Implemented alert generation for suspicious probing attempts

Refactored code for historical traffic analysis
Added various HTML anchors to quick jump to historical reports if -F is used (Pro version only)
This commit is contained in:
Luca Deri 2016-06-15 11:37:52 +02:00
parent 31c874e113
commit 46e0fef38b
8 changed files with 95 additions and 43 deletions

View file

@ -450,8 +450,10 @@ for _key, _value in pairsByValues(vals, funct) do
-- if(value["category"] ~= nil) then print (", \"column_category\" : \"" .. value["category"] .. "\", ") else print (",") end
print (", \"column_proto_l4\" : \"")
if(interface.isPacketInterface() and value["flow.status"] ~= 0) then
print("<i class='fa fa-warning fa-lg' style='color: orange;'></i> ")
if(interface.isPacketInterface()) then
if(value["flow.status"] ~= 0) then
print("<i class='fa fa-warning fa-lg' style='color: orange;'></i> ")
end
end
if ((((value["proto.l4"] == "TCP") or (value["proto.l4"] == "UDP")))