vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 23:49:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

mplements layer-4 protocol as filter for flow user scripts

Browse source
This commit is contained in:
Simone Mainardi 2021-02-12 16:25:45 +01:00
parent c0ee292530
commit 6d651f0661
3 changed files with 26 additions and 6 deletions
Download patch file Download diff file Expand all files Collapse all files

18
scripts/lua/modules/user_scripts.lua
View file

@ -84,7 +84,7 @@ local available_subdirs = {
-- User script execution filters (field names are those that arrive from the C Flow.cpp)
filter = {
-- Default fields populated automatically when creating filters
default_fields = {"srv_addr", "srv_port", "l7_proto"},
default_fields = {"srv_addr", "srv_port", "l7_proto", "proto" },
-- All possible filter fields
available_fields = {
cli_addr = {
@ -106,17 +106,25 @@ local available_subdirs = {
l7_proto = {
lint = http_lint.validateProtocolIdOrName,
match = function(context, val)
-- If val is the protocol name, then it is converted to protocol id
-- If val is the application name, then it is converted to application id
if not tonumber(val) then val = interface.getnDPIProtoId(val) end
-- For integers represented as strings
val = tonumber(val)
-- Check for equality on either the master or application protocol
-- Check for equality on either the master or application ids
return flow.getnDPIMasterProtoId() == val or flow.getnDPIAppProtoId() == val
end
},
proto = {
lint = http_lint.validateProtocolIdOrName,
match = function(context, val)
-- If val is the protocol name, then it is converted to L4 protocol id
if not tonumber(val) then val = l4_proto_to_id(val) end
-- Check for equality on either the master or application protocol
return flow.getProtocol() == tonumber(val)
end
}
-- proto = http_lint.validateProtocolIdOrName,
-- info = http_lint.validateUnquoted,
},
},
},
-- No pools for flows
}, {