Commit graph

7483 commits

Author SHA1 Message Date
Matteo Biscosi
358660a56f Added startup delete on all radius keys 2024-12-05 13:15:49 +01:00
Luca Deri
76e47112e8 Fixes invalid format error 2024-12-05 12:22:23 +01:00
YellowMan
2ffe95845d
Added application latency in historical flow information (#8855) 2024-12-05 10:10:05 +01:00
Matteo Biscosi
0ebe2b9e88 Fixes missing blacklist (#8841) 2024-12-02 18:34:00 +01:00
Matteo Biscosi
2a47b8667f Fixes mac addresses alerts 2024-12-02 17:32:55 +01:00
Matteo Biscosi
07ef54c7cc Added ACL violation ARP alert (#8696) 2024-12-02 13:07:56 +01:00
Matteo Biscosi
f160e11007 Added is in memory parameter and removed port 0 (#8843) 2024-11-29 12:02:58 +01:00
Matteo Biscosi
819f39830b Added ACL Violation alert (#8696) 2024-11-28 18:02:53 +01:00
Matteo Biscosi
736932e977 Added error handling in case of edit/add/delete (#8696) 2024-11-28 11:23:18 +01:00
Luca Deri
fb06400fe2 Changed alert serialization 2024-11-28 09:34:57 +01:00
Luca Deri
084e295af8 Minor fixes 2024-11-27 15:26:31 +01:00
Luca Deri
6b4afa074a Removed OS stats 2024-11-26 10:23:04 +01:00
Matteo Biscosi
d50cce28d3 First implementation of acl (#8696) 2024-11-25 19:37:01 +01:00
Luca Deri
6294343086 Reworked OS and hot fingerprint 2024-11-24 23:08:38 +01:00
Luca Deri
d3e469a316 Mergec TCP Probing and Probin attempt 2024-11-20 22:08:07 +01:00
Matteo Biscosi
70f257d909 Added manufacturer to historical flows (#8534) 2024-11-20 15:20:40 +01:00
Matteo Biscosi
170725e5eb Removed not used import 2024-11-20 14:56:51 +01:00
Matteo Biscosi
40bb18ebdc Fixes missing nDPI alerts description (#8570) 2024-11-20 13:59:58 +01:00
Alfredo Cardigliano
8c0094f354 Fix flow alerts lookup for non predominant alerts (alerts_map_h/alerts_map_l integer columns) 2024-11-20 11:44:06 +01:00
YellowMan
d396297985
Tcp Probing Attempt Alert (#8821)
* Implemented TCP Probing Attempt Alert

---------

Co-authored-by: DiPalmaGiuseppe <g.dipalma6@studenti.unipi.it>
2024-11-20 10:58:36 +01:00
Matteo Biscosi
63df3c6858 Added l7 exporters timeseries 2024-11-19 15:52:22 +01:00
Alfredo Cardigliano
3785284bd5 Fix getFullLocalNetworkName 2024-11-19 09:54:03 +01:00
Alfredo Cardigliano
a8cb1a3359 Fix network print 2024-11-19 09:46:14 +01:00
Matteo Biscosi
efdd1c8673 Fixes missing invert direction to the exporters l7 timeseries 2024-11-15 11:31:23 +01:00
Matteo Biscosi
d01b790182 Fixes top timeseries not working for influxdb (#8815) 2024-11-14 18:15:39 +01:00
Matteo Biscosi
ed3b24a786 Added top l7 protocols timeseries to exporters 2024-11-14 17:00:52 +01:00
Matteo Biscosi
9dab48aedf Fixes l7 protocol not correctly calculated for exporters 2024-11-14 16:35:10 +01:00
Alfredo Cardigliano
3d5a351508 Fix typo 2024-11-13 16:38:15 +01:00
Matteo Biscosi
310af5f9b2 Added tracing for radius accounting update 2024-11-12 18:41:32 +01:00
Alfredo Cardigliano
2aa46f98ac Implement aggregated page for all alert families 2024-11-12 16:22:06 +01:00
Alfredo Cardigliano
125787909a Add rowid to engaged alerts for all families 2024-11-12 11:53:59 +01:00
Matteo Biscosi
b2a37ea016 Fixes missing protocol mapping (#8805) 2024-11-12 11:07:47 +01:00
Matteo Biscosi
b33cd7f697 Removed duplicated help link (#8799) 2024-11-12 10:26:48 +01:00
Alfredo Cardigliano
6f9d0690c6 Add require_attention to all alert families on SQLite. Cleanup SQLite schema 2024-11-11 18:12:27 +01:00
Alfredo Cardigliano
2da5925181 Fix all alerts page. Fix require attention results. 2024-11-11 15:59:58 +01:00
Alfredo Cardigliano
f3963c9eb1 Split alert_status (engaged, historical, acknowledged) and require_attention flag 2024-11-11 12:46:25 +01:00
Alfredo Cardigliano
6bde30030d Check engaged alerts up to 1 day before to avoid full db scan 2024-11-11 10:50:58 +01:00
Alfredo Cardigliano
959f8b25cb Remove useless condition for engaged alerts on flow alerts 2024-11-11 09:46:49 +01:00
Matteo Biscosi
5a6c75c68a Fixes local_hosts_report missing import 2024-11-09 12:45:15 +01:00
Matteo Biscosi
87a3640870 Moved inactive hosts page to the new back end 2024-11-08 18:18:59 +01:00
Alfredo Cardigliano
7f8fd301aa Show engaged alerts also in the Require Attention tab 2024-11-08 17:10:13 +01:00
Alfredo Cardigliano
04d2649911 Add comment on chart function 2024-11-08 17:00:41 +01:00
Alfredo Cardigliano
299057f119 Add ability to filter on alert status (#8795) 2024-11-08 16:16:56 +01:00
Alfredo Cardigliano
42dc80aa06 Fix tstamp condition to handle engaged alerts 2024-11-08 15:35:41 +01:00
Alfredo Cardigliano
7dedfa1a8c Add schema for in-memory engaged_host_alerts table and host_alerts_view aggregated view on ClickHouse 2024-11-08 12:46:41 +01:00
Alfredo Cardigliano
ac48c01f57 Fix query count in case of no result 2024-11-08 09:52:48 +01:00
Alfredo Cardigliano
64028e3f8b Add/remove engaged alerts from the in-memory db (currently working on SQLite) 2024-11-08 09:07:56 +01:00
Matteo Biscosi
88e9608e13 Added is engaged icon 2024-11-07 17:22:12 +01:00
Alfredo Cardigliano
b235b2412a Add stub for insert/delete engaged 2024-11-07 12:16:28 +01:00
Matteo Biscosi
4729f76ea4 Added possibility to filter by custom fields sent from nprobe 2024-11-07 11:33:13 +01:00