Commit graph

22 commits

Author SHA1 Message Date
Simone Mainardi
b3dc39c641 Refactors alert_severities into an independend Lua module 2020-11-30 15:28:17 +01:00
Luca Deri
06161556ac Fixes issues with unexpected XXX alerts where impacted server was not reported
Added Lua getFlowProtoClientIP/getFlowProtoServerIP calls in flows
2020-11-25 15:52:03 +01:00
Simone Mainardi
d59c9b9e7d Shortens URLs too long in exe file transfers
Fixes #4681
Addresses #4761
2020-11-21 17:18:24 +01:00
Simone Mainardi
c748dc63b8 Fixes page layout in presence of many TLS cert names 2020-11-19 14:50:23 +01:00
Luca Deri
7c9631b955
Added check 2020-11-14 11:43:33 +01:00
Luca Deri
2120bf2486 Added alert for log goodput flows 2020-11-14 00:23:35 +01:00
Matteo Biscosi
0e341f3d0b
Modified flow scripts in view of the new trigger_status (#4710)
* Modified blacklisted script in view of the new flow_script API

* Modified plugins scripting in view of the new API

* Modified flow scripts with the new trigger API

* Fixed creators severity

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-12 13:52:53 +01:00
Simone Mainardi
636ac2e804 Cleanup parametric alert severities from flow status definitions 2020-11-12 12:12:25 +01:00
Simone Mainardi
389f9c2beb Reworks TCP issues flow user script 2020-10-30 15:56:36 +01:00
Simone Mainardi
0c7429bc2f Changes tcp and tcp_syn probing flow severity to info 2020-10-22 10:30:23 +02:00
Simone Mainardi
759948a218 Fixes flow risk status severity 2020-10-20 10:34:36 +02:00
Simone Mainardi
823d8a8689 Fixes flow status severity drilldown 2020-10-20 09:41:10 +02:00
Simone Mainardi
27c1318ab6 Fixes risk not shown in generated flow-risk alerts
Fixes #4594
2020-10-19 11:10:19 +02:00
Simone Mainardi
d3dda0bb82 Unifies misbehaving with alerted flows
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
ce4d69a273 Moves alert and status definitions under lua/modules/ 2020-10-12 15:03:39 +02:00
Simone Mainardi
814ee67cf9 Reworks nDPI Risks flow plugins to handle all risks and scores
Fixes #4432
2020-09-23 17:58:51 +02:00
Simone Mainardi
c543df45f9 Reworks suspicious file transfers 2020-05-13 19:38:24 +02:00
Simone Mainardi
0d7ed3f0ed Extends binary and unknown port alerts 2020-05-13 12:21:01 +02:00
Luca Deri
f4b25f30b3 Flow risk report improvemements 2020-05-12 12:57:36 +02:00
Luca Deri
e315158c1d Added plugin for handling flow risks reported by nDPI 2020-05-12 12:18:50 +02:00
Luca Deri
ff76407e68 Added detection of self-signed (< TLS 1.3) certificates 2020-05-08 09:53:31 +02:00
Simone Mainardi
78b334e4eb Refactors alerts and flow statuses in builtin and plugins
Implements #3811
Implements #3812

Refactors builtin alerts

Refactors builtin flow statuses
2020-04-21 22:27:49 +02:00