Simone Mainardi
b3dc39c641
Refactors alert_severities into an independend Lua module
2020-11-30 15:28:17 +01:00
Luca Deri
06161556ac
Fixes issues with unexpected XXX alerts where impacted server was not reported
...
Added Lua getFlowProtoClientIP/getFlowProtoServerIP calls in flows
2020-11-25 15:52:03 +01:00
Simone Mainardi
d59c9b9e7d
Shortens URLs too long in exe file transfers
...
Fixes #4681
Addresses #4761
2020-11-21 17:18:24 +01:00
Simone Mainardi
c748dc63b8
Fixes page layout in presence of many TLS cert names
2020-11-19 14:50:23 +01:00
Luca Deri
7c9631b955
Added check
2020-11-14 11:43:33 +01:00
Luca Deri
2120bf2486
Added alert for log goodput flows
2020-11-14 00:23:35 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status ( #4710 )
...
* Modified blacklisted script in view of the new flow_script API
* Modified plugins scripting in view of the new API
* Modified flow scripts with the new trigger API
* Fixed creators severity
Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
636ac2e804
Cleanup parametric alert severities from flow status definitions
2020-11-12 12:12:25 +01:00
Simone Mainardi
389f9c2beb
Reworks TCP issues flow user script
2020-10-30 15:56:36 +01:00
Simone Mainardi
0c7429bc2f
Changes tcp and tcp_syn probing flow severity to info
2020-10-22 10:30:23 +02:00
Simone Mainardi
759948a218
Fixes flow risk status severity
2020-10-20 10:34:36 +02:00
Simone Mainardi
823d8a8689
Fixes flow status severity drilldown
2020-10-20 09:41:10 +02:00
Simone Mainardi
27c1318ab6
Fixes risk not shown in generated flow-risk alerts
...
Fixes #4594
2020-10-19 11:10:19 +02:00
Simone Mainardi
d3dda0bb82
Unifies misbehaving with alerted flows
...
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
ce4d69a273
Moves alert and status definitions under lua/modules/
2020-10-12 15:03:39 +02:00
Simone Mainardi
814ee67cf9
Reworks nDPI Risks flow plugins to handle all risks and scores
...
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
c543df45f9
Reworks suspicious file transfers
2020-05-13 19:38:24 +02:00
Simone Mainardi
0d7ed3f0ed
Extends binary and unknown port alerts
2020-05-13 12:21:01 +02:00
Luca Deri
f4b25f30b3
Flow risk report improvemements
2020-05-12 12:57:36 +02:00
Luca Deri
e315158c1d
Added plugin for handling flow risks reported by nDPI
2020-05-12 12:18:50 +02:00
Luca Deri
ff76407e68
Added detection of self-signed (< TLS 1.3) certificates
2020-05-08 09:53:31 +02:00
Simone Mainardi
78b334e4eb
Refactors alerts and flow statuses in builtin and plugins
...
Implements #3811
Implements #3812
Refactors builtin alerts
Refactors builtin flow statuses
2020-04-21 22:27:49 +02:00