Added host category to flow and host alerts (#4767)

* Fixed shell endpoint bug and added notice when executing the script

* Added victim and attacker to security plugins

* Updated hosts alert with host_category info

* Added host category to hosts alert description

* Added host category to flows

Co-authored-by: matteo <biscosi@ntop.org>
This commit is contained in:
Matteo Biscosi 2020-11-20 19:14:07 +01:00 committed by GitHub
parent ca19885d71
commit 507583db64
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
21 changed files with 128 additions and 44 deletions

View file

@ -5,6 +5,8 @@
-- #######################################################
local alert_keys = require "alert_keys"
local format_utils = require "format_utils"
local json = require("dkjson")
-- #######################################################
@ -13,7 +15,8 @@ local function formatRemoteToRemoteMessage(ifid, alert, remote_to_remote_info)
local entity = alert_consts.formatAlertEntity(ifid, alert_consts.alertEntityRaw(alert["alert_entity"]), alert["alert_entity_val"])
return i18n("alert_messages.remote_to_remote", {
entity = entity,
entity = entity,
host_category = format_utils.formatAddressCategory((json.decode(alert.alert_json)).alert_generation.host_info),
})
end