Simone Mainardi
|
2f984277ca
|
Fixes flows one-way/two-way flows filtering
|
2019-10-16 09:55:43 +02:00 |
|
emanuele-f
|
1c629b331a
|
Fix missing flow status menu entries
|
2019-10-15 18:51:34 +02:00 |
|
emanuele-f
|
60566f4b53
|
Fix flows_stats page title
|
2019-10-15 18:48:20 +02:00 |
|
emanuele-f
|
b217909966
|
Split flow status definitions in multiple files
|
2019-10-15 17:28:45 +02:00 |
|
Alfredo Cardigliano
|
76759a7d03
|
Suricata events are now processed by the Lua script
|
2019-10-10 15:56:53 +02:00 |
|
Simone Mainardi
|
9a08c116b5
|
Improves flows filtering dropdowns
|
2019-10-08 11:25:36 +02:00 |
|
Simone Mainardi
|
79ec20d6df
|
Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
|
2019-10-08 00:23:35 +02:00 |
|
Simone Mainardi
|
53d03884f8
|
Removes a debug print
|
2019-10-07 19:45:21 +02:00 |
|
Simone Mainardi
|
6bcb8b18a2
|
Prevents TCP state filter from being shown on non-TCP flows
|
2019-10-07 18:51:16 +02:00 |
|
emanuele-f
|
978ee7f944
|
Add misbehaving flows label to avoid confusion
|
2019-09-20 12:41:09 +02:00 |
|
emanuele-f
|
4d62d68655
|
Add active alerted flows filter and count
Closes #2821
|
2019-09-10 17:52:22 +02:00 |
|
emanuele-f
|
935c2de722
|
Fix active flows error
|
2019-09-10 14:57:30 +02:00 |
|
emanuele-f
|
6e14f978d6
|
Flow alerts status cleanup
|
2019-09-10 13:12:11 +02:00 |
|
Alfredo Cardigliano
|
141622f151
|
Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info
|
2019-09-04 22:20:51 +02:00 |
|
emanuele-f
|
a58cd6a7d9
|
Add country flag in flow peers
|
2019-09-02 10:58:43 +02:00 |
|
emanuele-f
|
2d02de6cc1
|
Implement initial flow score support
|
2019-08-30 17:16:11 +02:00 |
|
Simone Mainardi
|
c9223590d9
|
Workaround to handle \n forcefully set when decoding ZMQ tlv
|
2019-07-31 16:06:15 +02:00 |
|
emanuele-f
|
664d165b2f
|
Add hosts alerts link into flow alerts
|
2019-07-26 13:24:05 +02:00 |
|
Alfredo Cardigliano
|
c63831bfa3
|
Computing L4 protocol statistics for flows
|
2019-07-12 16:27:34 +02:00 |
|
Alfredo Cardigliano
|
54c783f236
|
Filter flows by L4 protocol
|
2019-07-12 14:41:07 +02:00 |
|
Alfredo Cardigliano
|
78fe243d2b
|
Added missing ICMPV6 types descriptions
|
2019-07-12 11:58:56 +02:00 |
|
Alfredo Cardigliano
|
87d1834f13
|
Added missing ICMPV4 type 3 values description
|
2019-07-12 11:46:07 +02:00 |
|
emanuele-f
|
7b936a1a4c
|
Mesbehaving flows documentation
|
2019-07-02 16:32:12 +02:00 |
|
Alfredo Cardigliano
|
b2b5d07aa6
|
Typo fix
|
2019-06-05 11:53:30 +02:00 |
|
Alfredo Cardigliano
|
e9d9204ba7
|
Active flows title with status filter
|
2019-05-20 19:08:35 +02:00 |
|
Alfredo Cardigliano
|
9cdb84a875
|
Implements filtering per flow status in the active flows page
|
2019-05-20 18:54:50 +02:00 |
|
Alfredo Cardigliano
|
0b5668be6d
|
Implements traffic profile filter in the active flows page (#2598)
|
2019-05-20 12:43:51 +02:00 |
|
emanuele-f
|
359d359d09
|
Add ICMP flow filter
Closes #2498
|
2019-05-14 16:40:16 +02:00 |
|
emanuele-f
|
939ca8c166
|
Implement eBPF flows view and improve containers/pods pages
|
2019-04-26 15:34:53 +02:00 |
|
emanuele-f
|
fdc7772519
|
Implement simplified flows page with container filter
|
2019-04-26 10:44:44 +02:00 |
|
Simone Mainardi
|
25785fca62
|
Groups together flow alerts for the same flow in a counter variable
This is to mitigate the number of alerts and implements #2515
|
2019-04-19 16:14:06 +02:00 |
|
Simone Mainardi
|
db44a554c9
|
RTP in flow details fixes
|
2019-04-08 18:28:45 +02:00 |
|
Alfredo Cardigliano
|
34509abce7
|
Safety check in case of no filter
|
2019-03-27 10:28:41 +01:00 |
|
Alfredo Cardigliano
|
ca2e11bc0b
|
Anomalous -> Misbehaving Flows (fixes #2386)
|
2019-03-26 19:36:40 +01:00 |
|
Simone Mainardi
|
3fcb15cda2
|
Handles TCP flags via nProbe
|
2019-03-25 20:31:13 +01:00 |
|
emanuele-f
|
2e92bcbd4e
|
Alert page improvements
|
2019-02-19 13:12:52 +01:00 |
|
Simone Mainardi
|
9a413a5d72
|
Implements TCP states filtering (est., connecting, closed and rst)
Implements #2385
|
2019-02-16 18:19:25 +01:00 |
|
emanuele-f
|
2fa8bf22f0
|
Unify flows and host flows dropdowns
|
2019-02-14 16:16:54 +01:00 |
|
emanuele-f
|
50ee36c11a
|
Alert drilldown links now point to historical flows
|
2019-02-14 11:23:52 +01:00 |
|
Simone Mainardi
|
a15765bb45
|
Fixes print of ZMQ elements with PEN
|
2019-02-12 15:49:18 +01:00 |
|
emanuele-f
|
d1f353a4c5
|
Migrate to Lua 5.3 bitwise operations
https://www.lua.org/manual/5.3/manual.html#3.4.2
|
2018-11-28 11:55:24 +01:00 |
|
emanuele-f
|
6717e3850b
|
Rework l7 policies to properly handle nDPI categories
|
2018-10-15 17:18:27 +02:00 |
|
emanuele-f
|
3802913084
|
Fix block flow button in host flows page
|
2018-10-08 12:22:03 +02:00 |
|
Luca Deri
|
203404df5b
|
Added changes to seamlessly use LuaJIT (default) or the standard (non JIT) Lua
|
2018-06-12 23:05:30 +02:00 |
|
Simone Mainardi
|
06245927f8
|
Adds SNMP information to flows
|
2018-05-15 17:41:59 +02:00 |
|
Luca Deri
|
f0c936c368
|
Updated (C) to 2018
|
2018-03-22 21:59:42 +01:00 |
|
Simone Mainardi
|
dbf2d0b286
|
Adds SIP call parties to the Info field
|
2018-01-02 19:29:19 +01:00 |
|
emanuele-f
|
acac84a6b3
|
Fix flow pass verdict report with quotas
|
2017-12-15 18:00:04 +01:00 |
|
Simone Mainardi
|
aeeb0fa261
|
Reworks flow alerts with JSON and extra info
|
2017-12-13 20:18:39 +01:00 |
|
Luca Deri
|
32bee91c83
|
Added HREF from flows info to flow lists according to flow exporter/interfaces
Improved flow drops report in interfaces
For ZMQ interfaces throughtput is computed with frequency not les than 5 sec to avoid inaccurate computation
|
2017-11-18 15:47:34 +01:00 |
|