Commit graph

4134 commits

Author SHA1 Message Date
Matteo Biscosi
e41fefda67 Added Flow risk column to nindex and new filters to nindex page 2021-04-01 18:20:23 +02:00
Matteo Biscosi
0410ad3bfa Readded mac address to flow details 2021-04-01 15:33:29 +02:00
Matteo Biscosi
1cd7c288e2 Implements trigger alert for TCP flows with no data exchanged
Implements #2801
2021-03-30 15:59:40 +02:00
Matteo Biscosi
6f29186743 Added bytes and packets filter to new nindex table 2021-03-30 12:06:09 +02:00
Matteo Biscosi
53b27a023c Added interface anomalies timeseries 2021-03-29 19:35:30 +02:00
Matteo Biscosi
faa699328e Fixed l7proto filtering not working 2021-03-29 18:55:43 +02:00
Matteo Biscosi
778ba880bf Added support for operators used by nindex new table 2021-03-29 17:03:37 +02:00
gabryon99
5970fdc02f add operators in nindex_stats 2021-03-29 12:56:27 +02:00
Luca Deri
b6849bfc79 Fixed IEC alert generation 2021-03-27 09:45:56 +01:00
Luca Deri
fd26a68a1f Fixed IEC unexpected transition alert formatting 2021-03-27 09:15:24 +01:00
Luca Deri
eaa4cbd1e8 Updated changed URL for snort IP block list 2021-03-27 08:56:11 +01:00
Matteo Biscosi
0c1937786d Implements DGA alarms do not report the domain name
Implements #4725
2021-03-26 18:00:49 +01:00
Luca Deri
7adccefd3f Fixes #5136 2021-03-26 10:34:52 +01:00
Luca Deri
a5348b8823 Require loop check 2021-03-26 09:19:43 +01:00
Luca Deri
69b5b6998b Typo 2021-03-26 09:19:33 +01:00
Simone Mainardi
42de49e692 Fixes attempt to index a nil value (global 'user_scripts') 2021-03-26 08:50:36 +01:00
Simone Mainardi
1a4c8c4655 Fixes too many C levels (limit is 200)
Fixes #5135
2021-03-26 08:23:21 +01:00
Luca Deri
4fd414f06f Avoid multiple initializations 2021-03-25 22:41:05 +01:00
Matteo Biscosi
accef47f24 Fixed max length error in nindex table slice 2021-03-25 18:55:22 +01:00
Matteo Biscosi
c1f0637552 Reviewed host behaviour title 2021-03-25 15:39:13 +01:00
Matteo Biscosi
c985fbf62b Implements new nindex table slice 2021-03-25 11:34:08 +01:00
Simone Mainardi
8f84202a43 Fixes reset of endpoints and endpoint configurations
Fixes #5134
2021-03-25 10:35:16 +01:00
gabryon99
adb3a690e9 removed duplicated length 2021-03-25 10:24:58 +01:00
gabryon99
e993152112 extended rest_utils api for datatable serverSide rendering 2021-03-25 10:24:07 +01:00
Simone Mainardi
822a8b41fb Improves reset of recipients and endpoints 2021-03-25 09:46:28 +01:00
Simone Mainardi
84bbaf40c9 Fixes edit of recipients using endpoint ids 2021-03-25 09:45:40 +01:00
gabryon99
25b9d99cd0 minor improvements on nindex_flows.lua 2021-03-25 09:40:21 +01:00
Simone Mainardi
08f95ee5cb Fix and cleanup defaul alert severities 2021-03-25 09:07:40 +01:00
Luca Deri
b52697a55d Updated (C) 2021-03-24 18:47:50 +01:00
Luca Deri
72598c3dc2 Added missing json require 2021-03-24 18:47:38 +01:00
Luca Deri
d216d5573a Added server side datatable handling 2021-03-24 18:10:35 +01:00
Matteo Biscosi
b7fe7573bc Changed unexpected host behaviour titles 2021-03-24 17:16:59 +01:00
Matteo Biscosi
b176f1098a Added support for Uppercase lvl 4 proto 2021-03-24 15:38:43 +01:00
Matteo Biscosi
78aedbcebe Reworked unexpected host behaviour alert
Implements #5128
2021-03-24 15:38:43 +01:00
Luca Deri
d1d203a479 Fixed missing validation 2021-03-24 15:16:47 +01:00
Alfredo Cardigliano
831ca8b215 Check for empty params 2021-03-24 11:25:07 +01:00
Simone Mainardi
6e97c87768 Fixes engaged alerts lost past shutdown
Fixes #5123
2021-03-24 09:50:37 +01:00
Matteo Biscosi
899f852f8e Renamed unexpected behaviour alert params 2021-03-23 19:19:50 +01:00
Matteo Biscosi
60e70f003c Fixes host behaviour alert 2021-03-23 18:42:33 +01:00
Luca Deri
179357856c Cosmetic changes 2021-03-23 18:13:27 +01:00
Alfredo Cardigliano
b0ad0a5c7b Fix alert certificate before/after time 2021-03-23 17:34:19 +01:00
Simone Mainardi
da943e0dff Reduces the maximum cli/srv score per callback to 128 2021-03-23 14:54:32 +01:00
Matteo Biscosi
bee49df334 Fixes wrongly formatted drops alert description 2021-03-23 13:26:44 +01:00
Luca Deri
b7aadcc740 Reworked behavioural counters
Protocol changes due to latest nDPI changes
2021-03-23 12:55:06 +01:00
gabryon99
13596ea4e0 updated nindex page template 2021-03-23 12:49:48 +01:00
Matteo Biscosi
494ae705ae Fixes script failure, nil value
Implements #5125
2021-03-23 11:53:48 +01:00
gabryon99
6ead87d958 added chips inside range-picker 2021-03-23 11:19:15 +01:00
Matteo Biscosi
cf761cb579 Fixes packet drops alert description 2021-03-23 10:55:35 +01:00
Matteo Biscosi
f88370d88b Fixes invalid zero value reported
Implements #5122
2021-03-23 10:55:35 +01:00
Matteo Biscosi
a79710090d Fixes unexpected host behaviour triggered wrongly 2021-03-23 09:51:21 +01:00