Commit graph

211 commits

Author SHA1 Message Date
Ivan Nardi
028f3d6465
Fix the nDPI confidence of historical flows (#11161)
- Dump `DPI_PARTIAL_CACHE` as `DPI` in `PROTOCOL_INFO_JSON`, using
  `isDPIDetectedFlow()` like the live flows do
- Show the confidence badge in the historical flow details: read it from
  `PROTOCOL_INFO_JSON`, `ALERT_JSON` has no proto block
2026-10-30 09:00:23 +01:00
Matteo Biscosi
34bc991ec9 Moved historical flows into router 2026-10-28 13:18:43 +01:00
Matteo Biscosi
d13303a7ab Optimized modules loading on various pages 2026-10-22 13:04:15 +02:00
Matteo Biscosi
a4840d52d5 Optimized modules loading 2026-10-22 10:56:59 +02:00
GabrieleDeri
b21ea8a372
Alert and flow query optimizations post SQL query (#11109)
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-10-21 21:14:50 +02:00
Alfredo Cardigliano
282e37ce68 Add Requested Server Name / SNI column (move the name from the json to the native column) 2026-09-14 17:03:47 +02:00
Manuel Ceroni
c3d09ad9d8
Fixed the empty IPv6 check in historical flows (#10932) 2026-09-14 11:56:45 +02:00
Matteo Biscosi
1f6a83c714 Changed timeseries chart scaling
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-09-02 12:03:17 +00:00
Matteo Biscosi
130e746695 Added wazuh alerts check on local hosts only 2026-08-31 15:17:50 +00:00
Matteo Biscosi
ef0b0e9518 Added wazuh alerts hyperlink (#10858 #10853) 2026-08-30 15:38:33 +00:00
Manuel Ceroni
fa23b4edc8
Added the SNMP interfaces formatter to various pages (#10822) 2026-08-25 12:14:15 +02:00
Alfredo Cardigliano
92ad1a6ece Fix historical_flow_utils.get_historical_mac 2026-08-25 09:19:39 +02:00
Alfredo Cardigliano
1fc93a8c72 Add application latency column consistent with network latency 2026-08-21 10:17:31 +02:00
Alfredo Cardigliano
7deb869d45 Add next hop and next hop site to CH 2026-08-18 11:16:51 +02:00
Alfredo Cardigliano
4ae9cf797e Show sites in flow details. Show cli/srv sites in historical flows. 2026-08-17 15:25:51 +02:00
Matteo Biscosi
d8bccabfac Fixes interface roles moved to in and out 2026-08-14 15:13:08 +00:00
Matteo Biscosi
bf08169dbd Fixes historical flows custom fields 2026-08-13 15:29:04 +00:00
Alfredo Cardigliano
8ae9d8e989 Rename probe_ip to exporter_ip when used for exporters 2026-07-14 15:47:19 +02:00
Alfredo Cardigliano
8b009ac2f1 Move is<model> Lua functions to pro 2026-06-25 11:33:55 +02:00
Matteo Biscosi
65b5bde601 Removed REST API call from bgp flow details page (#10431) 2026-06-05 10:59:06 +00:00
Alfredo Cardigliano
07bcda0c6b Remove IPv6NumToNormalizedIP (no longer required)
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-06-03 09:08:56 +02:00
Manuel Ceroni
014a09990b
Fixed historical aggregate flows (#10386) 2026-05-28 12:30:21 +02:00
Matteo Biscosi
2ea87bcf2e Fixes double toipv6 function used 2026-05-26 13:49:21 +00:00
Matteo Biscosi
850774ef11 Fixes double loading filters and incorrect filters applyed when opening the report page (#10361) 2026-05-26 13:37:11 +00:00
Alfredo Cardigliano
d99b7a29e1 Define ClickHouse function IPv6NumToNormalizedIP to convert IPv6 mapped IPv4
Some checks failed
Build / build (push) Has been cancelled
CodeQL / Analyze (push) Has been cancelled
CodeQL / Analyze-1 (push) Has been cancelled
CIFuzz / Fuzzing (address) (push) Has been cancelled
2026-05-23 11:12:47 +02:00
Matteo Biscosi
88d423fb0c Fixes snmp interface formatting 2026-05-22 07:41:02 +00:00
Manuel Ceroni
d7f05f6b1a
Migrated some ClickHouse columns into the JSON field (#10369) 2026-05-21 15:11:58 +02:00
Alfredo Cardigliano
9e03c88772 Add ability to filter based on network site (either cli or srv) in Report 2026-05-21 12:34:57 +02:00
Alfredo Cardigliano
de8dcb3c45 Add ability to filter on src/dst site
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-21 11:54:21 +02:00
Alfredo Cardigliano
1f39bdd4e8 Add missing columns definition 2026-05-21 11:30:01 +02:00
Alfredo Cardigliano
79745c0c8c Dump client and server tags to historical flows to allow queries like 'src TAGS contains Lab AND dst TAGS contains Production' 2026-05-20 11:58:20 +02:00
Alfredo Cardigliano
a4bd4627aa Fix hourly aggregated flows 2026-05-14 12:48:53 +02:00
Matteo Biscosi
7a731042b4 Removed site id from old code and added support to networks in site add/edit (#10322) 2026-05-14 10:45:36 +00:00
Alfredo Cardigliano
8d779e40c0 Add Tags column in historical flows, flow alerts, host alerts, and ability to add Tags filters. 2026-05-12 17:03:28 +02:00
Alfredo Cardigliano
55ad9c9459 Dump tags also for flow alerts when using sqlite 2026-05-12 15:47:53 +02:00
Alfredo Cardigliano
fb521c1752 Rename labels to tags to avoid confusion as labels was too common. (note: tag filters are now flowfilters) 2026-05-12 11:43:07 +02:00
Matteo Biscosi
9c2f203226 Added first flow dump filter (#10314) 2026-05-12 09:18:58 +00:00
Alfredo Cardigliano
2fb8a926ad Rename tags to flowfilters 2026-05-11 08:46:38 +02:00
Alfredo Cardigliano
41417932bf Rename tag_utils to flowfilter_utils
Some checks failed
Build / build (push) Has been cancelled
CIFuzz / Fuzzing (address) (push) Has been cancelled
CodeQL / Analyze (push) Has been cancelled
CodeQL / Analyze-1 (push) Has been cancelled
2026-05-07 17:18:34 +02:00
Alfredo Cardigliano
3fb6a2203e Handle IPv4/IPv6 PROBE_IP in historical data
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-07 13:13:11 +02:00
Matteo Biscosi
409481259a Fixes incorrect import
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-04 09:29:19 +00:00
Alfredo Cardigliano
0b590a1374 Add ability for filter by Label in historical data 2026-04-29 11:32:04 +02:00
Alfredo Cardigliano
f19dfe650b Store labels in historical flows and show them in the flow list
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-04-28 12:51:24 +02:00
Matteo Biscosi
da64f92a5f Fixes historical flow details not working 2026-03-26 11:34:06 +00:00
Matteo Biscosi
4a28134e82 Fixes historical throughput column not supporting pps 2026-03-20 10:52:21 +00:00
Alfredo Cardigliano
1d7d5e52a2 Add interface role formatter 2026-03-13 11:57:11 +01:00
Matteo Biscosi
d881e76473 Added support to Interface role filters 2026-03-12 12:10:14 +00:00
Matteo Biscosi
2469c3235b Fixes ASN historical filter not working 2026-03-02 18:17:41 +00:00
Matteo Biscosi
3effdc4946 Changed exporter site ID type 2026-02-03 15:47:41 +01:00
Alfredo Cardigliano
cb8d44dd5f Store Exporter Site to historical data 2026-02-03 10:03:37 +01:00