Commit graph

2294 commits

Author SHA1 Message Date
Luca Deri
f006b7304d Updated black lists with the ntop meltdown 2019-10-18 13:53:48 +02:00
Simone Mainardi
43d0b89bd9 Prevens tons of unnecessary calls to alerts_api.trigger() 2019-10-17 18:54:13 +02:00
Alfredo Cardigliano
9b071bb873 Ingesting JA3 from Suricata, uniformed TLS IE names with those exported by cento, added localization for missing IEs 2019-10-17 13:04:42 +02:00
Simone Mainardi
f8443ff03d Disk space reclaim and defrag of alerts db 2019-10-17 12:12:28 +02:00
Alfredo Cardigliano
bfdf5773d3 Format boolean custom fields 2019-10-16 12:51:04 +02:00
Simone Mainardi
bdbd44819c Fixes nEdge flows drop 2019-10-16 19:17:14 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
emanuele-f
6533175336 Add flow/alerts definitions directories 2019-10-16 17:45:55 +02:00
emanuele-f
9386fdd2b1 Add status/alerts definitions overview page and documentation 2019-10-16 17:23:54 +02:00
emanuele-f
9786581526 flow.getInfo now returns minimal information 2019-10-16 13:57:54 +02:00
Alfredo Cardigliano
87ac1b0bb6 New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface 2019-10-16 04:50:47 +02:00
emanuele-f
873b96c20a Split alert types definitions in multiple files 2019-10-16 12:04:07 +02:00
Simone Mainardi
d1600d0e9b Adds toggle to exclude one-way-traffic hosts from timeseries gen 2019-10-16 11:58:50 +02:00
Simone Mainardi
5e60fb19c9 Implements two-way traffic filter for hosts 2019-10-16 11:01:22 +02:00
emanuele-f
7a14a9cf11 Improvements in status definition API 2019-10-16 10:33:19 +02:00
Simone Mainardi
2f984277ca Fixes flows one-way/two-way flows filtering 2019-10-16 09:55:43 +02:00
Luca Deri
3c72fc1734 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2019-10-15 21:57:11 +02:00
Luca Deri
3b5e56d802 Added script for detecting unidirectional UDP flows 2019-10-15 21:56:48 +02:00
emanuele-f
1c629b331a Fix missing flow status menu entries 2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53 Fix flows_stats page title 2019-10-15 18:48:20 +02:00
emanuele-f
9ea7ff01b8 Improve flow alert trigger logic and fix support for custom message 2019-10-15 18:36:41 +02:00
emanuele-f
b217909966 Split flow status definitions in multiple files 2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
240fa15149 Handle additional fields from Suricata 2019-10-15 15:48:12 +02:00
Simone Mainardi
3950c3ddc8 Support for 5-min timeseries resolution in InfluxDB 2019-10-15 15:06:20 +02:00
emanuele-f
90cadaf560 Fix periodic scripts being called every minute with hasHighResolutionTs 2019-10-15 11:18:00 +02:00
Simone Mainardi
b258f45858 Fixes deletion of old alerts when above a certain threshold 2019-10-14 18:03:16 +02:00
Simone Mainardi
002f1e7176 InfluxDB writes are now done with second precision
Implements #2935
2019-10-14 09:44:15 +02:00
emanuele-f
2fdc860ed2 Add support for custom flow alerts in user scripts 2019-10-11 19:48:11 +02:00
emanuele-f
7bd6feb622 Rename check_module -> user_script 2019-10-10 18:14:53 +02:00
emanuele-f
b8f1a039fb Fix always_enabled required for non-alert scripts 2019-10-10 18:03:36 +02:00
emanuele-f
75cf795521 Unify teardown function 2019-10-10 17:24:24 +02:00
Alfredo Cardigliano
76759a7d03 Suricata events are now processed by the Lua script 2019-10-10 15:56:53 +02:00
Simone Mainardi
4ef7d35296 Benchmarks for hosts interface and network scripts 2019-10-10 11:54:31 +02:00
Luca Deri
fc6f055137 Initial code cleanup for flow scripts 2019-10-09 23:39:44 +02:00
Alfredo Cardigliano
c03de01534 Mino user_scripts fix 2019-10-09 20:09:29 +02:00
Simone Mainardi
3cafa97aba Stores benchmark results in plain redis keys with TTL for auto-cleanup 2019-10-09 19:33:33 +02:00
emanuele-f
ab0094c1c3 Unify syslog with user scripts API 2019-10-09 18:53:19 +02:00
Simone Mainardi
b9fa26174c Implements generalized benchmarks for any user_script 2019-10-09 18:48:01 +02:00
emanuele-f
e66889154c Migrate flow script documentation and document traffic element scripts 2019-10-09 17:23:51 +02:00
emanuele-f
ffd3b4c1ee Users scripts api changes and initial documentation 2019-10-09 15:12:28 +02:00
Alfredo Cardigliano
7e9678de37 IDS alert -> External alert 2019-10-09 11:35:51 +02:00
Simone Mainardi
1af92887fe Fixes wrong syslog priorities 2019-10-09 01:09:29 +02:00
Simone Mainardi
9a08c116b5 Improves flows filtering dropdowns 2019-10-08 11:25:36 +02:00
emanuele-f
fa5dd7cf34 Fix check modules paths 2019-10-08 09:43:50 +02:00
Simone Mainardi
79ec20d6df Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8 Removes a debug print 2019-10-07 19:45:21 +02:00
emanuele-f
ede9a7940a Generalize periodic and flows callbacks
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
Simone Mainardi
6bcb8b18a2 Prevents TCP state filter from being shown on non-TCP flows 2019-10-07 18:51:16 +02:00
Simone Mainardi
aa652145d0 Unifies flows, timeseries and top-talkers data retention
Implements #2897
2019-10-07 16:35:32 +02:00
Simone Mainardi
aceb123ebb Adds About/directories page listing custom scripts directories 2019-10-07 11:34:39 +02:00