Matteo Biscosi
c214ffca9a
Fixes blacklists timeseries not correctly showing values ( #8817 )
2024-12-09 13:28:55 +01:00
Alfredo Cardigliano
3b0b60c422
Remove JA3 leftovers. Update alert keys. Rename malivious JA3 to malicious Fingerprint.
2024-09-02 18:34:17 +02:00
Nicolo Maio
183d89c216
Fix reset button in blacklists ( #8359 )
2024-05-16 09:42:08 +02:00
Nicolo Maio
2e1b64d760
Add Blacklist reset button ( #8359 )
2024-05-03 15:01:50 +02:00
Luca Deri
5779579a20
Fixes protocol categories and reverts 5b4629f9e5
2024-04-23 12:48:23 +02:00
Luca Deri
6551cd51da
Added check for ignoring private IPs in blacklists
2024-04-04 12:38:39 +02:00
Alfredo Cardigliano
13814d66e7
Check if unable to open list
2024-03-06 09:46:04 +01:00
Matteo Biscosi
06d38b586c
Removed no more used code
2024-02-20 17:32:21 +00:00
Matteo Biscosi
fbed062686
Included lua_trace to requires
2024-02-15 16:31:47 +00:00
Matteo Biscosi
dbf4bf2a2b
Removed useless imports in lua code upping the memory usage
2024-02-15 15:21:40 +00:00
Luca Deri
9c9d06785b
Reworked blacklists reload
2024-02-13 00:16:14 +01:00
Luca Deri
7d6b49fbfb
Added lists_utils.reloadListsNow()
2024-02-11 22:16:45 +01:00
Luca Deri
5202f25383
Indent
2024-02-08 17:13:09 +01:00
Matteo Biscosi
80b5b9fb3c
Added category renaming cleanup at startup
2024-01-31 10:15:13 +00:00
Luca Deri
bb7e60920b
Added check when a category list file is missing from filesystem
2024-01-13 11:35:30 +01:00
Luca Deri
85f29042ec
Reworked behavioural exception handling
2024-01-12 17:13:06 +01:00
Luca Deri
55870e97b9
(C) Update
2024-01-12 11:44:18 +01:00
Nicolo Maio
aa6d712b2a
Add IPsum with the new blacklist format for IP occurrences. ( #8154 )
2024-01-10 12:26:59 +01:00
Luca Deri
3fc883df5b
Fixes blacklist count for #8078
2023-12-07 17:37:56 +01:00
Luca Deri
8d44b7fa87
Reduced memory and trhead usage
...
Added missing HTTP server thread naming
Added --limit-resources to tell ntopng to reduce memory usage (useful for systems with limited resources)
2023-11-30 18:23:28 +01:00
Matteo Biscosi
966969c536
Fixes incorrect check on blacklists
2023-11-20 11:38:56 +00:00
Luca Deri
4f2664e9a8
Fix for the new Stratosphere IPS format
2023-11-02 14:30:24 +01:00
Alfredo Cardigliano
8f05378caf
Change message level for empty lists to avoid breaking tests
2023-10-27 09:58:38 +02:00
Matteo Biscosi
8a8420e99e
Fixes ntop.isshutdown function not exists
2023-10-26 13:54:29 +00:00
Matteo Biscosi
8ee13833ca
Fixes blacklists num_hits missing
2023-10-03 09:08:28 +00:00
Luca
43132f5889
Implemented blacklist stats
2023-10-03 08:50:42 +02:00
Luca Deri
2416b7b904
Changed key path to avoid polluting the configuration with stats
2023-04-27 17:45:25 +02:00
Nicolò Maio
1a5ead7dbe
Update category check. ( #7240 ) ( #7253 )
...
* Update category check. (#7240 )
* Fix btn active colour. (#7246 )
2023-02-22 18:41:10 +01:00
Luca
c2b81fdaa3
Increased MAX_TOTAL_DOMAIN_RULES to 200000
...
Implements #7241
2023-02-22 16:14:51 +01:00
Luca Deri
6bd3b75fc4
Added fix for handling invalid host formats in lists (those with :)
2022-12-16 22:02:59 +01:00
Alfredo Cardigliano
5aedbf96d3
Log bad IPs in lists using a normal level instead of warning
2022-11-18 09:09:18 +01:00
Luca Deri
6f2096d1cc
timeseries dump changes for introducing custom callback
2022-09-28 23:49:13 +02:00
MatteoBiscosi
bf8fba8cf0
Removed no more used require
2022-09-13 17:57:40 +02:00
Luca Deri
7992446d9e
Implements Local Hosts BlackList Check #6858
2022-09-09 22:51:12 +02:00
Luca Deri
704d4c31fe
Fixed typo
2022-08-16 18:00:22 +02:00
Luca Deri
ac90e492a0
Added Stratosphere Labs Blacklist support
2022-08-16 17:56:24 +02:00
Alfredo Cardigliano
db99adaebe
Set a dummy list name __gui__ for categories configured via GUI
2022-07-18 18:08:34 +02:00
Alfredo Cardigliano
fb8e748679
Handle ndpi failures loading host lists. Print failing entries
2022-07-18 15:23:45 +02:00
Luca
5e8769b1b5
Reworked builtin lists
...
- they are now defined in httpdocs/misc/lists in JSON formt
- built-in lists (ntop maintained) are stored in httpdocs/misc/lists/nultin
- custom lists go into httpdocs/misc/lists/custom
2022-07-11 19:18:16 +02:00
MatteoBiscosi
ffa48647ef
Added ThreatFox malware list ( #6341 )
2022-05-20 17:54:21 +02:00
MatteoBiscosi
b2094f32eb
Fixes nil name given to loading category
2022-05-06 09:56:29 +02:00
MatteoBiscosi
71cb504bac
Added check to empty category list
2022-05-04 22:11:45 +02:00
Luca Deri
4397fae2e3
Added nDPI custom category file for IP-based categories
2022-04-26 14:44:03 +02:00
Luca Deri
f8c06f82f5
Removed firehol level 1 as it puts in the blacklist private and bogon addresses
2022-03-06 18:43:05 +01:00
Luca Deri
14b68e2568
Updated the malware/domain lists with new entries from abuse.ch and firehol
2022-03-02 12:40:35 +01:00
Alfredo Cardigliano
c8f879ee0c
Add offline check setting up lists
2022-02-18 15:53:28 +01:00
Luca Deri
47b04d557e
Disabled JA3 checkas it leads to false positivies
2022-01-20 22:24:48 +01:00
Alfredo Cardigliano
257ece18c0
Copyright update (Lua)
2022-01-03 09:42:33 +01:00
Luca Deri
b8206953a4
Feodo Tracker Botnet C2 IP Blocklist is not reloaded 4 times/day
2021-12-02 14:42:20 +01:00
Luca Deri
f98c2abba7
Disabling 'Snort IP Block List' download by default
2021-10-21 08:29:36 +02:00