Commit graph

723 commits

Author SHA1 Message Date
Simone Mainardi
d7f1ce0d8c Reworks and optimizes flow alerted status 2020-10-19 16:50:22 +02:00
Alfredo Cardigliano
a5a8030e35 Cleanup trigger flow external alert 2020-10-19 13:12:31 +02:00
Simone Mainardi
d3dda0bb82 Unifies misbehaving with alerted flows
Implements #4596
2020-10-16 18:58:20 +02:00
Luca
3449593087 Reworked notifications and fixed a bug that caused them to be fetched too often putting pressure on the blog feed 2020-10-16 09:31:04 +02:00
Luca Deri
77ab1e3a8a Added fix for #4534
- in case of startup crash and automtic restart, ntopng would reload lists resetting errors. This caused the storm of updates
- updated the URL to https://snort.org/downloads/ip-block-list
- in case of failure we retry the URL only once (it used to be twice) after one hour.
2020-10-15 17:17:35 +02:00
Simone Mainardi
6fc182412f Reworks factory reset 2020-10-13 15:16:59 +02:00
Simone Mainardi
5b878a2a7a Reworks reload of in-mem preferences and runtimeprefs.json dump 2020-10-13 12:49:48 +02:00
Simone Mainardi
efe6bcf691 Fixes notifications.lua running for too long
Fixes #4523
2020-10-05 13:14:55 +02:00
Simone Mainardi
b7bdd1edaf Massive cleanup of alerts (disabled/suppressed)
Fixes #4504
2020-10-01 18:40:11 +02:00
Simone Mainardi
72e4382333 Reworks purging of idle entries without Lua periodic scripts 2020-10-01 16:08:21 +02:00
Simone Mainardi
0db456c0cf Reworks flow user scripts execution in C++ 2020-09-30 18:41:36 +02:00
Simone Mainardi
36aec9019a Adds missing interface selection in purge_idle.lua 2020-09-29 19:16:50 +02:00
Simone Mainardi
8392e126f8 Simplifies and reduces the number of threads for purging idle entries 2020-09-29 18:51:44 +02:00
Simone Mainardi
5133af720f Reworks view interfaces with queues; rework idling and flow hooks exec 2020-09-29 18:30:10 +02:00
Simone Mainardi
90a5a57b36 Implements user script queues (avoids 5-sec HT walk) 2020-09-28 11:45:00 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
6c1280a8e5 Reworks recipients.lua as static rather than (useless) instance 2020-09-23 15:03:07 +02:00
Alfredo Cardigliano
7bda229e8f Use score to filter flow alerts when supported (Enterprise) 2020-09-22 04:22:58 +02:00
Simone Mainardi
3ad4522e45 Implements additional plugin hooks
The following plugin hooks have been implemented

onEnable(hook, hook_config)
onDisable(hook, hook_config)
onUpdateConfig(hook, hook_config)
onLoad(hook, hook_config)
onUnload(hook, hook_config)

Documentation is part of the commit.

Implements #4451
Implements #4453
Implements #4454
Implements #4455
2020-09-21 18:25:14 +02:00
Simone Mainardi
db0d7730a8 Implements per-category host score
Implements #4413
2020-09-18 18:34:28 +02:00
Simone Mainardi
8b9038a70c Waits plugins reload before initializing recipients 2020-09-17 14:13:30 +02:00
Simone Mainardi
33bd6bb1c9 Fixes callbacks last duration
Fixes #4436
2020-09-16 18:10:51 +02:00
Simone Mainardi
b7341506f7 Implements checks for script type and alert severity in dispatch_notification 2020-09-16 13:08:07 +02:00
Simone Mainardi
b1b90c13d6 Implements alert queues monitoring backend
Implements #4324
2020-09-15 18:05:56 +02:00
Simone Mainardi
6924651ec5 Refactors creation of builtin endpoints and recipients
Implements #4386
2020-09-10 12:01:23 +02:00
Simone Mainardi
5e7f2cfff4 Implements thread for notifications handling 2020-09-09 12:16:51 +02:00
Simone Mainardi
9e99fa1403 Uses new in-memory queues for alert recipients (avoid Redis) 2020-09-08 18:36:18 +02:00
Simone Mainardi
85f555a908 Removes intermediate alert queues - only leaves recipient queues
Implements #4366
2020-09-04 17:41:55 +02:00
Simone Mainardi
1a7ee97334 Reworks builtin SQLite alerts as a regular alert recipient 2020-09-04 10:33:10 +02:00
Simone Mainardi
1d4930fc13 Initial work to add the SQLite plugin and builtin recipient 2020-09-03 19:35:28 +02:00
Simone Mainardi
aeecbcce29 Initial implementation of OO recipients with SQLite 2020-08-28 13:19:58 +02:00
Simone Mainardi
7f241d71d5 Implements attack mitigation via SNMP
Implements #3833 along with companion pro commit
2020-08-24 15:05:35 +02:00
Luca Deri
f5e572cb5e Split pruge of idled entries from hashtable ste transition 2020-08-13 10:21:59 +02:00
Luca Deri
f7bddc7e0a Improved low-threshold script skip 2020-08-12 11:36:51 +02:00
Luca Deri
10b27b12c8 Added check for reducing load pressure when too many idle flow instances are present in the system 2020-08-12 10:54:57 +02:00
Simone Mainardi
dc980bef0a Adds anti-stall checks on host user scripts 2020-08-05 11:18:10 +02:00
Simone Mainardi
330234e3f7 Optimized hosts scripts using direct pool_id to retrieve config 2020-07-30 19:57:16 +02:00
Simone Mainardi
73ac8af04f Fixes recipients for SNMP device interfaces notifications 2020-07-30 16:06:46 +02:00
Simone Mainardi
516451aa6c Uses actual host pool id when executing host scripts 2020-07-30 11:39:15 +02:00
Luca Deri
aa1dc0b31d Implements #4217 2020-07-29 22:51:36 +02:00
Simone Mainardi
4e96ae7e26 Refactors user_scripts method names 2020-07-29 15:17:31 +02:00
Simone Mainardi
c291fe91c9 Adds periodic_user_scripts.lua for the execution of periodic scripts 2020-07-29 14:47:11 +02:00
Simone Mainardi
1703488796 Fixes system CPU load 2020-07-29 11:42:39 +02:00
Simone Mainardi
8418d932ec Avoids spawning num_interfaces + threads to update stats 2020-07-27 15:50:11 +02:00
Luca Deri
ab6455329a Alert improvements
- check areAlertsEnabled() result is now cached
- housekeeping.lua skips alerts when disabled
2020-07-23 17:53:59 +02:00
Alfredo Cardigliano
f038baf804 Alerts are no longer enqueued if disabled 2020-07-23 00:49:28 +02:00
Simone Mainardi
c623f21ba0 Refactors old host_pools_utils to nEdge-only host_pools_nedge 2020-07-16 18:17:19 +02:00
Simone Mainardi
012ef619da Avoids calling old initPools on non-nEdge 2020-07-16 17:59:19 +02:00
Simone Mainardi
d89d97e59b Migrates snmp user scripts to the new snmp device pools configuration 2020-07-10 19:46:34 +02:00
Simone Mainardi
92c88c7924 Migrates interface user scripts to the new interface pools configuration 2020-07-10 19:32:03 +02:00