Ivan Nardi
028f3d6465
Fix the nDPI confidence of historical flows ( #11161 )
...
- Dump `DPI_PARTIAL_CACHE` as `DPI` in `PROTOCOL_INFO_JSON`, using
`isDPIDetectedFlow()` like the live flows do
- Show the confidence badge in the historical flow details: read it from
`PROTOCOL_INFO_JSON`, `ALERT_JSON` has no proto block
2026-10-30 09:00:23 +01:00
Matteo Biscosi
34bc991ec9
Moved historical flows into router
2026-10-28 13:18:43 +01:00
Matteo Biscosi
d13303a7ab
Optimized modules loading on various pages
2026-10-22 13:04:15 +02:00
Matteo Biscosi
a4840d52d5
Optimized modules loading
2026-10-22 10:56:59 +02:00
GabrieleDeri
b21ea8a372
Alert and flow query optimizations post SQL query ( #11109 )
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-10-21 21:14:50 +02:00
Alfredo Cardigliano
282e37ce68
Add Requested Server Name / SNI column (move the name from the json to the native column)
2026-09-14 17:03:47 +02:00
Manuel Ceroni
c3d09ad9d8
Fixed the empty IPv6 check in historical flows ( #10932 )
2026-09-14 11:56:45 +02:00
Matteo Biscosi
1f6a83c714
Changed timeseries chart scaling
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-09-02 12:03:17 +00:00
Matteo Biscosi
130e746695
Added wazuh alerts check on local hosts only
2026-08-31 15:17:50 +00:00
Matteo Biscosi
ef0b0e9518
Added wazuh alerts hyperlink ( #10858 #10853 )
2026-08-30 15:38:33 +00:00
Manuel Ceroni
fa23b4edc8
Added the SNMP interfaces formatter to various pages ( #10822 )
2026-08-25 12:14:15 +02:00
Alfredo Cardigliano
92ad1a6ece
Fix historical_flow_utils.get_historical_mac
2026-08-25 09:19:39 +02:00
Alfredo Cardigliano
1fc93a8c72
Add application latency column consistent with network latency
2026-08-21 10:17:31 +02:00
Alfredo Cardigliano
7deb869d45
Add next hop and next hop site to CH
2026-08-18 11:16:51 +02:00
Alfredo Cardigliano
4ae9cf797e
Show sites in flow details. Show cli/srv sites in historical flows.
2026-08-17 15:25:51 +02:00
Matteo Biscosi
d8bccabfac
Fixes interface roles moved to in and out
2026-08-14 15:13:08 +00:00
Matteo Biscosi
bf08169dbd
Fixes historical flows custom fields
2026-08-13 15:29:04 +00:00
Alfredo Cardigliano
8ae9d8e989
Rename probe_ip to exporter_ip when used for exporters
2026-07-14 15:47:19 +02:00
Alfredo Cardigliano
8b009ac2f1
Move is<model> Lua functions to pro
2026-06-25 11:33:55 +02:00
Matteo Biscosi
65b5bde601
Removed REST API call from bgp flow details page ( #10431 )
2026-06-05 10:59:06 +00:00
Alfredo Cardigliano
07bcda0c6b
Remove IPv6NumToNormalizedIP (no longer required)
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-06-03 09:08:56 +02:00
Manuel Ceroni
014a09990b
Fixed historical aggregate flows ( #10386 )
2026-05-28 12:30:21 +02:00
Matteo Biscosi
2ea87bcf2e
Fixes double toipv6 function used
2026-05-26 13:49:21 +00:00
Matteo Biscosi
850774ef11
Fixes double loading filters and incorrect filters applyed when opening the report page ( #10361 )
2026-05-26 13:37:11 +00:00
Alfredo Cardigliano
d99b7a29e1
Define ClickHouse function IPv6NumToNormalizedIP to convert IPv6 mapped IPv4
Build / build (push) Has been cancelled
CodeQL / Analyze (push) Has been cancelled
CodeQL / Analyze-1 (push) Has been cancelled
CIFuzz / Fuzzing (address) (push) Has been cancelled
2026-05-23 11:12:47 +02:00
Matteo Biscosi
88d423fb0c
Fixes snmp interface formatting
2026-05-22 07:41:02 +00:00
Manuel Ceroni
d7f05f6b1a
Migrated some ClickHouse columns into the JSON field ( #10369 )
2026-05-21 15:11:58 +02:00
Alfredo Cardigliano
9e03c88772
Add ability to filter based on network site (either cli or srv) in Report
2026-05-21 12:34:57 +02:00
Alfredo Cardigliano
de8dcb3c45
Add ability to filter on src/dst site
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-21 11:54:21 +02:00
Alfredo Cardigliano
1f39bdd4e8
Add missing columns definition
2026-05-21 11:30:01 +02:00
Alfredo Cardigliano
79745c0c8c
Dump client and server tags to historical flows to allow queries like 'src TAGS contains Lab AND dst TAGS contains Production'
2026-05-20 11:58:20 +02:00
Alfredo Cardigliano
a4bd4627aa
Fix hourly aggregated flows
2026-05-14 12:48:53 +02:00
Matteo Biscosi
7a731042b4
Removed site id from old code and added support to networks in site add/edit ( #10322 )
2026-05-14 10:45:36 +00:00
Alfredo Cardigliano
8d779e40c0
Add Tags column in historical flows, flow alerts, host alerts, and ability to add Tags filters.
2026-05-12 17:03:28 +02:00
Alfredo Cardigliano
55ad9c9459
Dump tags also for flow alerts when using sqlite
2026-05-12 15:47:53 +02:00
Alfredo Cardigliano
fb521c1752
Rename labels to tags to avoid confusion as labels was too common. (note: tag filters are now flowfilters)
2026-05-12 11:43:07 +02:00
Matteo Biscosi
9c2f203226
Added first flow dump filter ( #10314 )
2026-05-12 09:18:58 +00:00
Alfredo Cardigliano
2fb8a926ad
Rename tags to flowfilters
2026-05-11 08:46:38 +02:00
Alfredo Cardigliano
41417932bf
Rename tag_utils to flowfilter_utils
Build / build (push) Has been cancelled
CIFuzz / Fuzzing (address) (push) Has been cancelled
CodeQL / Analyze (push) Has been cancelled
CodeQL / Analyze-1 (push) Has been cancelled
2026-05-07 17:18:34 +02:00
Alfredo Cardigliano
3fb6a2203e
Handle IPv4/IPv6 PROBE_IP in historical data
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-07 13:13:11 +02:00
Matteo Biscosi
409481259a
Fixes incorrect import
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-04 09:29:19 +00:00
Alfredo Cardigliano
0b590a1374
Add ability for filter by Label in historical data
2026-04-29 11:32:04 +02:00
Alfredo Cardigliano
f19dfe650b
Store labels in historical flows and show them in the flow list
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-04-28 12:51:24 +02:00
Matteo Biscosi
da64f92a5f
Fixes historical flow details not working
2026-03-26 11:34:06 +00:00
Matteo Biscosi
4a28134e82
Fixes historical throughput column not supporting pps
2026-03-20 10:52:21 +00:00
Alfredo Cardigliano
1d7d5e52a2
Add interface role formatter
2026-03-13 11:57:11 +01:00
Matteo Biscosi
d881e76473
Added support to Interface role filters
2026-03-12 12:10:14 +00:00
Matteo Biscosi
2469c3235b
Fixes ASN historical filter not working
2026-03-02 18:17:41 +00:00
Matteo Biscosi
3effdc4946
Changed exporter site ID type
2026-02-03 15:47:41 +01:00
Alfredo Cardigliano
cb8d44dd5f
Store Exporter Site to historical data
2026-02-03 10:03:37 +01:00