Simone Mainardi
82a01c521a
Computes CPU states every 5 seconds in the system interface
2020-02-27 16:48:08 +01:00
Simone Mainardi
ef06f9e1d3
Refactors system stats in a module system_utils.lua
2020-02-27 12:24:23 +01:00
Simone Mainardi
b8a510cd61
Implements system script to compute CPU states
2020-02-27 12:04:54 +01:00
Simone Mainardi
ef14382915
Fixes nil alert drops label in issues dropdown
2020-02-27 10:51:07 +01:00
Simone Mainardi
91ad5f05cd
Implements CPU states estimator as a system user script
2020-02-26 19:44:24 +01:00
Simone Mainardi
fee595eabf
Caps du -s execution using a timeout to prevent long activities
2020-02-26 16:22:22 +01:00
emanuele-f
a6dab125d5
Improve dropped alerts information
...
- Add informative label
- Add dropped alerts timeseries and chart
- Generate a system alert whenever alerts are dropped on a network interface
- Add a periodic activity warning when some alerts are dropped on that activity
Closes #3025
2020-02-26 16:05:19 +01:00
emanuele-f
bd803e9ce2
Improve slow activity message
2020-02-24 15:35:39 +01:00
Alfredo Cardigliano
dbe07bbfcd
Score computation fix (external alerts)
2020-02-24 12:27:48 +01:00
Simone Mainardi
55d5912729
Moves unused slow_stats_update alert to attic
2020-02-21 14:14:01 +01:00
Simone Mainardi
649baa3a84
Implements system alerts for slow periodic activities
2020-02-21 14:05:55 +01:00
Simone Mainardi
bd46b7268e
Implements system alerts for not executed activities
2020-02-21 14:00:06 +01:00
Simone Mainardi
d1f11c7de7
Implements slow and not executed periodic activity alerts
2020-02-21 13:29:20 +01:00
emanuele-f
8edee160ed
Add missing alert type
2020-02-20 17:09:38 +01:00
emanuele-f
0750d38c05
Label fix
2020-02-19 18:44:42 +01:00
emanuele-f
a6a863d38e
Calculate disk space stats once per hour
2020-02-19 17:03:16 +01:00
emanuele-f
7c534a557c
Add the is_critical_ts flag to force timeseries write
2020-02-19 15:31:36 +01:00
emanuele-f
d1140ec9fd
Avoid timeseries read operations to display the chart icon
...
Now the icon is displayed whenever the timeseries are enabled for the given context
2020-02-19 13:27:20 +01:00
emanuele-f
15898e8dad
Flow dissection code cleanup.
...
The Flow API is now composed of the following methods:
- Flow::setDetectedProtocol to manually set a protocol on the flow
and terminate the dissection
- Flow::processPacket to run the nDPI dissection on the raw packets
- Flow::endProtocolDissection to terminate or give up the dissection
Also fixes the flow sampling rate preference, which was never used.
2020-02-17 17:36:06 +01:00
emanuele-f
58b3d42d22
Set max score on hosts contacting blacklisted hosts
2020-02-17 15:16:01 +01:00
emanuele-f
d339c81e5c
Remove unused version field form the plugins
2020-02-10 11:55:12 +01:00
emanuele-f
130e540667
Disable redis monitoring script in Windows
...
This fixes the "unable to persist data" error
2020-02-10 10:56:43 +01:00
emanuele-f
e3d3d3992f
Replace an existing flow alert if a more critical problem is found
...
Also add the flow score into the database
2020-02-07 19:20:57 +01:00
emanuele-f
13ec0d2f44
Use the flow score to determine the status priority
2020-02-07 19:17:07 +01:00
emanuele-f
96925a7e03
Fix invalid flow.triggerStatus calls
2020-02-06 10:31:22 +01:00
Luca
a4c91fd2bd
Added value check
2020-01-30 18:58:16 +01:00
emanuele-f
4f6788fb58
New page_utils api to handle sidebar subitems selection
2020-01-30 11:53:13 +01:00
emanuele-f
9833a87cbc
Implement alert on InfluxDB error messages
2020-01-28 15:09:24 +01:00
Simone Mainardi
0d70d7c8b9
Fixes title and descr for networks syn scan victim
2020-01-25 18:38:30 +01:00
emanuele-f
2d7b7c86e6
Move user scripts localization to the main localization file
2020-01-24 11:59:16 +01:00
Simone Mainardi
e15fcf721c
Implements User Script Categories
...
Implements #3280
2020-01-23 16:30:47 +01:00
Simone Mainardi
26c7906744
Moves plugin description to manifest.lua
2020-01-21 16:05:38 +01:00
Simone Mainardi
5b11db117b
Reworks plugin for not purged flow alerts
...
Fixes #3264
2020-01-21 12:50:31 +01:00
Simone Mainardi
1cbdbbd339
Hides status_id from flow.{trigger,set,clear}Status
...
Fixes #3266
2020-01-21 12:27:33 +01:00
Simone Mainardi
391c4c1e99
Removes unused require in flow blacklisted script
2020-01-17 15:29:10 +01:00
emanuele-f
de7adeacfe
Reduce UDP unidirectional score
2020-01-17 11:20:11 +01:00
emanuele-f
566b9ece0b
Score changes
...
- Move score from status definition to user scripts
- Separate flow score counter from the peers score
- Create a new HostScore class to hold the score data
2020-01-16 18:11:14 +01:00
Simone Mainardi
48910b9f87
Implements auto assignment of user script alert and status ids
2020-01-15 13:08:58 +01:00
emanuele-f
d7528e1628
Score improvements
...
The score is now calculated differently on the client and on the server of the flow.
The hosts flow is updated every minute and charted.
It's now possible to trigger an alert when the score threshold is exceeded
2020-01-15 12:34:16 +01:00
emanuele-f
7679da4d21
Implement blacklisted country alert
2020-01-13 18:15:27 +01:00
emanuele-f
5b05b06c96
Use extended icon classes.
...
Also fixes mining alert icon
2020-01-10 17:02:11 +01:00
Luca Deri
170bc60f19
Updated (C)
2020-01-08 23:52:51 +01:00
Alfredo Cardigliano
5e5d50d72a
Alert on software update
2020-01-08 18:51:21 +01:00
emanuele-f
481a00a2ad
Add missing user scripts gui labels
2020-01-07 19:04:11 +01:00
emanuele-f
ad9c386bb3
Move user scripts gui config to admin, cleanup
2020-01-03 15:16:46 +01:00
emanuele-f
d3b9f22b0a
Add missing ARP matrix entries purging
...
This resulted in the ARP matrix hash growing as idle entries were not purged.
Fixes #3152
2019-12-31 12:32:21 +01:00
emanuele-f
818a21d9ee
Add ability to hide a plugin menu entry
2019-12-20 11:04:18 +01:00
Luca Deri
187c9a8535
Added error message when InfluxDB is not enabled
2019-12-19 22:02:03 +01:00
emanuele-f
4c370de8cf
Fix missing suricata user scripts
2019-12-19 16:36:51 +01:00
emanuele-f
2047386431
Implement alert_endpoints and http_lint plugin extensions
...
Alert endpoints can now be loaded via custom plugins.
It's now possible to extend the http_lint parameters with custom parameters and validators.
2019-12-19 12:44:39 +01:00
