vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-05 02:16:39 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Score changes

Browse source 
- Move score from status definition to user scripts
- Separate flow score counter from the peers score
- Create a new HostScore class to hold the score data
This commit is contained in:
emanuele-f 2020-01-16 18:09:21 +01:00
parent 38facb051a
commit 566b9ece0b
29 changed files with 162 additions and 126 deletions
Download patch file Download diff file Expand all files Collapse all files

9
scripts/plugins/device_application_not_allowed/user_scripts/flow/device_protocol_not_allowed.lua
View file

@ -24,6 +24,8 @@ local script = {
function script.hooks.protocolDetected(now)
if(flow.isDeviceProtocolNotAllowed()) then
local proto_info = flow.getDeviceProtoAllowedInfo()
local flow_score = 80
local cli_score, srv_score
local alert_info = {
["cli.devtype"] = proto_info["cli.devtype"],
@ -33,12 +35,17 @@ function script.hooks.protocolDetected(now)
if(not proto_info["cli.allowed"]) then
alert_info["devproto_forbidden_peer"] = "cli"
alert_info["devproto_forbidden_id"] = proto_info["cli.disallowed_proto"]
cli_score = 80
srv_score = 5
else
alert_info["devproto_forbidden_peer"] = "srv"
alert_info["devproto_forbidden_id"] = proto_info["srv.disallowed_proto"]
cli_score = 5
srv_score = 80
end
flow.triggerStatus(flow_consts.status_types.status_device_protocol_not_allowed.status_id, alert_info)
flow.triggerStatus(flow_consts.status_types.status_device_protocol_not_allowed.status_id, alert_info,
flow_score, cli_score, srv_score)
end
end