Luca Deri
f006b7304d
Updated black lists with the ntop meltdown
2019-10-18 13:53:48 +02:00
Simone Mainardi
43d0b89bd9
Prevens tons of unnecessary calls to alerts_api.trigger()
2019-10-17 18:54:13 +02:00
Alfredo Cardigliano
9b071bb873
Ingesting JA3 from Suricata, uniformed TLS IE names with those exported by cento, added localization for missing IEs
2019-10-17 13:04:42 +02:00
Simone Mainardi
f8443ff03d
Disk space reclaim and defrag of alerts db
2019-10-17 12:12:28 +02:00
Alfredo Cardigliano
bfdf5773d3
Format boolean custom fields
2019-10-16 12:51:04 +02:00
Simone Mainardi
bdbd44819c
Fixes nEdge flows drop
2019-10-16 19:17:14 +02:00
Simone Mainardi
6fd7386c03
Fixes possible collisions when looking up flows by key
2019-10-16 19:04:10 +02:00
emanuele-f
6533175336
Add flow/alerts definitions directories
2019-10-16 17:45:55 +02:00
emanuele-f
9386fdd2b1
Add status/alerts definitions overview page and documentation
2019-10-16 17:23:54 +02:00
emanuele-f
9786581526
flow.getInfo now returns minimal information
2019-10-16 13:57:54 +02:00
Alfredo Cardigliano
87ac1b0bb6
New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface
2019-10-16 04:50:47 +02:00
emanuele-f
873b96c20a
Split alert types definitions in multiple files
2019-10-16 12:04:07 +02:00
Simone Mainardi
d1600d0e9b
Adds toggle to exclude one-way-traffic hosts from timeseries gen
2019-10-16 11:58:50 +02:00
Simone Mainardi
5e60fb19c9
Implements two-way traffic filter for hosts
2019-10-16 11:01:22 +02:00
emanuele-f
7a14a9cf11
Improvements in status definition API
2019-10-16 10:33:19 +02:00
Simone Mainardi
2f984277ca
Fixes flows one-way/two-way flows filtering
2019-10-16 09:55:43 +02:00
Luca Deri
3c72fc1734
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
2019-10-15 21:57:11 +02:00
Luca Deri
3b5e56d802
Added script for detecting unidirectional UDP flows
2019-10-15 21:56:48 +02:00
emanuele-f
1c629b331a
Fix missing flow status menu entries
2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53
Fix flows_stats page title
2019-10-15 18:48:20 +02:00
emanuele-f
9ea7ff01b8
Improve flow alert trigger logic and fix support for custom message
2019-10-15 18:36:41 +02:00
emanuele-f
b217909966
Split flow status definitions in multiple files
2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
240fa15149
Handle additional fields from Suricata
2019-10-15 15:48:12 +02:00
Simone Mainardi
3950c3ddc8
Support for 5-min timeseries resolution in InfluxDB
2019-10-15 15:06:20 +02:00
emanuele-f
90cadaf560
Fix periodic scripts being called every minute with hasHighResolutionTs
2019-10-15 11:18:00 +02:00
Simone Mainardi
b258f45858
Fixes deletion of old alerts when above a certain threshold
2019-10-14 18:03:16 +02:00
Simone Mainardi
002f1e7176
InfluxDB writes are now done with second precision
...
Implements #2935
2019-10-14 09:44:15 +02:00
emanuele-f
2fdc860ed2
Add support for custom flow alerts in user scripts
2019-10-11 19:48:11 +02:00
emanuele-f
7bd6feb622
Rename check_module -> user_script
2019-10-10 18:14:53 +02:00
emanuele-f
b8f1a039fb
Fix always_enabled required for non-alert scripts
2019-10-10 18:03:36 +02:00
emanuele-f
75cf795521
Unify teardown function
2019-10-10 17:24:24 +02:00
Alfredo Cardigliano
76759a7d03
Suricata events are now processed by the Lua script
2019-10-10 15:56:53 +02:00
Simone Mainardi
4ef7d35296
Benchmarks for hosts interface and network scripts
2019-10-10 11:54:31 +02:00
Luca Deri
fc6f055137
Initial code cleanup for flow scripts
2019-10-09 23:39:44 +02:00
Alfredo Cardigliano
c03de01534
Mino user_scripts fix
2019-10-09 20:09:29 +02:00
Simone Mainardi
3cafa97aba
Stores benchmark results in plain redis keys with TTL for auto-cleanup
2019-10-09 19:33:33 +02:00
emanuele-f
ab0094c1c3
Unify syslog with user scripts API
2019-10-09 18:53:19 +02:00
Simone Mainardi
b9fa26174c
Implements generalized benchmarks for any user_script
2019-10-09 18:48:01 +02:00
emanuele-f
e66889154c
Migrate flow script documentation and document traffic element scripts
2019-10-09 17:23:51 +02:00
emanuele-f
ffd3b4c1ee
Users scripts api changes and initial documentation
2019-10-09 15:12:28 +02:00
Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
Simone Mainardi
1af92887fe
Fixes wrong syslog priorities
2019-10-09 01:09:29 +02:00
Simone Mainardi
9a08c116b5
Improves flows filtering dropdowns
2019-10-08 11:25:36 +02:00
emanuele-f
fa5dd7cf34
Fix check modules paths
2019-10-08 09:43:50 +02:00
Simone Mainardi
79ec20d6df
Re-uses getFlows filters for the getActiveFlowsStats
...
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8
Removes a debug print
2019-10-07 19:45:21 +02:00
emanuele-f
ede9a7940a
Generalize periodic and flows callbacks
...
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
Simone Mainardi
6bcb8b18a2
Prevents TCP state filter from being shown on non-TCP flows
2019-10-07 18:51:16 +02:00
Simone Mainardi
aa652145d0
Unifies flows, timeseries and top-talkers data retention
...
Implements #2897
2019-10-07 16:35:32 +02:00
Simone Mainardi
aceb123ebb
Adds About/directories page listing custom scripts directories
2019-10-07 11:34:39 +02:00