Alfredo Cardigliano
e38835a603
Rename SSL to TLS ( fix #3013 )
2019-11-15 12:40:01 +01:00
Alfredo Cardigliano
fa57c701bb
Displaying file id to retrieve files stored by Suricata
2019-10-28 12:24:15 +01:00
emanuele-f
6fbc01b28e
Remove redis hash access for user scripts disabled check
2019-10-23 14:41:10 +02:00
emanuele-f
b3374651ce
Merge branch 'alerts_cleanup' into dev
2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Alfredo Cardigliano
9b071bb873
Ingesting JA3 from Suricata, uniformed TLS IE names with those exported by cento, added localization for missing IEs
2019-10-17 13:04:42 +02:00
emanuele-f
6533175336
Add flow/alerts definitions directories
2019-10-16 17:45:55 +02:00
emanuele-f
9386fdd2b1
Add status/alerts definitions overview page and documentation
2019-10-16 17:23:54 +02:00
emanuele-f
7a14a9cf11
Improvements in status definition API
2019-10-16 10:33:19 +02:00
emanuele-f
9ea7ff01b8
Improve flow alert trigger logic and fix support for custom message
2019-10-15 18:36:41 +02:00
emanuele-f
b217909966
Split flow status definitions in multiple files
2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
240fa15149
Handle additional fields from Suricata
2019-10-15 15:48:12 +02:00
emanuele-f
2fdc860ed2
Add support for custom flow alerts in user scripts
2019-10-11 19:48:11 +02:00
Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
Simone Mainardi
fa17aab9db
Implements lua flow method calls using ids to be more efficient
2019-09-30 17:29:01 +02:00
emanuele-f
6e14f978d6
Flow alerts status cleanup
2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
871bb63b61
Added default relevance per flow status
2019-09-05 11:53:42 +02:00
Alfredo Cardigliano
141622f151
Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info
2019-09-04 22:20:51 +02:00