35 commits

Author	SHA1	Message	Date
Simone Mainardi	d7f1ce0d8c	Reworks and optimizes flow alerted status	2020-10-19 16:50:22 +02:00
Alfredo Cardigliano	a5a8030e35	Cleanup trigger flow external alert	2020-10-19 13:12:31 +02:00
Simone Mainardi	00f1ae731a	Keeps configured enabled/disabled flow risks into account inside plugin	2020-10-19 11:56:41 +02:00
Simone Mainardi	27c1318ab6	Fixes risk not shown in generated flow-risk alerts ... Fixes #4594	2020-10-19 11:10:19 +02:00
Luca Deri	a5076c0d27	Implemented multiselect to be used in #4589	2020-10-16 22:29:12 +02:00
Simone Mainardi	d3dda0bb82	Unifies misbehaving with alerted flows ... Implements #4596	2020-10-16 18:58:20 +02:00
Simone Mainardi	92ed28cf4c	Prevents unidirectional traffic alerts from NoIP from being triggered ... Fixes #4592 along with companion pro commit	2020-10-16 12:20:15 +02:00
Luca Deri	374b97c516	Unexpected protocol plugins default to disable	2020-10-15 21:44:24 +02:00
Luca Deri	24a5b1f908	Added minimum number of packets transmitted before triggering a retransmision alert	2020-10-14 22:33:02 +02:00
Luca Deri	7d6daf6b1b	Fixes for flow retransmission plugin	2020-10-14 00:02:25 +02:00
Luca Deri	d3d0924e73	Merge pull request #4578 from Wallace4/retry_project ... Addedd Retransmissions plugin for flows	2020-10-13 23:32:30 +02:00
Simone Mainardi	ce4d69a273	Moves alert and status definitions under lua/modules/	2020-10-12 15:03:39 +02:00
Daniele Zulberti	3b8ee0e9f0	Added use of local variables. ... Used flow.getInfo() and srv.ip instead flow.getServerKey(). Now the for breaks when a match is found.	2020-10-11 18:09:47 +02:00
Wallace4	24a9825e0a	Changed status file title -> description	2020-10-11 16:32:27 +02:00
Wallace4	8fae098590	Changed some variables name and comments	2020-10-11 16:28:02 +02:00
Wallace4	238e01e111	Removed debug writes	2020-10-11 15:21:38 +02:00
Wallace4	d4f0dfef2d	Added en.lua	2020-10-11 15:15:38 +02:00
Wallace4	e065f7b9de	Status and Alert have now their own variable (not custom)	2020-10-11 15:12:37 +02:00
Wallace4	1837d65784	Added en.lua for lang	2020-10-11 13:44:55 +02:00
Wallace4	7358ce3ef0	Ticket #4425 and project	2020-10-11 13:10:17 +02:00
Daniele Zulberti	fedd1e3218	Added unexpected DHCP plugin	2020-10-10 20:22:06 +02:00
Luca Deri	4565f8af04	Added plugin for detecting unexpected NTP servers	2020-10-10 10:54:19 +02:00
Luca Deri	c323c6f351	Tiny change	2020-10-10 10:35:06 +02:00
Luca Deri	2093488db3	Minor fixe: when the list of DNS/SMTP servers is empty, no check is performed	2020-10-10 10:33:47 +02:00
Daniele Zulberti	d74caa9d2b	Added unexpected SMTP plugin	2020-10-09 17:06:23 +02:00
Daniele Zulberti	cff77b49cf	Added unexpected DNS plugin	2020-10-09 17:06:23 +02:00
Simone Mainardi	e1f4bb80f7	Default flow risk handler now sets statuses ... Implements #4398	2020-10-06 09:56:53 +02:00
Simone Mainardi	f6c42554bc	Fixes slow hash entries purging alert ... Fixes #4527	2020-10-05 14:38:53 +02:00
Simone Mainardi	2f2a2e63e4	Uses plugin modules as flow-risk handlers	2020-09-24 12:48:09 +02:00
Simone Mainardi	d7b688b955	Adds a no-action risk handler for risks already handled in other scripts	2020-09-23 18:02:57 +02:00
Simone Mainardi	814ee67cf9	Reworks nDPI Risks flow plugins to handle all risks and scores ... Fixes #4432	2020-09-23 17:58:51 +02:00
Alfredo Cardigliano	f83ccb70d5	Add external alert check on flow end event. Remove *if* preventing external alerts from being triggered.	2020-09-21 16:12:36 +02:00
Simone Mainardi	f12ad8c028	Increases default script thresholds ... Fixes #4424 with companion pro commit	2020-09-18 11:17:46 +02:00
Simone Mainardi	020c1cd0a1	Fixes Error with 'P2P Traffic Alert' user script ... Fixes #4447	2020-09-17 18:34:23 +02:00
Simone Mainardi	f7e1ea9709	Reworks plugin loading and structure ... Implements #4358	2020-09-15 11:33:53 +02:00