698 commits

Author	SHA1	Message	Date
emanuele-f	c47b4f2bcd	Add more strict check on the alert source	2017-05-26 19:25:33 +02:00
Simone Mainardi	f995cb1c8d	Win fix for alert table visualization	2017-05-24 17:20:14 +02:00
emanuele-f	ef0910c363	Fix alerts counter not being updated on flushAlerts. ... Fix delete single alert when no tab is selected.	2017-05-24 12:01:29 +02:00
emanuele-f	a97fd53a6f	Add change pool action in pool members view	2017-05-22 19:47:03 +02:00
Simone Mainardi	1e4b0636ed	Windows nagios fix	2017-05-22 11:52:18 +02:00
emanuele-f	ef10ba3540	Add current zmq header version in ExportInterface	2017-05-20 12:36:19 +02:00
emanuele-f	1b361e2a65	Fix alerts release on ntopng restart. ... When a counter wrap is detected (e.g. on ntopng restart) or previous data is missing, an empty structure is passed to the thresholds check function.	2017-05-18 15:19:00 +02:00
emanuele-f	16bb7c174b	Do not pass path in file name	2017-05-18 13:14:24 +02:00
emanuele-f	0e66f642a0	Fix alerts counter bug when alerts are disabled and re-enabled. ... Steps to reproduce the original issue: 1) alerts are enabled and counter is positive 2) the user disables the alerts from preferences 3) ntopng is stopped, then restarted 4) the user enables the alerts from preferences, but num_alerts_engaged was 0 5) a release of an alert now makes the counter wrap	2017-05-17 11:47:10 +02:00
emanuele-f	2d1a0a518d	Little fixes	2017-05-16 14:46:45 +02:00
emanuele-f	3f80dbaa32	Do not capitalize metric in threshold cross messages	2017-05-12 12:41:30 +02:00
Takayuki Onodera	6a400c72f4	Localize some pages for interface	2017-05-12 16:55:28 +09:00
emanuele-f	3496fb51c0	Add button to flush all alerts data	2017-05-08 23:31:46 +02:00
emanuele-f	83f18227f7	Threshold configuration page improvements	2017-05-08 20:55:52 +02:00
emanuele-f	1557cf5a98	Improve detected alerts page	2017-05-08 16:55:05 +02:00
Simone Mainardi	ef9f6b9659	Ensures engaged alerts counters consistency with multiple interfaces	2017-05-05 12:24:07 +02:00
emanuele-f	c0083bde08	Use getResolvedAddress to get alert host information	2017-05-04 21:47:06 +02:00
emanuele-f	9097333cf1	Always show IPv6 suffix in IPv6 host names	2017-05-04 21:28:11 +02:00
emanuele-f	1e4068b798	Fix some visualization problems	2017-05-04 20:07:52 +02:00
emanuele-f	10be6c2190	Fix host alert configuration issues	2017-05-04 16:30:39 +02:00
Simone Mainardi	547e623273	Removed debug prints	2017-05-03 17:35:32 +02:00
Simone Mainardi	04ae6a5973	Reworks nagios alerts	2017-05-03 17:32:46 +02:00
emanuele-f	be3d69a435	Fix missing operator	2017-05-03 15:14:25 +02:00
Simone Mainardi	b47b5e1300	Minor fix	2017-05-03 14:41:53 +02:00
emanuele-f	d0d17cef76	Do not allow to delete engaged alerts. ... This is necessary to avoid inconstent state caused in hosts and interfaces counters.	2017-05-03 14:28:10 +02:00
Simone Mainardi	d723fd505d	Improves periodic alerts cleanup	2017-05-03 14:27:00 +02:00
Simone Mainardi	9c0f7499e7	Reduces redis traffic for alerts checks	2017-05-03 13:23:28 +02:00
Simone Mainardi	0586a814ea	Optimizes oldest alerts cleanup	2017-05-03 12:41:36 +02:00
Simone Mainardi	4eeae18cef	Adds alert notes and descriptions	2017-05-02 22:13:43 +02:00
Simone Mainardi	d85302d80f	Fixes host activity alert	2017-05-02 17:19:06 +02:00
emanuele-f	a5e528047d	Use a single redis key to read all host anomalies configuration	2017-05-02 15:38:39 +02:00
emanuele-f	21594b834d	Separate syn/flow attacker and victim alert thresholds	2017-04-30 20:07:58 +02:00
Emanuele Faranda	8b8974e56c	Alerts improvements (#1204) ... * Implement flow flood alert * Remove alerts general settings * Implement global threshold alerts for hosts, networks and interfaces * Implement global anomaly alert configuration, lua side * Make the global thresholds not bound to the interface * Implement global anomaly alert configuration, C side * Make the engaged alerts cache per interface to avoid conflics	2017-04-29 12:19:49 +02:00
emanuele-f	a53ec8b131	Force the release of expired alerts	2017-04-28 16:30:23 +02:00
emanuele-f	cc3191bc4f	Remove flapping-checking code in alert counter	2017-04-27 11:13:40 +02:00
emanuele-f	8b72607c38	Migrate interface alerts to lua logic	2017-04-27 11:07:04 +02:00
emanuele-f	63402a848d	Invalidate cache on alerts delete	2017-04-26 18:04:11 +02:00
emanuele-f	22d9d3ad2c	Fix single alert delete	2017-04-26 17:10:05 +02:00
emanuele-f	5e663675f2	Fix flows shown in interface alert configuration	2017-04-26 16:16:12 +02:00
Simone Mainardi	57b592c905	Fixes invalid use of alert engine	2017-04-26 16:09:55 +02:00
emanuele-f	1545dcb73e	Host Flows alert becomes a threshold alert	2017-04-26 15:50:54 +02:00
emanuele-f	4afe4328eb	Enable SYN flood/victim alert generation	2017-04-26 11:23:23 +02:00
emanuele-f	bae63434c1	Implement engaged alerts cache	2017-04-24 17:24:31 +02:00
Simone Mainardi	7b13e2e6a1	Adds an engine id to the engaged alerts	2017-04-24 12:22:47 +02:00
emanuele-f	43b3a7f078	Fix AlertCounter based host alerts	2017-04-22 19:48:09 +02:00
emanuele-f	04e01c24b0	Re-enable alerts generation. Use structured format functions.	2017-04-22 18:58:32 +02:00
emanuele-f	bfd2759eeb	Move global status to local status	2017-04-22 17:09:23 +02:00
emanuele-f	a4a7f0d12f	Restructure code to use the upcoming alerts cache	2017-04-22 15:20:43 +02:00
emanuele-f	5892319880	Update in-memory hosts alert configuration when the configuration changes ... Also fixes invalid redis key used to check host alerts trigger	2017-04-20 19:09:52 +02:00
Simone Mainardi	9fb24219e4	Passes host detected anomalies to lua	2017-04-20 18:50:05 +02:00