanuele-f
54becd3b22 Add local networks alias configuration
Closes #2476
2019-03-25 16:50:48 +01:00
emanuele-f
79543c6207 Flows table improvements 2019-03-25 16:04:29 +01:00
Simone Mainardi
8613ffd7ee Add link to active flow in flow alerts 2019-03-06 14:56:10 +01:00
Simone Mainardi
912e461fdf Adds description and threshold for long-lived flows 2019-03-06 12:58:39 +01:00
Simone Mainardi
2fd5a75b6a Implements interface.findFlowByTuple to fix issues with ICMP
Fixes #2415
2019-02-27 11:39:02 +01:00
emanuele-f
405841431c Add Custom Lists download alert and handle hourly download retry
Closes #2410
2019-02-21 01:07:22 +01:00
Simone Mainardi
e7cebdcd98 Adds description to elephant flows and exclude data transfer protocols
Fixes #2402
2019-02-20 15:28:27 +01:00