643 commits

Author	SHA1	Message	Date
Matteo Biscosi	b7fe7573bc	Changed unexpected host behaviour titles	2021-03-24 17:16:59 +01:00
Matteo Biscosi	78aedbcebe	Reworked unexpected host behaviour alert ... Implements #5128	2021-03-24 15:38:43 +01:00
Alfredo Cardigliano	831ca8b215	Check for empty params	2021-03-24 11:25:07 +01:00
Alfredo Cardigliano	aaf44b3edd	Remove shell script options (alert is not provided as stdin)	2021-03-24 10:49:45 +01:00
Matteo Biscosi	899f852f8e	Renamed unexpected behaviour alert params	2021-03-23 19:19:50 +01:00
Matteo Biscosi	60e70f003c	Fixes host behaviour alert	2021-03-23 18:42:33 +01:00
Simone Mainardi	48996f2f71	Fixes for unexpected_host_behaviour	2021-03-23 17:20:07 +01:00
Matteo Biscosi	a79710090d	Fixes unexpected host behaviour triggered wrongly	2021-03-23 09:51:21 +01:00
Simone Mainardi	f61ffc045b	Merge branch 'c-user-scripts' into dev	2021-03-22 10:36:13 +01:00
Simone Mainardi	aea9138bfb	Implements flow callbacks and alerts in C++	2021-03-22 09:51:36 +01:00
gabryon99	a948cbea0f	add toggle columns dropdown for the new datatables	2021-03-18 12:24:01 +01:00
Matteo Biscosi	cb84559dae	Fixes wrong parameters given to unexpected host behaviour alert	2021-03-17 17:27:57 +01:00
Matteo Biscosi	3307220948	Fixes nil granularity in score behaviour alert	2021-03-17 12:08:56 +01:00
Matteo Biscosi	d27d5b0439	Fixes unexpected host behaviour alert error	2021-03-17 11:24:29 +01:00
Matteo Biscosi	3f46194e31	Implements unexpected behaviour alerts	2021-03-16 19:52:09 +01:00
Matteo Biscosi	3b5a5e2507	Implemented DES and added to LocalHostStats	2021-03-12 16:21:41 +01:00
Alfredo Cardigliano	fa723f72aa	Fix shell script arguments. Pass the alert as json if not arg has been configured.	2021-03-12 11:39:33 +01:00
Simone Mainardi	377ecf5c3f	Fixes user script ip_reassignment.lua after configset changes	2021-03-01 19:07:30 +01:00
Alfredo Cardigliano	fa311e3ade	Rework user script working sets (a single configset is supported now)	2021-03-01 15:37:45 +01:00
Simone Mainardi	ca863efc56	Fixes recipients.lua: attempt to index a nil value ... Fixes #5077	2021-03-01 11:07:53 +01:00
Alfredo Cardigliano	47b3c8a969	Check low goodput for established connections (e.g. do not generate alerts for connection reset with 0 goodput) (#5068)	2021-02-26 16:39:15 +01:00
Matteo Biscosi	39d3618351	Fixes flow alerts table column width and description	2021-02-26 16:10:48 +01:00
Alfredo Cardigliano	4f0ac39efe	Add more protocols to be filtered (#5068)	2021-02-26 15:36:37 +01:00
Matteo Biscosi	fa5088d49b	Removed useless description from some flow alert	2021-02-26 12:58:06 +01:00
Matteo Biscosi	e521ce6cdc	Removed incorrect scripts from flow interfaces ... This alerts shouldn't be used in flow interfaces but only in packets one because the flow interfaces doesn't have/have incorrect informations regaring these fields	2021-02-26 12:35:16 +01:00
Simone Mainardi	36e26cd0fc	Cleanup old ip reassignment / remote to remote alerts code ... Fixes #5038	2021-02-26 11:36:21 +01:00
Simone Mainardi	76006d6250	Fixes IP reassignment code that is now per-interface ... Implements #5038	2021-02-26 11:21:04 +01:00
Alfredo Cardigliano	db0633fc9f	Map alert severity to syslog messages	2021-02-26 10:28:18 +01:00
Matteo Biscosi	41163ac7f6	Implements low risk alert type must be further split ... Implements #5066	2021-02-25 19:09:17 +01:00
Alfredo Cardigliano	b6c083c8bb	Use a more standard date format	2021-02-25 15:27:28 +01:00
Alfredo Cardigliano	bd55990961	Add support for syslog format RFC 5424	2021-02-25 14:50:23 +01:00
Matteo Biscosi	6a4c6cf30c	Implements noisy low goodput alert ... Implements #5068	2021-02-25 12:21:29 +01:00
Matteo Biscosi	dbfdec34fe	Implements Local Host behaviour analysis and it's alert ... Alert in case the host has an unexpected behaviour	2021-02-25 12:04:05 +01:00
Matteo Biscosi	49ae038c3f	Implements #5038 cleanup IP reassigment code ... Removed debug print and used setPref instead of setCache	2021-02-25 11:00:09 +01:00
Alfredo Cardigliano	1c988036c1	Add host to the syslog export	2021-02-25 09:41:00 +01:00
Simone Mainardi	6a02355395	Fixes failing syslog	2021-02-23 17:03:32 +01:00
Alfredo Cardigliano	434f827ab6	Implement continuous ping for selected interfaces (fix #5001)	2021-02-19 19:13:49 +01:00
Alfredo Cardigliano	9a195e28be	Show the speedtest option only when supported (#5025)	2021-02-19 16:28:38 +01:00
Matteo Biscosi	9632c62bfa	Implements cleanup IP reassignment code ... Implements #5038	2021-02-19 15:36:27 +01:00
Simone Mainardi	c70c635e3f	Fixes TLS-risks sometimes handled twice	2021-02-18 14:45:02 +01:00
Simone Mainardi	823c6ddc81	Fixes flow risks no longer triggering	2021-02-18 11:20:17 +01:00
Simone Mainardi	9314f36cc5	Fixes remote to remote alerts setting nil scores	2021-02-18 10:59:36 +01:00
Matteo Biscosi	0c0ba319c2	Modified default fields for flow risk alert	2021-02-17 11:55:07 +01:00
Matteo Biscosi	711bcb21d0	Added exclusion list to the flow risk script	2021-02-17 11:46:45 +01:00
Simone Mainardi	f4dff6f2e7	Implements risk-based filtering of flow alerts	2021-02-16 15:25:20 +01:00
Alfredo Cardigliano	910974da91	Update alert type for external alert (fix #5037)	2021-02-15 18:12:39 +01:00
Alfredo Cardigliano	f245caf83c	Deterministic selection of flow risk	2021-02-12 17:47:54 +01:00
Simone Mainardi	6d651f0661	mplements layer-4 protocol as filter for flow user scripts	2021-02-12 16:25:45 +01:00
Simone Mainardi	c0ee292530	Implements l7_proto as filter for flow user scripts	2021-02-12 16:08:27 +01:00
Simone Mainardi	84ac0f4dfc	Implements filtering of flow user scripts	2021-02-12 12:56:06 +01:00