5503 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	df2829d409	Improve iec_invalid_transition format function (#6682)	2022-06-10 16:17:08 +02:00
MatteoBiscosi	a20d2dba58	Changed interface thpt alert	2022-06-10 11:45:31 +02:00
MatteoBiscosi	b7a61835ba	Fixes dns large packets alert incorrectly triggered (#6674)	2022-06-10 10:34:03 +02:00
MatteoBiscosi	873a1d2252	Fixes table expected error	2022-06-09 19:05:25 +02:00
MatteoBiscosi	048d97c2d4	Removed shorten string from confidence	2022-06-09 18:24:44 +02:00
MatteoBiscosi	ba20719d4a	Fixes suspicious dga domain url not formatted	2022-06-09 18:19:03 +02:00
MatteoBiscosi	9622209308	Minor fixes to alerts	2022-06-09 18:12:04 +02:00
MatteoBiscosi	4895a3f7d3	Unified tstamp formatting (#6676)	2022-06-09 17:37:50 +02:00
Alfredo Cardigliano	80210f92ae	Tags cleanup. Lint update.	2022-06-09 17:12:17 +02:00
MatteoBiscosi	12e9863eae	Fixes wrong confidence color	2022-06-09 16:25:58 +02:00
Alfredo Cardigliano	8f596d095f	Cleanup more debugger	2022-06-09 15:09:25 +02:00
MatteoBiscosi	8214173ecd	Various changes to alerts (#6675)	2022-06-09 12:26:25 +02:00
MatteoBiscosi	e8b63b76f2	Possibly fixes issue #6677	2022-06-09 11:52:15 +02:00
Alfredo Cardigliano	8ddf0e6998	Store cli/srv location in alerts	2022-06-09 11:27:41 +02:00
MatteoBiscosi	ad23d309ee	Sliced application guessed label	2022-06-09 11:19:57 +02:00
Alfredo Cardigliano	f633292e83	Add cli/srv location to flow alerts	2022-06-09 10:40:33 +02:00
MatteoBiscosi	4d037e911b	Possible fix for #6670	2022-06-08 17:59:10 +02:00
MatteoBiscosi	2885659195	Added traffic direction and remove cli and srv location (#6665)	2022-06-08 13:44:23 +02:00
MatteoBiscosi	021086e44f	Added dpi and guessed badge to flow list and details	2022-06-08 10:51:19 +02:00
MatteoBiscosi	4b7edebc71	Added confidence filter to alerts	2022-06-07 18:40:02 +02:00
MatteoBiscosi	69b9e6337e	Removed debug print	2022-06-07 18:01:15 +02:00
MatteoBiscosi	b40d26f2e8	Changed confidence from string to number	2022-06-07 17:59:42 +02:00
MatteoBiscosi	9bdded81e8	Added confidence filter	2022-06-07 13:33:27 +02:00
Luca Deri	9d364c69b4	Fixed TCP with no answer alert definition	2022-06-07 13:11:35 +02:00
MatteoBiscosi	8b00fd67a9	Added confidence to historical Flows	2022-06-07 13:01:38 +02:00
MatteoBiscosi	68671222bd	Added DHCP starvation alert (#6659)	2022-06-06 17:39:12 +02:00
MatteoBiscosi	8b60f05b14	Added vlans to flow details (#6663 and #6662)	2022-06-06 10:20:37 +02:00
MatteoBiscosi	07f3985a8a	Added score to alert message	2022-06-01 11:31:02 +02:00
MatteoBiscosi	0006f0683f	Updated ndpi flow risk info description	2022-06-01 11:10:19 +02:00
MatteoBiscosi	5e43b73059	Added check for flow risk info not nil	2022-06-01 10:49:10 +02:00
MatteoBiscosi	3509b3b74b	Added dns fragmented alert	2022-05-31 18:34:22 +02:00
MatteoBiscosi	ad3ada6826	Added flow risk info to alert description	2022-05-31 17:16:12 +02:00
MatteoBiscosi	167cf6484a	Updated ndpi flow risk alerts	2022-05-31 17:15:21 +02:00
MatteoBiscosi	91c9b5d04d	Moved host mac reassociation alert	2022-05-31 11:31:42 +02:00
Alfredo Cardigliano	4fe46f0e6d	Support match on 'all' alert for alert exclusion	2022-05-31 11:31:30 +02:00
Luca Deri	8e5cc88c8d	Warning fix for #6578	2022-05-30 23:04:18 +02:00
Alfredo Cardigliano	a73d596503	Fix lookup for 'all' alert type exlusion	2022-05-30 19:04:16 +02:00
MatteoBiscosi	e4f5fae4e7	Removed empty protocol info	2022-05-30 18:05:55 +02:00
MatteoBiscosi	3867b03978	Added protocol information dumped even with no alerts (#6649)	2022-05-30 17:54:16 +02:00
MatteoBiscosi	44dc90f30c	Generalized clickhouse json search	2022-05-30 16:50:05 +02:00
MatteoBiscosi	0b2589f616	Added error code filter to historical flow (#6610)	2022-05-30 15:22:45 +02:00
MatteoBiscosi	5f686624ab	Added Error code filter to alerts (#6610)	2022-05-30 15:22:45 +02:00
Alfredo Cardigliano	f6cb982355	Fix alert_store housekeeping	2022-05-30 11:43:18 +02:00
Alfredo Cardigliano	21530068a9	Add get_table_name / get_write_table_name to alert store	2022-05-30 11:25:32 +02:00
Alfredo Cardigliano	502f4cd106	Delete alerts matching domain when adding exception	2022-05-27 16:50:25 +02:00
MatteoBiscosi	e2ad021161	Fixes external link (#6626)	2022-05-27 16:23:26 +02:00
Alfredo Cardigliano	32a520636b	List exclusions for domains/certificates	2022-05-27 16:11:59 +02:00
Alfredo Cardigliano	83b3ae8bbc	Add/remove domain/certificate exceptions	2022-05-27 15:32:50 +02:00
MatteoBiscosi	ee96f77bac	Partially fixes external link prot in ntopng (#6626)	2022-05-27 13:04:59 +02:00
Alfredo Cardigliano	f7cf547a65	Rework alert_exclusions API	2022-05-27 12:55:30 +02:00