Commit graph

3724 commits

Author SHA1 Message Date
Matteo Biscosi
84806c9669 Removed unused code 2024-05-08 09:28:34 -04:00
Matteo Biscosi
b1d48910cc Added support for ClickHouse Cloud 2024-05-07 06:52:42 -04:00
Luca Deri
3d117a9e16 Added support for SIP CallID in flow key 2024-05-04 11:27:38 +02:00
Luca Deri
db38a5d2d5 DHCP (via ZMQ) Fixes for #7972
The symbolic hostname will use the DHCP name before the DNS resolved name
2024-05-02 21:46:03 +02:00
Luca Deri
3cc0aeddc5 Removed outdated unahandled flows that was casing fiscrepancies in flow accounting 2024-05-02 10:54:56 +02:00
Luca Deri
c51d4d70c9 CentOS 7 fixes 2024-04-29 21:48:15 +02:00
Luca Deri
ddd449ea90 Added the ability to set custom alert score 2024-04-29 11:56:02 +02:00
Nicolo Maio
3ae43b18c5 Change the severity of the old blacklisted flow to critical 2024-04-24 18:39:20 +02:00
Nicolo Maio
7ced911ec7 Fix autoAck (#7948) 2024-04-24 18:34:19 +02:00
Nicolò Maio
59075f5e10
Splitting blacklisted flow alert and creating two new alerts. (#8354) (#8355)
* Splitting blacklisted flow alert and creating two new alerts. (#8354)

* Renaming to 'Blacklisted Client Contact' and 'Blacklisted Server Contact'. (#8354)
2024-04-24 17:37:30 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. (#8264) (#8348)
* Add Flow Reset Alert and counter. (#8264)

* Renaming to TCP Flow Reset. (#8264)

* Renaming the value retrieved by the getName method. (#8264)
2024-04-24 17:15:20 +02:00
Luca Deri
812f1efdab Fix for #8347 2024-04-23 18:01:09 +02:00
Alfredo Cardigliano
260510289e Fix match on alert type 2024-04-23 16:02:55 +02:00
Alfredo Cardigliano
3dbdcc4966 Fix filters on alert types for non host/flow alerts 2024-04-22 18:39:55 +02:00
Alfredo Cardigliano
6c02a54e20 Fix entity for alerts triggered from lua 2024-04-22 13:19:16 +02:00
Alfredo Cardigliano
d7415c156d Add option to limit rows 2024-04-19 15:41:27 +02:00
Luca Deri
6ed953a5a3 Reworked host categorization
Fix for https://github.com/ntop/ntopng/issues/8262
2024-04-18 23:28:21 +02:00
Nicolò Maio
fd6b0958c3
Rename the alert to "Remote to Local Insecure Flow". (#8257) (#8339) 2024-04-18 12:45:54 +02:00
Luca Deri
4a93fe8a87 Added support in flow details for STUN MAPPED-ADDRESS 2024-04-12 21:14:38 +02:00
Nicolo Maio
4f7ba024c0 Set the emergency level score for SYN flood alerts. (#8253) 2024-04-10 16:59:46 +02:00
Matteo Biscosi
b98fa797af Removed attacker from binary application trasnfer (#8319) 2024-04-09 09:41:47 -04:00
Luca Deri
ee6b67ed0c Added support for nDPI's NDPI_BINARY_DATA_TRANSFER 2024-04-09 10:35:49 +02:00
Matteo Biscosi
96d374007d Fixed info field cut after 256 characters 2024-04-08 13:11:09 -04:00
Luca Deri
f26d56959c Renamed HostBlackHoleContactsAlert to HostScannerAlert 2024-04-08 18:35:49 +02:00
Luca Deri
296eebda0a Updates due to the new nDPI 2024-04-03 14:21:09 +02:00
Alfredo Cardigliano
0e5c7acfc2 Fix filter on host alert type. Cleanup. 2024-04-02 18:34:13 +02:00
Nicolo Maio
8a251c95cc Change Score level of HostBlackHoleContacts 2024-04-02 11:49:31 +02:00
Nicolo Maio
b20e06482c Fix the logic for HostBlackHoleContacts and RXOnlyHostScan checks. 2024-03-29 10:09:57 +01:00
Matteo Biscosi
8486831c6e Fixes slow loading of flow exporters with tons of devices 2024-03-28 11:42:23 -04:00
Matteo Biscosi
9aaf15c49f Added network interface filter resolving the issue with duplicated flow exporters (#8129) 2024-03-28 05:55:15 -04:00
Nicolò Maio
2deb42a7a2
Add the blackhole contacts alerts and update the scan detection alert. (#8290) 2024-03-28 08:55:45 +01:00
Matteo Biscosi
e58c60867e Fixes reset counters does not reset sent/rcvd bytes/packets (#8135) 2024-03-27 06:55:06 -04:00
Nicolo Maio
93062e6c12 Fix minor connection state calculation with cumulative flags. 2024-03-26 17:11:25 +01:00
Nicolò Maio
c83a33e20b
Add in and out iface index filters (#8286) (#8288) 2024-03-26 10:29:18 +01:00
Matteo Biscosi
3a2f1888a6 Fixes some performance issues in the new flow page 2024-03-20 06:45:39 -04:00
Luca Deri
bd54a26c7d Fixes prototype isses introduced by 4deb911b2e 2024-03-19 23:29:48 +01:00
Matteo Biscosi
4deb911b2e Updated info for faster loading in flow page 2024-03-19 12:16:16 -04:00
Matteo Biscosi
3a61763447 Reworked flows page 2024-03-15 06:41:56 -04:00
Alfredo Cardigliano
7c936f9d09 Remove deprecated private cloud support 2024-03-15 10:03:25 +01:00
Alfredo Cardigliano
58ac4ab201 Add read_from_stdin(). Fix indentation. 2024-03-13 11:02:18 +01:00
Luca Deri
0c6512b8f3 Added definitions of SNMP polling limits per edition 2024-03-12 20:07:29 +01:00
Alfredo Cardigliano
96dbac3a3e Implement remote radius authentication for local users (toggle) 2024-03-12 10:18:15 +01:00
Alfredo Cardigliano
78bff96e0b Split monolitic auth function into multiple methods 2024-03-11 18:56:23 +01:00
Matteo Biscosi
7792bf4fb6 Reworked host page to vuejs 2024-03-08 12:54:49 -05:00
Luca
7293a61cea Reworkd flow JSON serialization 2024-03-06 17:58:07 +01:00
Luca Deri
747d2a665e Cleanup 2024-03-06 11:34:21 +01:00
Nicolò Maio
de78637f4b
Add TLC_QUIC hostnaming pref. (#8258) (#8260) 2024-03-06 11:33:50 +01:00
Nicolò Maio
1f1d6f0393
Fix L7 Protocol usage & empty table statement using the view interface in Server Ports Analysis page (#8200)
* Fix the handling of L7 protocol filter in the server ports table view page.

* Add missing semicolon

* Add NO_VLAN

* Fix the L7 filter with arithmetic comparisons.

* Add usage of getViewSharedServer instead of IpAddress.
2024-03-06 11:30:10 +01:00
Alfredo Cardigliano
aaae4d1019 Improve host pool reload latency 2024-03-06 11:09:15 +01:00
Luca Deri
c615274179 Code cleaup 2024-03-05 16:16:11 +01:00