Commit graph

7483 commits

Author SHA1 Message Date
Alfredo Cardigliano
b48c0e0d1d Add schema for in-memory mem_db.engaged_host_alerts table and host_alerts_view aggregated view on SQLite 2024-11-07 10:58:48 +01:00
Alfredo Cardigliano
57fb25a60d Parse ndpi confidence from suricata 2024-11-06 12:22:21 +01:00
Alfredo Cardigliano
3d87347f4c Set flow l7 proto when collecting flows from suricata 2024-11-06 12:06:55 +01:00
Matteo Biscosi
10f2fe880f Added custom field mapping in historical flows 2024-11-06 10:47:03 +01:00
Luca Deri
afff51311d Asset management fixes 2024-11-05 18:32:15 +01:00
Matteo Biscosi
4357f7a39f Added missing %u in format 2024-11-05 16:00:13 +01:00
Matteo Biscosi
9da77c72c4 Fixes nil key in asset_management 2024-11-05 15:58:54 +01:00
Matteo Biscosi
22251351a6 Small change to asset_management 2024-11-05 15:56:15 +01:00
Matteo Biscosi
a6c0628110 Fixes wrong key in asset_management table 2024-11-05 15:55:02 +01:00
Matteo Biscosi
679ef8edab Possible fix for asset management not working 2024-11-05 15:51:03 +01:00
YellowMan
3320160670
Cloned in sqlite db information about inactive macs and hosts (#8797)
* Cloned in sqlite db information about inactive macs and hosts

* minor fix

* minor fix

* removed file
2024-11-05 12:19:53 +01:00
YellowMan
acdad58a88
Missing information added to historical flow (#8790)
* Missing information added to historical flow

* Minor consistency fix

* Fixed hassh fingerprint key

* Fix ssh hassh fingerprint - fixed i18n key consistency
2024-11-05 11:30:24 +01:00
Matteo Biscosi
b438573b2a Fixes timeseries of hosts with resolved names not working (#8787) 2024-11-05 10:07:59 +01:00
Matteo Biscosi
ab48c6ee62 Fixes influxdb timeseries not correctly fixed with steps (#8791) 2024-11-04 17:05:11 +01:00
Matteo Biscosi
7c4ef5a59a Added missing speedtest timeseries (#8637) 2024-11-04 16:23:40 +01:00
Luca Deri
c6612ada61 Remove unused IEs 2024-11-04 08:14:54 +01:00
Alfredo Cardigliano
3da6cfca6a Fix filters on MDNS 2024-10-31 14:30:40 +01:00
Alfredo Cardigliano
dd0201b184 Add filter on DNS query 2024-10-30 17:16:48 +01:00
Alfredo Cardigliano
0eb94fca0b Print DNS answers in historical flow details 2024-10-30 15:38:20 +01:00
Alfredo Cardigliano
961d945e11 Remove dns last_rsp (use last_rsp_arr) 2024-10-30 15:18:22 +01:00
Matteo Biscosi
e887ad65a9 Changed snmp polling duration data name 2024-10-30 15:14:40 +01:00
Alfredo Cardigliano
e845c1934a Add filter on DNS answer 2024-10-30 15:03:35 +01:00
Alfredo Cardigliano
046027f859 Handle mac addresses which are already formatted 2024-10-30 12:33:39 +01:00
Alfredo Cardigliano
6d3dc27396 Fix typo 2024-10-30 09:01:59 +01:00
GabrieleDeri
c40baa8b22
Fixed webhook error indexing json field (#8786) 2024-10-29 19:25:00 +01:00
GabrieleDeri
f978581261
Added endpoint to get alerts info from bitmap and alert id (#8785) 2024-10-29 19:18:21 +01:00
Alfredo Cardigliano
89f59cde5a Migrate local networks type from 16 to 32 bit 2024-10-29 15:31:37 +01:00
YellowMan
f2d587ed17
Empty field visualisation in historical flow info details fixed (#8784)
* Fixed missing user agent info in historical flow details

* Fixed empty fields visualizzation in historical flow info details
2024-10-29 14:20:44 +01:00
Matteo Biscosi
a0590678e7 Added polling duration timeseries (#8458) 2024-10-29 13:00:50 +01:00
YellowMan
644ef1ed44
Fixed missing user agent info in historical flow details (#8783) 2024-10-29 11:36:23 +01:00
GabrieleDeri
da3252a565
Fixed JSON formatting in webhook notifications (#8782)
* Moved active hosts page from interface to hosts, improved tooltip

* Fixed missing JSON formatting webhook notifications
2024-10-29 07:36:42 +01:00
Matteo Biscosi
c3f8a468f4 Fixes json still in the webhook alert 2024-10-28 21:49:22 +01:00
Matteo Biscosi
8ee9799865 Fixes json formatting (#8770) 2024-10-28 19:00:36 +01:00
Alfredo Cardigliano
b68e205314 Add top domains custom query 2024-10-28 17:55:18 +01:00
Alfredo Cardigliano
8ce99ce1f0 Add filter on domain name. Fix where injection. 2024-10-28 17:11:46 +01:00
Alfredo Cardigliano
2608f3a63d Cleanup old code 2024-10-28 11:52:28 +01:00
Matteo Biscosi
bd7295b916 Small cosmetics changes 2024-10-28 11:33:55 +01:00
Alfredo Cardigliano
edd48b78d9 Add pref to enable LDAP debug 2024-10-25 16:55:25 +02:00
Matteo Biscosi
9866486009 Fixes increase num hosts/flows not working (#8765) 2024-10-24 15:22:23 +02:00
Matteo Biscosi
4fffe8b449 Fixes host alert score treshold description 2024-10-23 16:11:31 +02:00
Matteo Biscosi
383053c442 Fixes incorrect filters formatting (#8764) 2024-10-23 10:22:55 +02:00
Luca
1117e71d18 Removed SYN flood check that was partially overlapping with SYN scan 2024-10-22 15:46:50 +02:00
Matteo Biscosi
d5097ad8ef Fixes various issues 2024-10-22 11:55:42 +02:00
Matteo Biscosi
950756b347 Fixes incorrect filters showed 2024-10-21 17:43:09 +02:00
Matteo Biscosi
c6776f8092 Added asset inventory logging preference 2024-10-21 17:17:38 +02:00
Matteo Biscosi
b3454229c9 Added preference to automatically exclude new interfaces from SNMP usage 2024-10-21 16:44:32 +02:00
Alfredo Cardigliano
493f97fb98 Add first/last seen epoch to historical flows. Fix pcap download check (dynamic check on rows now) 2024-10-21 11:50:05 +02:00
Alfredo Cardigliano
ecd3f11d19 Add snaplen configuration 2024-10-18 16:11:23 +02:00
Alfredo Cardigliano
a10bfd377c Fix snmp_interface tag datatable rendering. Fix historical flow details page. 2024-10-18 12:47:33 +02:00
Matteo Biscosi
555636fcae Fixes mattermost error (#8756) 2024-10-17 15:52:56 +02:00