Commit graph

1837 commits

Author SHA1 Message Date
emanuele-f
ebc5251a7f Use fully qualified name for retention policy based queries 2019-04-17 15:31:56 +02:00
Francesco Staccini
1d9b35be42 ARP Map (#2540)
* arp matrix graph and fix

* bug fix

* graph fix

* bug fix

* tests on arp graph

* merged heatmap.js and map.js

* graph dinamic resize

* minor fix

* graph dinamic width

* graph performance improvement

* clean code

* fix manual refresh

* message for empty graph

* clean code

* more clean

* update arpMap and host details

* migrate to v4.min version of d3.js
2019-04-17 13:23:10 +02:00
emanuele-f
d5d551853c Do not account the Unknown protocol in the Unspecified category
Such protocol should not modified by the used see (78a20a166).

Fix #2536
2019-04-16 17:17:31 +02:00
emanuele-f
53cbcc79c2 Fix timeseries menu selection with inactive entries
Fix #2537
2019-04-16 16:57:20 +02:00
Simone Mainardi
ce5d7d8400 Adds Portuguese/Brazilian localization file
Work Courtesy of Alexandre Giovaneli
2019-04-16 10:11:28 +02:00
emanuele-f
eddcc59d4c Fix possible script failure when protos.txt is not readable 2019-04-12 17:32:46 +02:00
Simone Mainardi
ddd3015db1 Implements alerts mitigation for stored alerts 2019-04-12 16:20:55 +02:00
emanuele-f
0968bb15bd Fix rename error 2019-04-12 10:43:52 +02:00
emanuele-f
fa4330bbfd Implement alert for IP addresses assigned outside the configured DHCP ranges 2019-04-11 17:01:39 +02:00
emanuele-f
14a9d83a30 Move local broadcast domain preference to the interface settings and show warnings
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
emanuele-f
2aeeb63142 Implmenent host total flows timeseries.
"host:flows" data will be dropped in favor of "host:active_flows", which has separated client and server counters

Closes #2528
2019-04-10 18:22:41 +02:00
emanuele-f
21f202ccb2 Implement protos.txt editing via the gui.
Editor is only enabled if the -p option is specified.
Also added an hook in the flow to easily add domain.

Closes #1837
2019-04-10 16:16:39 +02:00
Salvatore Costantino
1768d0b121 Modified ARP time series (#2520) 2019-04-09 15:28:29 +02:00
emanuele-f
acdd80767e Remove getGraphMenuEntries function 2019-04-08 18:36:30 +02:00
Simone Mainardi
db44a554c9 RTP in flow details fixes 2019-04-08 18:28:45 +02:00
Salvatore Costantino
76dded229a Added ICMP ECHO time series (#2518)
* Added ICMP ECHO time series

* added icmp echo time series
2019-04-08 16:10:30 +02:00
Salvatore Costantino
f27f137c09 Added TCP packets time series (#2516) 2019-04-08 15:30:45 +02:00
Salvatore Costantino
dd24d2a932 Removed net unreachable counters (#2517) 2019-04-05 21:32:37 +02:00
Simone Mainardi
d7342798ca Improves SSL certificates mismatch alerts
Implements #2510
2019-04-05 18:21:54 +02:00
Simone Mainardi
b4f849a51d Domain in blacklisted alerts 2019-04-05 18:02:23 +02:00
emanuele-f
387543f8e9 Fix top talkers when mac address is used as LBD hosts ID 2019-04-05 17:49:22 +02:00
Alfredo Cardigliano
a892c825c0 toggle_ids_alerts liny 2019-04-05 15:55:53 +02:00
Simone Mainardi
a85b7cd398 Improves description of blacklisted flow alerts
Implements #2511
2019-04-05 15:40:33 +02:00
emanuele-f
bcf1d9c123 Add ad lists 2019-04-05 12:41:04 +02:00
emanuele-f
68eee30d03 Add support for disabled menu entries 2019-04-05 10:29:08 +02:00
emanuele-f
316ad4a9bd Add temporary fix for host:contacts schema change 2019-04-04 16:52:43 +02:00
emanuele-f
2c2abae146 Improve error message in InfluxDB multiqueries 2019-04-04 16:52:43 +02:00
Alfredo Cardigliano
3f442f28b0 Rendering signature/severity for ids alerts 2019-04-04 16:31:13 +02:00
Alfredo Cardigliano
7ce1150a69 IDS flow alerts notification 2019-04-04 16:03:48 +02:00
Alfredo Cardigliano
96954bdabb new ids alert type and configuration 2019-04-04 11:02:01 +02:00
Salvatore Costantino
3bb830d23e Fix active contacts time series (#2506)
* Fix active contacts time series

* Fix active contacts time series
2019-04-04 09:33:09 +02:00
Simone Mainardi
f827d8c700 Changes to DNS timeseries to show queries and replies together 2019-04-03 19:15:28 +02:00
SalvatoreCostantino
27fcedf9ff Added TCP time series 2019-04-02 16:22:39 +02:00
Salvatore Costantino
a121b6a4f8 Added ARP requests time series (#2496) 2019-04-01 16:11:37 +02:00
Salvatore Costantino
5ec5a8e9c8 Added UDP packets time series (#2488) 2019-04-01 16:10:35 +02:00
Simone Mainardi
5e5ad77cec Implements broadcast domain too large alerts 2019-04-01 14:20:57 +02:00
Simone Mainardi
23c5d92b10 Proper validation of base64-encoded license keys 2019-03-29 20:02:54 +01:00
Salvatore Costantino
c8a95d9476 Added dns time series (#2487) 2019-03-28 19:14:51 +01:00
emanuele-f
ad77797482 Fix flow status formatting when no flowstatus_info is available 2019-03-28 11:59:14 +01:00
Salvatore Costantino
58becaeebe Added host and net unreachable counters (#2483)
* Added host and net unreachable counters

* Added host and net unreachable counters

* Added host and net unreachable counters
2019-03-27 21:44:47 +01:00
emanuele-f
4b2a95ecb4 Add redis flag to debug RRD operations 2019-03-27 15:28:25 +01:00
emanuele-f
4203d8a1c6 Enable influxdb data rollup to speedup queries
Also bind influxdb retention of CQ to the default retention
2019-03-27 12:42:54 +01:00
emanuele-f
dee4685141 Implement batched listSeries to reduce the number of HTTP requests 2019-03-27 10:49:51 +01:00
Alfredo Cardigliano
34509abce7 Safety check in case of no filter 2019-03-27 10:28:41 +01:00
Alfredo Cardigliano
ca2e11bc0b Anomalous -> Misbehaving Flows (fixes #2386) 2019-03-26 19:36:40 +01:00
Simone Mainardi
41383aa51b Revert "Added new time series (#2481)"
This reverts commit 0e785d58f9.
2019-03-26 09:16:15 +01:00
Salvatore Costantino
0e785d58f9 Added new time series (#2481) 2019-03-25 21:29:36 +01:00
Simone Mainardi
3fcb15cda2 Handles TCP flags via nProbe 2019-03-25 20:31:13 +01:00
emanuele-f
021812a238 Add ability to search by network cidr/alias in search box 2019-03-25 17:21:22 +01:00
emanuele-f
074fccb1b3 Use network alias in alerts 2019-03-25 17:01:39 +01:00