vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 15:39:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Added tls info to alerts (#6073)

Browse source
This commit is contained in:
MatteoBiscosi 2021-11-24 11:36:43 +01:00
parent 064a7121df
commit 2f522c2e6f
2 changed files with 30 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

24
scripts/lua/modules/lua_utils.lua
View file

@ -4715,6 +4715,29 @@ end
-- ##############################################
function addTLSInfoToAlertDescr(msg, alert_json)
if ((alert_json)
and (table.len(alert_json["tls"] or {}) > 0)) then
if alert_json["tls"]["protos.tls.notBefore"] and alert_json["tls"]["protos.tls.notAfter"] then
msg = msg .. string.format(" [%s: %s - %s]",
i18n("flow_details.tls_certificate_validity"),
formatEpoch(alert_json["tls"]["protos.tls.notBefore"]),
formatEpoch(alert_json["tls"]["protos.tls.notAfter"]))
end
if alert_json["tls"]["protos.tls.version"] then
msg = msg .. string.format(" [%s: %s]",
i18n("flow_details.tls_version"),
alert_json["tls"]["protos.tls.version"])
end
end
return msg
end
-- ##############################################
function addBytesInfoToAlertDescr(msg, value)
local predominant_bytes = i18n("traffic_srv_to_cli")
if (value["cli2srv_bytes"] or 0) > (value["srv2cli_bytes"] or 0) then
@ -4734,6 +4757,7 @@ function addExtraFlowInfo(msg, alert_json, value)
msg = addScoreToAlertDescr(msg, ntop.getFlowAlertScore((tonumber(value["alert_id"]))))
msg = addHTTPInfoToAlertDescr(msg, alert_json)
msg = addDNSInfoToAlertDescr(msg, alert_json)
msg = addTLSInfoToAlertDescr(msg, alert_json)
msg = addBytesInfoToAlertDescr(msg, value)
return msg