Commit graph

487 commits

Author SHA1 Message Date
Simone Mainardi
fd54ad95bf Allows host RTT to be set from the host config page 2019-09-20 16:28:36 +02:00
emanuele-f
54843a7865 Fix n2disk license validation error
Fixes #2872
2019-09-20 12:12:02 +02:00
Simone Mainardi
e2c9e729a4 Implements flow check modules enable/disable prefs 2019-09-17 11:57:29 +02:00
Simone Mainardi
f151fba989 Allows top talkers generation to be enabled/disabled 2019-09-11 16:42:26 +02:00
emanuele-f
4d62d68655 Add active alerted flows filter and count
Closes #2821
2019-09-10 17:52:22 +02:00
emanuele-f
c97ef3d908 Implement host MUD recording and dump 2019-09-04 21:20:52 +02:00
emanuele-f
b62e4183f0 Add ability to manually release an alert 2019-09-04 12:29:13 +02:00
Simone Mainardi
11aa854cba Handles hosts HASSH fingerprints 2019-08-26 16:55:39 +02:00
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46 Implement alerts based on potentially dangerous flows nDPI classification 2019-08-07 14:29:06 +02:00
emanuele-f
3ab6ff7901 Add support for on/off alert configuration 2019-08-06 17:29:35 +02:00
emanuele-f
ba91b62f0a Allow spaces in password fields
Fixes #2732
2019-08-01 11:12:30 +02:00
emanuele-f
6a6cedc899 Add ability to disable host alerts on specific flow status 2019-07-22 12:16:12 +02:00
emanuele-f
1d9a8951db Initial modular alerts config gui implementation 2019-07-11 12:42:25 +02:00
Luca Deri
4166f442ab Prometheus support (work in progress) 2019-06-30 23:25:24 +02:00
emanuele-f
f9f341b2ca Add preference to enable l7 total flow timeseries 2019-06-27 10:01:12 +02:00
Luca Deri
ec4d55ff04 Added hosts explored on the main menu 2019-06-25 19:56:56 +02:00
Alfredo Cardigliano
f67791c34f Locale and lint update 2019-06-11 17:54:45 +02:00
emanuele-f
6aa72b53f7 Implemement RTT monitoring configuration page 2019-06-11 17:30:46 +02:00
emanuele-f
6234245773 Move InfluxDB monitoring to separate entry 2019-06-10 12:47:10 +02:00
Alfredo Cardigliano
43d03c96ac Lint and locales update 2019-06-10 11:33:23 +02:00
emanuele-f
2d2566135d Properly escape spaces in InfluxDB tags 2019-06-04 10:45:36 +02:00
Alfredo Cardigliano
99aa386a12 Implements alerts on SNMP port load exceeding a configured threshold (%) based on port speed (#2223) 2019-05-30 15:18:46 +02:00
emanuele-f
74952edb27 Fix manage data host search 2019-05-29 12:21:46 +02:00
emanuele-f
1c9a4d3461 Implement ICMP data exfiltration alerts
Closes #256
2019-05-28 10:37:59 +02:00
Simone Mainardi
9252ead5a5 Implements telemetry data with options and contact email 2019-05-27 18:59:55 +02:00
Simone Mainardi
c7e8c32559 Implements telemetry data POST 2019-05-23 16:43:16 +02:00
Alfredo Cardigliano
7590f629fe Alerts on duplex status change on SNMP interface (#2349) 2019-05-23 12:23:45 +02:00
Simone Mainardi
bbb81ceddd Optionally determines (and swaps) ZMQ src and dst using port numbers
Implements #1978
2019-05-22 16:58:58 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d Implements traffic profile filter in the active flows page (#2598) 2019-05-20 12:43:51 +02:00
emanuele-f
359d359d09 Add ICMP flow filter
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
a4ed782486 Add option to disable flow dump on a network interface
Closes #2576
2019-05-13 17:18:16 +02:00
Simone Mainardi
9898c49a15 Initial work to add the companion interface 2019-04-30 19:43:23 +02:00
emanuele-f
8e546e904d Add event exporters charts 2019-04-29 15:11:01 +02:00
emanuele-f
6fb921d68a Implement Pods and Containers page 2019-04-24 18:46:07 +02:00
emanuele-f
14a9d83a30 Move local broadcast domain preference to the interface settings and show warnings
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
emanuele-f
21f202ccb2 Implement protos.txt editing via the gui.
Editor is only enabled if the -p option is specified.
Also added an hook in the flow to easily add domain.

Closes #1837
2019-04-10 16:16:39 +02:00
Alfredo Cardigliano
a892c825c0 toggle_ids_alerts liny 2019-04-05 15:55:53 +02:00
Simone Mainardi
23c5d92b10 Proper validation of base64-encoded license keys 2019-03-29 20:02:54 +01:00
emanuele-f
79543c6207 Flows table improvements 2019-03-25 16:04:29 +01:00
Simone Mainardi
091e89d5a3 Implements hosts walker by address CIDR 2019-03-21 15:25:00 +01:00
Simone Mainardi
2c50c66532 Fixes locales ordering 2019-03-18 16:37:55 +01:00
Simone Mainardi
5a67bf6e43 [Security] Fixes possible XSS in login.lua referer param
Fixes

XSS1 | Reflected

URL
http://192.168.2.200:3000/lua/login.lua?referer=%27%3E%3Cscript%3Ealert(1)%3C/script%3E

METHOD
Get

PARAMETER
referer

PAYLOAD
'><script>alert(1)</script>
2019-03-14 11:35:35 +01:00
Simone Mainardi
4b3ae0e652 Makes the ARP matrix generation optional using a pref 2019-03-12 14:53:06 +01:00
Simone Mainardi
a9db8e8c1e Adds validation for host pool assoc via API 2019-03-03 11:28:15 +01:00
emanuele-f
c2c10ed491 Implement dhcp hosts filter 2019-02-27 16:20:55 +01:00
emanuele-f
b778e77207 Initial support for DHCP range configuration 2019-02-26 18:08:02 +01:00
emanuele-f
4a97017f35 Fix mac-based serialization key and add a preference to enabled it (disabled by default) 2019-02-22 16:01:58 +01:00
emanuele-f
5089e4dabe Timeseries charts fixes 2019-02-22 11:16:41 +01:00