vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 15:39:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Tracking more user activities: downloaded pcaps, live capture, live extraction, added/deleted users, password changed

Browse source
This commit is contained in:
Alfredo Cardigliano 2018-12-05 00:55:34 +01:00
parent c69c500dd1
commit 23402e7261
3 changed files with 72 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

18
scripts/lua/modules/tracker.lua
View file

@ -18,7 +18,13 @@ function tracker.hook(f, name)
if f_name ~= nil then
local args_print = {}
for k, v in pairs({...}) do
args_print[k] = tostring(v)
if (f_name == 'addUser' and k == 3) or
(f_name == 'resetUserPassword' and k == 4) then
-- hiding password
args_print[k] = ''
else
args_print[k] = tostring(v)
end
end
local jobj = {
@ -28,16 +34,16 @@ function tracker.hook(f, name)
}
local entity = alertEntity("user")
local entity_value = _SESSION["user"]
local entity_value = ternary(_SESSION["user"] ~= nil, _SESSION["user"], 'system')
local alert_type = alertType("alert_user_activity")
local alert_severity = alertSeverity("info")
local alert_json = json.encode(jobj)
local old_iface = interface.getStats().id
interface.select(tostring(getFirstInterfaceId()))
-- tprint(alert_json)
-- local fmt = string.format("%s(%s)\n", f_name, table.concat(args_print or {}, ", "))
-- io.write(fmt)
local old_iface = interface.getStats().id
local sys_iface = getFirstInterfaceId()
interface.select(tostring(sys_iface))
interface.storeAlert(entity, entity_value, alert_type, alert_severity, alert_json)