mirror of
https://github.com/ntop/ntopng.git
synced 2026-05-03 09:20:10 +00:00
Implements trigger alert for TCP flows with no data exchanged
Implements #2801
This commit is contained in:
parent
6f29186743
commit
1cd7c288e2
13 changed files with 260 additions and 1 deletions
|
|
@ -0,0 +1,13 @@
|
|||
--
|
||||
-- (C) 2020 - ntop.org
|
||||
--
|
||||
|
||||
return {
|
||||
tcp_no_data_exchanged_description = "Trigger an alert when a flow TCP end and no data were exchanged",
|
||||
tcp_no_data_exchanged_title = "No Data Exchanged",
|
||||
|
||||
-- ####################### Alert strings
|
||||
|
||||
alert_tcp_no_data_exchanged_title = "No Data Exchanged",
|
||||
alert_tcp_no_data_exchanged_description = "TCP Flow Ended and no Data were Exchanged",
|
||||
}
|
||||
|
|
@ -0,0 +1,19 @@
|
|||
--
|
||||
-- (C) 2020 - ntop.org
|
||||
--
|
||||
|
||||
return {
|
||||
zero_tcp_window_description = "Emette un allarme quando la TCP window di un flusso ha dimensione zero",
|
||||
zero_tcp_window_title = "TCP Window Zero",
|
||||
|
||||
-- ####################### Status strings
|
||||
|
||||
status_zero_tcp_window_description = "La TCP window è zero",
|
||||
status_zero_tcp_window_description_c2s = "La TCP window del client è zero",
|
||||
status_zero_tcp_window_description_s2c = "La TCP window del server è zero",
|
||||
|
||||
-- ####################### Alert strings
|
||||
|
||||
alert_zero_tcp_window_title = "TCP Window Zero",
|
||||
alert_zero_tcp_window_description = "La TCP Window è Zero",
|
||||
}
|
||||
|
|
@ -0,0 +1,10 @@
|
|||
--
|
||||
-- (C) 2020 - ntop.org
|
||||
--
|
||||
|
||||
return {
|
||||
title = "No Data Exchanged check",
|
||||
description = "Detects if no data were exchanged in a flow TCP, if it is triggers an alert",
|
||||
author = "ntop",
|
||||
dependencies = {},
|
||||
}
|
||||
|
|
@ -0,0 +1,39 @@
|
|||
--
|
||||
-- (C) 2020 - ntop.org
|
||||
--
|
||||
|
||||
local alerts_api = require("alerts_api")
|
||||
local alert_severities = require "alert_severities"
|
||||
local user_scripts = require("user_scripts")
|
||||
local alert_consts = require("alert_consts")
|
||||
|
||||
local script
|
||||
|
||||
-- #################################################################
|
||||
|
||||
script = {
|
||||
packet_interface_only = true,
|
||||
|
||||
-- Script category
|
||||
category = user_scripts.script_categories.network,
|
||||
|
||||
-- NB atm working only for packet interfaces
|
||||
packet_interface_only = true,
|
||||
l4_proto = "tcp",
|
||||
|
||||
-- This script is only for alerts generation
|
||||
is_alert = true,
|
||||
|
||||
default_value = {
|
||||
severity = alert_severities.warning,
|
||||
},
|
||||
|
||||
gui = {
|
||||
i18n_title = "tcp_no_data_exchanged.tcp_no_data_exchanged_title",
|
||||
i18n_description = "tcp_no_data_exchanged.tcp_no_data_exchanged_description",
|
||||
}
|
||||
}
|
||||
|
||||
-- #################################################################
|
||||
|
||||
return script
|
||||
Loading…
Add table
Add a link
Reference in a new issue