Commit graph

143 commits

Author SHA1 Message Date
Matteo Biscosi
64b603d855 Fixes slow periodic activities failing in case of empty string 2024-02-17 09:35:53 +00:00
Matteo Biscosi
952fa6e995 Fixes missing functions 2024-02-17 09:31:51 +00:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
Alfredo Cardigliano
8ea3d4bb59 Move connection_failed check definition to pro 2024-01-08 17:28:32 +01:00
Alfredo Cardigliano
6098dc87b0 Fix discovery alerts (#8132) 2023-12-27 15:58:08 +01:00
Matteo Biscosi
ccc7382dd0 Fixes dropped alert not working 2023-12-01 09:40:24 +00:00
Alfredo Cardigliano
e8f10f0795 Add Alert:set_category for host/flow lua alerts with no check definition in lua 2023-11-28 12:30:53 +01:00
Matteo Biscosi
ed4ab2836f Added system alert in case of ntopng failure (#8040) 2023-11-22 10:22:22 +00:00
Matteo Biscosi
7b66ca5f6f Moved alert from critical to emergency 2023-11-21 11:04:47 +00:00
Matteo Biscosi
f9a55743b6 Added malware host contacted check 2023-10-18 10:40:54 +00:00
Matteo Biscosi
3ff83d802f Fixes possible exploit alert name 2023-08-22 15:44:17 +00:00
Alfredo Cardigliano
2ff83bcdc3 Add check for periodic scripts changing the interface 2023-07-13 16:14:10 +02:00
Alfredo Cardigliano
bc74c9d1df Improve failure messages 2023-07-13 12:39:57 +02:00
Alfredo Cardigliano
b8801431b8 Script review 2023-05-22 16:26:38 +02:00
Luca Deri
96e10b12a5 Added stub for RareDestination check/alert implementation #6416 and #6417 2023-03-22 15:11:53 +01:00
Matteo Biscosi
76267099a2 Fixes alerts inconsistent alerts and checks names (#7314) 2023-03-14 15:36:07 +00:00
Matteo Biscosi
fc82eff56b Updated alert to NDPI_NUMERIC_IP_HOST 2023-03-02 15:18:40 +00:00
Alfredo Cardigliano
b15bd6c965 Fix message 2023-02-16 17:47:56 +01:00
Alfredo Cardigliano
21f75ed0af Add failure reason msg 2023-02-16 16:50:20 +01:00
Alfredo Cardigliano
669a4a484a Add syslog handler for nbox 2023-02-16 16:35:47 +01:00
Matteo Biscosi
7e6bdde2bd Added support to multi_threshold template for every hook 2023-02-14 11:56:25 +01:00
Nicolò Maio
6d2ee3d599
Add network issue alert (#6691) (#7228)
* Add network issues alert. (#6691)

* Fix alert subtype. (#6691)

* Update default values. (#6691)

* Minor fix. (#6691)
2023-02-14 05:40:06 -05:00
MatteoBiscosi
ddb55b4d7e Updated ndpi alerts (#7200) 2023-02-09 18:46:37 +01:00
Nicolò Maio
3d741f0e75
Fix title discrepancy on known proto on non std port alert. (#7217) 2023-02-08 12:06:31 +01:00
Nicolò Maio
ddd3e4318e
Fix VLANs form. (#7126) (#7207)
* Fix VLANs form. (#7126)

* Fix VLAN lower case. (#7126)
2023-02-06 14:47:20 +00:00
Nicolò Maio
7162045cdd
Add VLAN bidirectional traffic alert (#7126) (#7194)
* Add VLAN bidirectional traffic alert (#7126)

* Add alert description. (#7126)
2023-02-03 10:33:25 +01:00
Alfredo Cardigliano
73af3fa521 Add support for external (REST) host alerts (#7170) 2023-01-26 15:34:54 +01:00
MatteoBiscosi
1c5fbe7df3 Fixes offline option not working 2023-01-13 18:31:07 +01:00
MatteoBiscosi
cde463a324 Added RST scan alert (#5903) 2022-11-30 17:01:49 +01:00
MatteoBiscosi
39aaaf58da Moved the TCP packets issues alert to default disabled 2022-11-28 12:16:12 +01:00
Luca Deri
71fbbdbf58 Implemented custom host script (WIP) 2022-11-24 12:34:14 +01:00
MatteoBiscosi
71bb0efbc2 Added DNS flood alert (#5905) 2022-11-22 11:13:02 +01:00
MatteoBiscosi
372c54294e Disabled check by default 2022-11-21 16:04:17 +01:00
Luca Deri
80db634bfe Implemented skeleton of CustomFlowLuaScriptAlert check 2022-11-19 20:31:24 +01:00
MatteoBiscosi
b6692f3fea Added TCP Packets issues check (#6899) 2022-11-16 11:28:16 +01:00
MatteoBiscosi
db32c0c67a Moved tcp issues generci alert 2022-11-11 12:41:42 +01:00
MatteoBiscosi
4ee36c721f Removed still not implemented check (#6977) 2022-11-11 12:26:34 +01:00
MatteoBiscosi
7bfc2fdde4 Fixes Flow risks not defined (#6939) 2022-10-21 13:37:08 +02:00
MatteoBiscosi
eda4cfb088 Added severity to ntopng checks table 2022-10-20 10:34:37 +02:00
MatteoBiscosi
692ae0bfcc Added critical and emergency status to alerts 2022-10-19 10:18:51 +02:00
MatteoBiscosi
4728baed14 Fixes inconsistent naming in ntopng (#6716) 2022-10-17 12:52:47 +02:00
MatteoBiscosi
533af346ff Re-enabled ip/mac reassignment alert (#6825) 2022-08-24 11:49:20 +02:00
MatteoBiscosi
1775233197 Updated device connection alert (#6801) 2022-08-08 11:37:33 +02:00
MatteoBiscosi
d6471d8dac Added device connection/disconnection alert (#6801) 2022-08-05 10:46:18 +02:00
MatteoBiscosi
687d508daa Fixes IEC alerts triggered even when disabled (#6682) 2022-07-19 11:14:25 +02:00
MatteoBiscosi
3681ca34dc Added ndpi http suspicious content alert mapping 2022-07-15 11:40:20 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Alfredo Cardigliano
69f639c16b Fix FQDN validation in unexpected dns check (fix #4869) 2022-06-17 13:13:54 +02:00
MatteoBiscosi
f341dff696 Removed duplicated require 2022-06-13 19:25:43 +02:00