Commit graph

129 commits

Author SHA1 Message Date
Luca Deri
a31c59efb6 Updated ntop category lists URLs 2019-10-20 19:02:28 +02:00
Luca Deri
657e673af3 Changed defaults 2019-10-18 17:22:12 +02:00
Simone Mainardi
c68b9af4af Stops lists load during shutdown 2019-10-18 14:46:02 +02:00
Luca Deri
f006b7304d Updated black lists with the ntop meltdown 2019-10-18 13:53:48 +02:00
emanuele-f
c6668f05c1 Remove Nooder Networks list as no more available 2019-09-17 15:38:18 +02:00
emanuele-f
91222ada6b Add Nooder Networks blacklist 2019-09-09 16:17:52 +02:00
emanuele-f
8e6cd5962a Fix blacklisted host alerts not generated when reading from PCAP dump 2019-09-03 17:50:08 +02:00
emanuele-f
b66b71fd7e Implement alert on JA3 malicious signatures
Closes #2788
2019-08-28 18:33:13 +02:00
emanuele-f
2814a94077 Report curl error while a list download fails
Fixes #2777
2019-08-23 09:52:58 +02:00
Simone Mainardi
061eb632a6 Initial implementation of the icinga2 checker plugin 2019-08-22 17:16:14 +02:00
emanuele-f
c183a577be Alerts API cleanup and JSON migration 2019-07-29 15:17:22 +02:00
emanuele-f
2df194a282 Implement alert release 2019-06-28 15:06:39 +02:00
emanuele-f
a9d3c78587 Alerts changes
NOTE: database schema changed. Existing alerts will be lost.

- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
emanuele-f
bcf1d9c123 Add ad lists 2019-04-05 12:41:04 +02:00
emanuele-f
c00478f30f Improve "hosts" lists support and add MalwareDomainList 2019-03-18 12:52:21 +01:00
emanuele-f
405841431c Add Custom Lists download alert and handle hourly download retry
Closes #2410
2019-02-21 01:07:22 +01:00
emanuele-f
3d8e20bf5f Extend list download timeout to 1 minute 2019-02-18 12:16:08 +01:00
emanuele-f
6879dc6c7d Extend lists download timeout and show error messages 2019-02-15 10:26:09 +01:00
emanuele-f
b1cf5c0fcd Category lists improvements 2019-02-13 10:33:13 +01:00
emanuele-f
2525b82ca4 Update blacklisted hosts when lists are reloaded 2019-02-12 11:00:04 +01:00
emanuele-f
62e2c67672 Fix issue when adding new builtin category lists 2019-02-11 19:33:14 +01:00
emanuele-f
67f212b866 Add more categories lists 2019-02-11 19:33:14 +01:00
emanuele-f
1556956fec Fix lists status during first initialization 2019-02-11 16:18:06 +01:00
emanuele-f
6bbb828ead Implement Category Lists editor to manage ip/domain lists 2019-02-11 15:47:17 +01:00
emanuele-f
4525350096 Change default lists update time 2019-02-08 19:16:38 +01:00
emanuele-f
7e0117fd12 Initial work for category lists customization 2019-02-08 19:14:57 +01:00
Alfredo Cardigliano
abc27f2953 Implements Handle whitelists in custom categories #2171 2018-12-11 11:47:19 +01:00
emanuele-f
aa1ead94c4 Add Customized Categories editor
Also unify the blacklist category handler to use the nDPI API
2018-10-10 18:41:47 +02:00
emanuele-f
89d203883f Add support for custom categories lists
- Extend malware hosts from list
- Read web mining hosts from list and generate alerts
2018-05-10 17:12:53 +02:00