Commit graph

8236 commits

Author SHA1 Message Date
MatteoBiscosi
e8b63b76f2 Possibly fixes issue #6677 2022-06-09 11:52:15 +02:00
Alfredo Cardigliano
8ddf0e6998 Store cli/srv location in alerts 2022-06-09 11:27:41 +02:00
MatteoBiscosi
ad23d309ee Sliced application guessed label 2022-06-09 11:19:57 +02:00
Alfredo Cardigliano
f633292e83 Add cli/srv location to flow alerts 2022-06-09 10:40:33 +02:00
Luca Deri
fee5ae79c0 Fixes #6672 2022-06-09 08:28:43 +02:00
MatteoBiscosi
4d037e911b Possible fix for #6670 2022-06-08 17:59:10 +02:00
MatteoBiscosi
2885659195 Added traffic direction and remove cli and srv location (#6665) 2022-06-08 13:44:23 +02:00
MatteoBiscosi
021086e44f Added dpi and guessed badge to flow list and details 2022-06-08 10:51:19 +02:00
MatteoBiscosi
4b7edebc71 Added confidence filter to alerts 2022-06-07 18:40:02 +02:00
MatteoBiscosi
69b9e6337e Removed debug print 2022-06-07 18:01:15 +02:00
MatteoBiscosi
b40d26f2e8 Changed confidence from string to number 2022-06-07 17:59:42 +02:00
MatteoBiscosi
9bdded81e8 Added confidence filter 2022-06-07 13:33:27 +02:00
Luca Deri
9d364c69b4 Fixed TCP with no answer alert definition 2022-06-07 13:11:35 +02:00
MatteoBiscosi
8b00fd67a9 Added confidence to historical Flows 2022-06-07 13:01:38 +02:00
Alfredo Cardigliano
81af2b6707 Fix reported maintenance when expired 2022-06-07 10:11:47 +02:00
MatteoBiscosi
68671222bd Added DHCP starvation alert (#6659) 2022-06-06 17:39:12 +02:00
MatteoBiscosi
8b60f05b14 Added vlans to flow details (#6663 and #6662) 2022-06-06 10:20:37 +02:00
MatteoBiscosi
07f3985a8a Added score to alert message 2022-06-01 11:31:02 +02:00
Luca Deri
a5592c8d0c Cosmetic fix 2022-06-01 11:16:17 +02:00
Luca Deri
3564a0faa0 Added flowRisk mapping 2022-06-01 11:12:10 +02:00
MatteoBiscosi
0006f0683f Updated ndpi flow risk info description 2022-06-01 11:10:19 +02:00
MatteoBiscosi
5e43b73059 Added check for flow risk info not nil 2022-06-01 10:49:10 +02:00
MatteoBiscosi
3509b3b74b Added dns fragmented alert 2022-05-31 18:34:22 +02:00
MatteoBiscosi
ad3ada6826 Added flow risk info to alert description 2022-05-31 17:16:12 +02:00
MatteoBiscosi
167cf6484a Updated ndpi flow risk alerts 2022-05-31 17:15:21 +02:00
MatteoBiscosi
91c9b5d04d Moved host mac reassociation alert 2022-05-31 11:31:42 +02:00
Alfredo Cardigliano
4fe46f0e6d Support match on 'all' alert for alert exclusion 2022-05-31 11:31:30 +02:00
Luca Deri
8e5cc88c8d Warning fix for #6578 2022-05-30 23:04:18 +02:00
Alfredo Cardigliano
a73d596503 Fix lookup for 'all' alert type exlusion 2022-05-30 19:04:16 +02:00
MatteoBiscosi
e4f5fae4e7 Removed empty protocol info 2022-05-30 18:05:55 +02:00
MatteoBiscosi
3867b03978 Added protocol information dumped even with no alerts (#6649) 2022-05-30 17:54:16 +02:00
MatteoBiscosi
44dc90f30c Generalized clickhouse json search 2022-05-30 16:50:05 +02:00
MatteoBiscosi
0b2589f616 Added error code filter to historical flow (#6610) 2022-05-30 15:22:45 +02:00
MatteoBiscosi
5f686624ab Added Error code filter to alerts (#6610) 2022-05-30 15:22:45 +02:00
Alfredo Cardigliano
f6cb982355 Fix alert_store housekeeping 2022-05-30 11:43:18 +02:00
Alfredo Cardigliano
21530068a9 Add get_table_name / get_write_table_name to alert store 2022-05-30 11:25:32 +02:00
MatteoBiscosi
503f461b4a Fixed url in http flows (#6626) 2022-05-30 10:47:02 +02:00
Alfredo Cardigliano
502f4cd106 Delete alerts matching domain when adding exception 2022-05-27 16:50:25 +02:00
MatteoBiscosi
e2ad021161 Fixes external link (#6626) 2022-05-27 16:23:26 +02:00
Alfredo Cardigliano
32a520636b List exclusions for domains/certificates 2022-05-27 16:11:59 +02:00
Alfredo Cardigliano
83b3ae8bbc Add/remove domain/certificate exceptions 2022-05-27 15:32:50 +02:00
MatteoBiscosi
ee96f77bac Partially fixes external link prot in ntopng (#6626) 2022-05-27 13:04:59 +02:00
Alfredo Cardigliano
f7cf547a65 Rework alert_exclusions API 2022-05-27 12:55:30 +02:00
MatteoBiscosi
e9147aa37d Implemented connection failed alert (#6622) 2022-05-27 10:45:25 +02:00
Alfredo Cardigliano
957e0d777c Code cleanuip 2022-05-27 10:09:28 +02:00
Alfredo Cardigliano
ee7ef67ef7 Update preset 2022-05-27 09:19:25 +02:00
Luca Deri
6fb503ea75 Added sanity check for invalid recipient/endpoint configuration 2022-05-26 19:18:25 +02:00
Alfredo Cardigliano
7c2be78a36 Add alert_domain / alert_certificate 2022-05-26 17:57:53 +02:00
Alfredo Cardigliano
94b842284d Add safety check in flow_alert_store:insert with clickhouse 2022-05-26 16:34:13 +02:00
Alfredo Cardigliano
98ba752369 Move edit/check/filter.lua to add/alert/exclusion.lua 2022-05-26 15:07:34 +02:00