Commit graph

163 commits

Author SHA1 Message Date
Simone Mainardi
bb95e65db1 Disables unavailable metrics for interfaces with sampled traffic
Fixes #5471
2021-07-09 16:40:31 +02:00
MatteoBiscosi
9d2139f453 Renamed behavior timeseries due to the change from counter to gauge ts 2021-07-05 15:45:58 +02:00
MatteoBiscosi
545d4b8f29 Fixes elephant flow error and copy constructor 2021-06-29 22:10:45 +02:00
Simone Mainardi
76fd315d1b Refactors user_scripts into checks (lua) 2021-06-16 18:02:22 +02:00
MatteoBiscosi
d78b0a15c3 Removed debug timeseries print 2021-06-15 12:35:57 +02:00
MatteoBiscosi
131888ecfc Changed behavior counter dump period 2021-06-15 12:25:48 +02:00
Matteo Biscosi
9be0364102 Fixed partially timeseries not showing 2021-06-11 16:49:46 +02:00
Matteo Biscosi
f12934ef9e Implements Traffic TX/RX and Score Behavior analysis (#5473) (#5472) 2021-06-10 17:31:29 +02:00
Matteo Biscosi
4b31a0d21c Added score timeseries for vlan, as, subnet and country
Implements #5317
2021-05-14 14:58:18 +02:00
Simone Mainardi
6ae7664de0 Fixes missing interface and host score timeseries
Fixes #5300
2021-05-12 17:17:57 +02:00
Alfredo Cardigliano
92b4ae4828 Alerts DB housekeeping 2021-04-29 19:31:49 +02:00
Matteo Biscosi
938106a4c0 Fixes blacklisted flows rrd timeserie 2021-04-20 09:31:49 +02:00
Luca Deri
76afff76d1 Created timeseries for blacklisted hosts 2021-04-18 15:28:31 +02:00
Luca Deri
19d6b74457 Host anomalies code cleanup and timeseries dump 2021-04-10 10:38:26 +02:00
Matteo Biscosi
53b27a023c Added interface anomalies timeseries 2021-03-29 19:35:30 +02:00
Matteo Biscosi
60e70f003c Fixes host behaviour alert 2021-03-23 18:42:33 +01:00
Luca Deri
179357856c Cosmetic changes 2021-03-23 18:13:27 +01:00
Luca Deri
b7aadcc740 Reworked behavioural counters
Protocol changes due to latest nDPI changes
2021-03-23 12:55:06 +01:00
Luca Deri
e10a3a3135 Enhanced anomly debug messages
Cleaned up brodcast domain code
2021-03-18 15:46:58 +01:00
Matteo Biscosi
8a5bc73739
Removed debug prints 2021-03-17 11:34:44 +01:00
Luca Deri
c1cba80a0b TS behavioral debugging can now be enabled via redis 2021-03-16 21:21:24 +01:00
Matteo Biscosi
3f46194e31 Implements unexpected behaviour alerts 2021-03-16 19:52:09 +01:00
Matteo Biscosi
1466e466d7 Fixes host anomalies wrongly triggered 2021-03-15 20:05:52 +01:00
Matteo Biscosi
f3aa90f131 Implements rrd host anomalies 2021-03-15 15:42:11 +01:00
Luca Deri
d0a0c554fc Improved behavioural charts 2021-03-14 16:34:47 +01:00
Luca Deri
8a90e09b7a Fixed behavioural scores 2021-03-14 13:53:23 +01:00
Matteo Biscosi
26af27d6a9 Implements active flow and host score behaviour 2021-03-13 00:31:01 +01:00
Matteo Biscosi
482f7e07ad Fixed ts_5min nil value 2021-03-12 17:05:26 +01:00
Luca Deri
c7c7e11d3d Added debug tracings 2021-03-12 16:41:13 +01:00
Matteo Biscosi
3b5a5e2507 Implemented DES and added to LocalHostStats 2021-03-12 16:21:41 +01:00
Matteo Biscosi
7102c2814b Removed debug prints 2021-03-01 12:14:12 +01:00
Matteo Biscosi
e241227342 Added server/client name and community ID to flow alerts 2021-03-01 12:14:12 +01:00
Luca Deri
ed938dc6c1 Fixed DNS report 2021-02-28 13:00:10 +01:00
Luca Deri
5d136ac51c Name fix 2021-02-26 12:26:33 +01:00
Matteo Biscosi
56a3cb9875 Added contacts behaviour rrd timeseries 2021-02-26 11:40:54 +01:00
Matteo Biscosi
dbfdec34fe Implements Local Host behaviour analysis and it's alert
Alert in case the host has an unexpected behaviour
2021-02-25 12:04:05 +01:00
Matteo Biscosi
fe9e3a2ea8 Removed sort column from OS distribution 2021-02-21 17:23:49 +01:00
Matteo Biscosi
f75331d2b5 Implements OS distribution
Implements #2874
2021-02-21 17:19:15 +01:00
Simone Mainardi
537bc5210a Adds Layer-7 Applications to Exporters (backend)
Addresses #4976
2021-02-04 11:01:22 +01:00
Matteo Biscosi
52a396ec88 Implemented ASN traffic rcvd/sent graph
Implements #1786
2021-01-21 11:44:06 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
a0056ef2b7 Unifies alerted and misbehaving flows on hosts
Fixes #4596
2020-10-19 10:19:22 +02:00
Simone Mainardi
4e96ae7e26 Refactors user_scripts method names 2020-07-29 15:17:31 +02:00
Alfredo Cardigliano
aa41081c38 Add check on nil stats 2020-07-21 11:47:58 +02:00
Alfredo Cardigliano
c6cf8e418e Add timeseries for host and interface DSCP classes 2020-07-21 10:08:08 +02:00
Simone Mainardi
916c55f0d7 Reworks pool_details.lua with the new lua implementation 2020-07-16 17:51:40 +02:00
emanuele-f
aedf348534 Move interface timeseries prefs to the global config
Addresses #3979
2020-05-27 13:48:27 +02:00
emanuele-f
ec51278c20 Cleanup of HostStats 2020-05-20 17:05:30 +02:00
emanuele-f
340462ad73 Cleanup of the timeseries ring and NetworkInterfaceTsPoint 2020-05-20 15:18:03 +02:00
Simone Mainardi
e487427aab Refactors alert_utils and enterprise_alert_utils
Addresses #3720

Alerts Refactor: alert_utils as module

Alerts Refactor: notify_ntopng_start and notify_ntopng_stop

Alerts Refactor: processAlertNotifications

Alerts Refactor: checkStoreAlertsFromC

Alerts Refactor: formatAlertNotification

Alerts Refactor: notification_timestamp_rev

Alerts Refactor: formatAlertMessage

Alerts Refactor: getConfigsetAlertLink

Alerts Refactor: alertNotificationActionToLabel

Alerts Refactor: flushAlertsData

Alerts Refactor: disableAlertsGeneration

Alerts Refactor: newAlertsWorkingStatus and other

Alerts Refactor: drawAlerts

Alerts Refactor: drawAlertTables

Alerts Refactor: printAlertTables

Alerts Refactor: checkDeleteStoredAlerts

Alerts Refactor: getUnpagedAlertOptions

Alerts Refactor: getTabParameters

Alerts Refactor: getAlerts

Alerts Refactor: getNumAlerts

Alerts Refactor: performAlertsQuery

Alerts Refactor: sec2granularity

Alerts Refactor: granularity2id

Alerts Refactor: granularity2sec

Alerts Refactor: alertEngineLabel

Alerts Refactor: alertEngine

Alerts Refactor: alertEngineRaw

Alerts Refactor: alertTypeDescription

Alerts Refactor: alertType

Alerts Refactor: alertTypeLabel

Alerts Refactor: alertTypeRaw

Alerts Refactor: alertSeverity

Alerts Refactor: alertSeverityLabel

Alerts Refactor: alertSeverityRaw

Alerts Refactor: get_make_room_keys

Alerts Refactor: enterprise_alert_utils
2020-04-10 14:03:20 +02:00