Commit graph

637 commits

Author SHA1 Message Date
emanuele-f
453f515feb Windows fixes 2018-12-18 10:43:45 +01:00
Luca Deri
32c1bf8243 Removed old Lua leftover 2018-12-18 00:28:27 +01:00
emanuele-f
af02c76c8b Implement scan detection alerts for remote hosts
Closes #2068
2018-12-14 12:28:23 +01:00
Alfredo Cardigliano
1ecbb2d72d reworked delete_host logging to provide a link to the host 2018-12-07 12:16:23 +01:00
Alfredo Cardigliano
9833d392e6 Improved user activity logs with link to the host and ifid in the alert json 2018-12-07 11:11:37 +01:00
Alfredo Cardigliano
b67c3ef8b9 Improved visualization for live traffic capture activities 2018-12-07 10:45:25 +01:00
Alfredo Cardigliano
dca54aa8e4 Enabled tracking of alert endpoints settings changes 2018-12-06 22:59:17 +01:00
Alfredo Cardigliano
2ea6a5a3bc Tracking SNMP device add/remove 2018-12-06 15:58:22 +01:00
Alfredo Cardigliano
f2e5f0b30d Added details for unhandled activities 2018-12-06 12:35:13 +01:00
Alfredo Cardigliano
f249f0bbb9 restricted nIndexSelect logging to live_flows_extraction 2018-12-06 12:23:34 +01:00
Alfredo Cardigliano
48c20ec844 Tracking flows data download 2018-12-06 10:58:19 +01:00
Alfredo Cardigliano
9241a3c3e4 Added tracking of selected preferences (alerts settings) 2018-12-05 06:41:56 +01:00
Alfredo Cardigliano
bc7283ce3f Tracking more user activities: alerts deleted, all/inactive/interface data deleted, host data deleted, all/host data exproted 2018-12-05 04:36:30 +01:00
Alfredo Cardigliano
a087fb3bc9 Added tracker.log(), tracking host_get_json 2018-12-05 01:56:15 +01:00
Alfredo Cardigliano
23402e7261 Tracking more user activities: downloaded pcaps, live capture, live extraction, added/deleted users, password changed 2018-12-05 00:55:34 +01:00
Alfredo Cardigliano
bec67745cf tracking n2n/n2disk service stop/start 2018-12-04 23:22:08 +01:00
Alfredo Cardigliano
aab9e384ed Logging user login via alerts, added 'user activity' alerts type 2018-12-04 20:55:21 +01:00
Simone Mainardi
e72fdc79fe Lua 5.3 loadstring compat fix 2018-11-26 15:03:42 +01:00
Simone Mainardi
ddf49ef106 Implements remote-to-remote host alerts
Implements #2057
2018-10-10 12:16:59 +02:00
emanuele-f
457dcb3457 Implement Device Protocols Alerts 2018-10-02 22:35:00 +02:00
emanuele-f
3dc4a8dc59 Fix slow stats update alert 2018-09-27 21:08:02 +02:00
emanuele-f
03bf331c3e Add alert for slow stats update and reduce flow alert generation
This avoids SQLite database flooding during an ongoing attack which can block stats update
2018-09-27 19:31:38 +02:00
emanuele-f
eb79229048 Implement alerts links to graphs 2018-09-20 20:18:12 +02:00
Simone Mainardi
8a055b39c5 Implements a lua endpoint to send alerts to syslog
Implements #1973
Implements #1954
2018-09-05 15:26:57 +02:00
Simone Mainardi
dfb2401789 Reverts allowed interfaces fixes to make room for simplified code 2018-08-20 22:51:51 +02:00
Simone Mainardi
28b19afd8a Fixes security issues with interfaces selection
Fixes #1918
2018-08-20 13:37:32 +02:00
Simone Mainardi
d12a4d3009 Creates utility functions to handle restart after anomalous termination 2018-08-01 18:11:17 +02:00
Simone Mainardi
b1684fc25f Implements detection and alerting of anomalous terminations 2018-08-01 16:58:15 +02:00
emanuele-f
2f47b4a87e Add support for a custom user defined alert endpoint script 2018-07-09 13:01:35 +02:00
emanuele-f
a784ccaf60 Add interface local hosts number threshold alert 2018-07-09 11:59:06 +02:00
Simone Mainardi
67f7cdb47e Implements Netfilter queue flush alerts 2018-06-15 16:23:05 +02:00
Simone Mainardi
251cc57970 Minor SNMP localization fix 2018-05-16 16:18:50 +02:00
Simone Mainardi
9dd2ae14a8 Implements SNMP iterfaces status change alerts 2018-05-15 15:19:09 +02:00
Simone Mainardi
8048fa50af Fixes attempts to index nil alert tables 2018-05-14 15:14:26 +02:00
emanuele-f
89d203883f Add support for custom categories lists
- Extend malware hosts from list
- Read web mining hosts from list and generate alerts
2018-05-10 17:12:53 +02:00
emanuele-f
09c24c377e Unify engage/release host alert lua API 2018-05-07 20:26:00 +02:00
Luca Deri
afcfc6a0f0 Cosmetic fix 2018-04-14 18:22:51 +02:00
Simone Mainardi
72dacb7459 Prevents unnecessary prefs dump upon alerts check 2018-04-13 18:25:40 +02:00
Luca Deri
6d47e659f1 Reworked alerts
Added informative event when ntopng starts/stops
Fixed packet capture bug on ODX (and other BSD flavous)
Renamed #ifdef linux to #ifdef __linux__ to ease portabiity across architectures
2018-04-13 18:10:19 +02:00
Luca Deri
5c56afba53 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2018-04-13 17:21:33 +02:00
Luca Deri
00004494bf Reworked alarms
Added informative message at ntopng startup/shutdown
2018-04-13 17:19:58 +02:00
emanuele-f
fbeb24a509 Replace pipes with json in ip reassignment alerts 2018-04-13 16:20:06 +02:00
Simone Mainardi
7fcc591466 Fixes activity_time alert calculation 2018-04-13 15:12:08 +02:00
Simone Mainardi
dbb05fe6b6 Prevents alerts starvation in the emails queue 2018-04-13 11:57:28 +02:00
emanuele-f
23d7a2676a Rework alerts export to provide more endpoint control 2018-04-12 18:10:45 +02:00
emanuele-f
e0a2aa8088 Fix alert notification periodicity 2018-04-10 16:39:24 +02:00
emanuele-f
6c98de951e Move all the alerts exporters to batched export api 2018-04-10 15:49:29 +02:00
emanuele-f
bfaf36ba63 Group email notifications to prevent mail flooding 2018-04-10 11:33:40 +02:00
emanuele-f
11517970ac Fix interface switch while processing alerts causing alerts release to fail
getInterfaceId and getInterfaceName now do not change selected interface after the call
2018-04-06 16:15:36 +02:00
Luca Deri
9893a62174 Added check for old queued messages 2018-04-05 14:25:31 +00:00