732 commits

Author	SHA1	Message	Date
emanuele-f	9ea7ff01b8	Improve flow alert trigger logic and fix support for custom message	2019-10-15 18:36:41 +02:00
emanuele-f	b217909966	Split flow status definitions in multiple files	2019-10-15 17:28:45 +02:00
Alfredo Cardigliano	240fa15149	Handle additional fields from Suricata	2019-10-15 15:48:12 +02:00
Simone Mainardi	3950c3ddc8	Support for 5-min timeseries resolution in InfluxDB	2019-10-15 15:06:20 +02:00
emanuele-f	90cadaf560	Fix periodic scripts being called every minute with hasHighResolutionTs	2019-10-15 11:18:00 +02:00
Simone Mainardi	ca5bcd86bf	Deprecates sticky hosts ... Fixes #2907	2019-10-14 18:50:18 +02:00
Luca Deri	0a64d694a1	Warning fix	2019-10-14 11:20:33 +02:00
emanuele-f	2fdc860ed2	Add support for custom flow alerts in user scripts	2019-10-11 19:48:11 +02:00
emanuele-f	0ddc82d7db	Port blacklisted flow alerts to new api	2019-10-11 16:32:37 +02:00
emanuele-f	cbfcff9633	Fix missing performed_lua_calls initialization	2019-10-11 14:36:34 +02:00
emanuele-f	7bd6feb622	Rename check_module -> user_script	2019-10-10 18:14:53 +02:00
emanuele-f	b8f1a039fb	Fix always_enabled required for non-alert scripts	2019-10-10 18:03:36 +02:00
emanuele-f	75cf795521	Unify teardown function	2019-10-10 17:24:24 +02:00
Alfredo Cardigliano	76759a7d03	Suricata events are now processed by the Lua script	2019-10-10 15:56:53 +02:00
emanuele-f	e7e2f43646	Fix Flow::isLuaCallPerformed	2019-10-10 15:17:41 +02:00
emanuele-f	09dcf4e7c6	Improve L4 protocol filter	2019-10-10 15:04:58 +02:00
emanuele-f	4c715c7d73	Implement L4 protocol filter in flow user scripts	2019-10-10 13:37:01 +02:00
Simone Mainardi	4ef7d35296	Benchmarks for hosts interface and network scripts	2019-10-10 11:54:31 +02:00
Alfredo Cardigliano	c03de01534	Mino user_scripts fix	2019-10-09 20:09:29 +02:00
emanuele-f	ab0094c1c3	Unify syslog with user scripts API	2019-10-09 18:53:19 +02:00
Simone Mainardi	b9fa26174c	Implements generalized benchmarks for any user_script	2019-10-09 18:48:01 +02:00
emanuele-f	e66889154c	Migrate flow script documentation and document traffic element scripts	2019-10-09 17:23:51 +02:00
Simone Mainardi	a49e934570	Removes a debug print	2019-10-09 15:19:21 +02:00
Simone Mainardi	816f3819cc	Removes overridden metatable in flow.lua	2019-10-09 15:17:43 +02:00
emanuele-f	ffd3b4c1ee	Users scripts api changes and initial documentation	2019-10-09 15:12:28 +02:00
Alfredo Cardigliano	e05f9aa4f4	Syslog events are not handled by scripts in scripts/callbacks/syslog/ with the application name as file name	2019-10-09 13:00:04 +02:00
Alfredo Cardigliano	b203201b91	Missing files	2019-10-09 11:24:26 +02:00
emanuele-f	ede9a7940a	Generalize periodic and flows callbacks ... Now periodic callbacks are properly called even when alerts are disabled The granularity filter and check_function has been replaced with a more generic hooks list	2019-10-07 19:05:43 +02:00
Simone Mainardi	aa652145d0	Unifies flows, timeseries and top-talkers data retention ... Implements #2897	2019-10-07 16:35:32 +02:00
Simone Mainardi	359599c4eb	Removes static Flow::lua_method_id_to_name map moving it in a flow method	2019-10-07 12:32:50 +02:00
Simone Mainardi	3749ffea04	Adds extra comments to flow.lua	2019-10-07 12:23:31 +02:00
emanuele-f	bee1efdded	Move callbacks scripts into separate tab	2019-10-04 10:48:13 +02:00
Simone Mainardi	6db2c6392f	Stores flow lua scripts benchmarks and shows them in the ui	2019-10-01 17:06:29 +02:00
Simone Mainardi	fa17aab9db	Implements lua flow method calls using ids to be more efficient	2019-09-30 17:29:01 +02:00
emanuele-f	246b18838d	Fix nEdge active flows blocking	2019-09-30 16:12:26 +02:00
emanuele-f	35e3a2f20c	Do not compute DNS ratio in nEdge ... nEdge does not see the DNS replies so DNS ratio is incorrect	2019-09-30 11:28:15 +02:00
Simone Mainardi	3ea092093f	Adds generic probes tab to the alerts pages	2019-09-23 18:50:43 +02:00
Simone Mainardi	b3f50c6b21	Fixes DNS resolution leaks and wrong ping addresses	2019-09-23 14:54:19 +02:00
Simone Mainardi	79b69c2e6f	Flattens out the structure of lua flow callbacks	2019-09-17 18:22:55 +02:00
Simone Mainardi	661f897898	Implements instrumentation to monitor lua flow callbacks	2019-09-17 17:42:54 +02:00
emanuele-f	b090594027	Add missing home button in RTT stats ... Fixes #2849	2019-09-17 16:09:30 +02:00
Simone Mainardi	909408168b	Improves flow check lua scripts loading efficiency	2019-09-17 14:24:29 +02:00
Simone Mainardi	e2c9e729a4	Implements flow check modules enable/disable prefs	2019-09-17 11:57:29 +02:00
Simone Mainardi	b3d595653e	Initial implementation of lua flow callback scripts and blacklisted alerts ... Partially implements #2842	2019-09-16 18:27:46 +02:00
Simone Mainardi	83f5e68239	Reworks flow.lua callback code	2019-09-12 16:15:04 +02:00
Simone Mainardi	288d3a51ec	Optimizes flow lua by avoiding unnecessary calls	2019-09-12 16:02:13 +02:00
Simone Mainardi	968e21d984	Implements flow lua callbacks in the periodic activities thread	2019-09-12 15:36:41 +02:00
emanuele-f	e4f1d1f5d3	Avoid flow.lua overhead if all the modules are disabled	2019-09-11 14:52:26 +02:00
Simone Mainardi	165a53d18e	Adds timeseries of ZMQ messages received and dropped	2019-09-10 19:49:16 +02:00
emanuele-f	5a57be4879	Fix invalid granularity filter	2019-09-06 10:29:10 +02:00