vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-02 00:40:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Implemented alert generation for suspicious probing attempts

Browse source 
Refactored code for historical traffic analysis
Added various HTML anchors to quick jump to historical reports if -F is used (Pro version only)
This commit is contained in:
Luca Deri 2016-06-15 11:37:52 +02:00
parent 31c874e113
commit 46e0fef38b
8 changed files with 95 additions and 43 deletions
Download patch file Download diff file Expand all files Collapse all files

8
scripts/lua/flow_details.lua
View file

@ -109,6 +109,8 @@ else
flow = interface.findFlowByKey(tonumber(flow_key))
end
local ifid = interface.name2id(ifname)
if(flow == nil) then
print('<div class=\"alert alert-danger\"><i class="fa fa-warning fa-lg"></i> This flow cannot be found. '.. purgedErrorString()..'</div>')
else
@ -173,6 +175,7 @@ else
print(getApplicationLabel(flow["proto.ndpi"]).." ("..flow["proto.ndpi_id"]..")")
print("</A> ".. formatBreed(flow["proto.ndpi_breed"]))
if(flow["verdict.pass"] == false) then print("</strike>") end
historicalProtoHostHref(ifid, nil, nil, flow["proto.ndpi_id"], flow["ssl.certificate"])
print("</td>")
if(ifstats.inline) then
@ -307,8 +310,9 @@ else
if(flow["ssl.certificate"] ~= nil) then
print("<tr><th width=30%><i class='fa fa-lock fa-lg'></i> SSL Certificate</th><td colspan=2>")
print("<A HREF=\"http://"..flow["ssl.certificate"].."\">"..flow["ssl.certificate"].."</A> <i class=\"fa fa-external-link\">")
print("<A HREF=\"http://"..flow["ssl.certificate"].."\">"..flow["ssl.certificate"].."</A> <i class=\"fa fa-external-link\"></i>")
if(flow["category"] ~= nil) then print(" "..getCategoryIcon(flow["ssl.certificate"], flow["category"])) end
historicalProtoHostHref(ifid, nil, nil, nil, flow["ssl.certificate"])
print("</td></tr>\n")
end
@ -576,7 +580,7 @@ function update () {
url: ']]
print (ntop.getHttpPrefix())
print [[/lua/flow_stats.lua',
data: { ifname: "]] print(tostring(interface.name2id(ifname))) print [[", flow_key: "]] print(flow_key) print [[" },
data: { ifname: "]] print(tostring(ifid)) print [[", flow_key: "]] print(flow_key) print [[" },
success: function(content) {
var rsp = jQuery.parseJSON(content);
$('#first_seen').html(rsp["seen.first"]);