Commit graph

490 commits

Author SHA1 Message Date
Alfredo Cardigliano
64ab8b6bae Trigger External Host alerts directly from Lua (also for inactive hosts) (fix #7170) 2023-04-21 18:20:14 +02:00
Nicolò Maio
8cdda7cc69
Add flow exporter device check rules. (#7082) (#7364)
* Add flow exporter device check rules. (#7082)

* Remove debugger.

* Minor fix.

* Update en.lua
2023-04-07 16:28:24 +02:00
Luca Deri
96e10b12a5 Added stub for RareDestination check/alert implementation #6416 and #6417 2023-03-22 15:11:53 +01:00
Matteo Biscosi
76267099a2 Fixes alerts inconsistent alerts and checks names (#7314) 2023-03-14 15:36:07 +00:00
Matteo Biscosi
fc82eff56b Updated alert to NDPI_NUMERIC_IP_HOST 2023-03-02 15:18:40 +00:00
Nicolò Maio
b4b8307739
Fix alert_remote_to_local_insecure_proto alert message. (#7265) (#7277) 2023-02-27 13:01:45 +01:00
Nicolò Maio
cf8a89a7e1
Add lowerbound and upperbound choice and percentage threshold on host rules. (#6855) (#7238)
* Add lowerbound and percentage threshold on host rules. (#6855)

* Add interface rules. (#6855)

* Added ability to blacklist hosts via Lua API

* Not supposed to be committed

* Method signature change to be called it also from a lua host script

* Fix empty string heck

* Add param check

* Add example listing alerts

* Fix params check

* Fix alert raw queris

* Removed debug code

* MacOS changes

* Updated (C)

* Warning fixes

* Removed sprintf calls

* Added rx_only_hosts classification

* https://github.com/ntop/ntopng/issues/7233; extend datatable component to allow external vue components in table menu bar

* Update dist: https://github.com/ntop/ntopng/issues/7233; extend datatable component to allow external vue components in table menu bar

* Remove obsoleted comment

* Minor GUI fix. (#6855)

* Fix on alert format. (#6855)

* Minor fix. (#6855)

* Update doc. (#6855)

---------

Co-authored-by: Luca Deri <lucaderi@users.noreply.github.com>
Co-authored-by: Luca Deri <deri@ntop.org>
Co-authored-by: Alfredo Cardigliano <cardigliano@ntop.org>
Co-authored-by: uccidibuti <vannucci@ntop.org>
2023-02-21 14:37:09 +01:00
Alfredo Cardigliano
669a4a484a Add syslog handler for nbox 2023-02-16 16:35:47 +01:00
Nicolò Maio
6d2ee3d599
Add network issue alert (#6691) (#7228)
* Add network issues alert. (#6691)

* Fix alert subtype. (#6691)

* Update default values. (#6691)

* Minor fix. (#6691)
2023-02-14 05:40:06 -05:00
MatteoBiscosi
ddb55b4d7e Updated ndpi alerts (#7200) 2023-02-09 18:46:37 +01:00
MatteoBiscosi
78d6acb867 Removed no needed checks 2023-02-07 11:06:54 +01:00
Luca Deri
ced7349e9c Minor fix 2023-02-06 18:19:02 +01:00
Nicolò Maio
c3fa801d37
Fix vlan historical filter. (#6714) (#7205)
* Fix vlan historical filter. (#6714)

* Update enabling "check live" link. (#6714)

* Fix vlan_id set and remove hardcoded string. (#6714)

* Add comments. (#6714)

* Update historical chart filters. (#6714)
2023-02-06 17:09:16 +00:00
MatteoBiscosi
1f88fe593d Fixes nil value on score threshold alert 2023-02-03 13:24:28 +01:00
MatteoBiscosi
3f267937b3 Fixes non working score threshold description 2023-02-03 12:45:05 +01:00
Nicolò Maio
378232f808
Update alert score threshold with flows info (#6714) (#7197) 2023-02-03 11:36:19 +01:00
Nicolò Maio
7162045cdd
Add VLAN bidirectional traffic alert (#7126) (#7194)
* Add VLAN bidirectional traffic alert (#7126)

* Add alert description. (#7126)
2023-02-03 10:33:25 +01:00
Alfredo Cardigliano
73af3fa521 Add support for external (REST) host alerts (#7170) 2023-01-26 15:34:54 +01:00
Luca
86f39b3c81 Fixed frequency report 2022-12-21 12:44:55 +01:00
Luca Deri
6ee4c25f81 Improve traffic volume alert 2022-12-20 19:34:15 +01:00
Luca Deri
c42fdd60c9 Added traffic volume alert 2022-12-19 23:17:44 +01:00
MatteoBiscosi
91e4d16f06 Reworked host ports details page 2022-12-01 16:56:11 +01:00
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
Luca Deri
9bdff1b170 Improved custom flow script alert 2022-11-23 17:04:01 +01:00
MatteoBiscosi
2e27e21cc8 Added SNMP flood check (#5905) 2022-11-23 12:14:42 +01:00
Luca Deri
a687b9280a Implemented custom script check 2022-11-23 11:11:45 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
MatteoBiscosi
ef01259354 Fixes flow checks not found 2022-11-21 10:59:55 +01:00
MatteoBiscosi
4bc150e7c9 Removed debug tprint 2022-11-16 11:33:11 +01:00
MatteoBiscosi
b6692f3fea Added TCP Packets issues check (#6899) 2022-11-16 11:28:16 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
MatteoBiscosi
4728baed14 Fixes inconsistent naming in ntopng (#6716) 2022-10-17 12:52:47 +02:00
Alfredo Cardigliano
93dd74d906 Fix telegram notifications (fix #6915) 2022-10-03 12:29:23 +02:00
Luca Deri
7992446d9e Implements Local Hosts BlackList Check #6858 2022-09-09 22:51:12 +02:00
MatteoBiscosi
c330724455 Last fixes to connection/disconnection alert (#6801) 2022-08-08 17:40:33 +02:00
MatteoBiscosi
1775233197 Updated device connection alert (#6801) 2022-08-08 11:37:33 +02:00
MatteoBiscosi
d6471d8dac Added device connection/disconnection alert (#6801) 2022-08-05 10:46:18 +02:00
MatteoBiscosi
3db8cc6cc8 Added check when SNMP traffic changes (#6144) 2022-07-20 12:42:41 +02:00
MatteoBiscosi
7f49e1cb04 Added SNMP interface error alert (#6747) 2022-07-15 17:11:14 +02:00
MatteoBiscosi
3681ca34dc Added ndpi http suspicious content alert mapping 2022-07-15 11:40:20 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Alfredo Cardigliano
df2829d409 Improve iec_invalid_transition format function (#6682) 2022-06-10 16:17:08 +02:00
MatteoBiscosi
b7a61835ba Fixes dns large packets alert incorrectly triggered (#6674) 2022-06-10 10:34:03 +02:00
MatteoBiscosi
ba20719d4a Fixes suspicious dga domain url not formatted 2022-06-09 18:19:03 +02:00
MatteoBiscosi
9622209308 Minor fixes to alerts 2022-06-09 18:12:04 +02:00
MatteoBiscosi
8214173ecd Various changes to alerts (#6675) 2022-06-09 12:26:25 +02:00
MatteoBiscosi
4d037e911b Possible fix for #6670 2022-06-08 17:59:10 +02:00
Luca Deri
9d364c69b4 Fixed TCP with no answer alert definition 2022-06-07 13:11:35 +02:00