Implements #4984 core Internet resources misuse script

scripts/plugins/alerts/network/threshold_cross/user_scripts/host/dns_contacts.lua

@@ -0,0 +1,56 @@
+--
+-- (C) 2019-21 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local user_scripts = require("user_scripts")
+local alert_severities = require "alert_severities"
+
+local script = {
+  -- Script category
+  category = user_scripts.script_categories.security,
+
+  default_enabled = true,
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  default_value = {
+    operator = "gt",
+    threshold = 150,
+    severity = alert_severities.error,
+  },
+
+  -- See below
+  hooks = {},
+
+  gui = {
+    i18n_title = "alerts_thresholds_config.dns_contacts_title",
+    i18n_description = "alerts_thresholds_config.dns_contacts_description",
+    i18n_field_unit = user_scripts.field_units.contacts,
+    input_builder = "threshold_cross",
+    field_max = 500,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local value = host.getFullInfo()
+
+  if value.server_contacts then
+    value = value.server_contacts.dns or 0
+  else
+    value = 0
+  end
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_threshold_cross, value)
+end
+
+-- #################################################################
+
+return script

scripts/plugins/alerts/network/threshold_cross/user_scripts/host/ntp_contacts.lua

@@ -0,0 +1,56 @@
+--
+-- (C) 2019-21 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local user_scripts = require("user_scripts")
+local alert_severities = require "alert_severities"
+
+local script = {
+  -- Script category
+  category = user_scripts.script_categories.security,
+
+  default_enabled = true,
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  default_value = {
+    operator = "gt",
+    threshold = 150,
+    severity = alert_severities.error,
+  },
+
+  -- See below
+  hooks = {},
+
+  gui = {
+    i18n_title = "alerts_thresholds_config.ntp_contacts_title",
+    i18n_description = "alerts_thresholds_config.ntp_contacts_description",
+    i18n_field_unit = user_scripts.field_units.contacts,
+    input_builder = "threshold_cross",
+    field_max = 500,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local value = host.getFullInfo()
+
+  if value.server_contacts then
+    value = value.server_contacts.ntp or 0
+  else
+    value = 0
+  end
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_threshold_cross, value)
+end
+
+-- #################################################################
+
+return script

scripts/plugins/alerts/network/threshold_cross/user_scripts/host/smtp_contacts.lua

@@ -0,0 +1,56 @@
+--
+-- (C) 2019-21 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local user_scripts = require("user_scripts")
+local alert_severities = require "alert_severities"
+
+local script = {
+  -- Script category
+  category = user_scripts.script_categories.network,
+
+  default_enabled = true,
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  default_value = {
+    operator = "gt",
+    threshold = 150,
+    severity = alert_severities.error,
+  },
+
+  -- See below
+  hooks = {},
+
+  gui = {
+    i18n_title = "alerts_thresholds_config.smtp_contacts_title",
+    i18n_description = "alerts_thresholds_config.smtp_contacts_description",
+    i18n_field_unit = user_scripts.field_units.contacts,
+    input_builder = "threshold_cross",
+    field_max = 500,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local value = host.getFullInfo()
+
+  if value.server_contacts then
+    value = value.server_contacts.smtp or 0
+  else
+    value = 0
+  end
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_threshold_cross, value)
+end
+
+-- #################################################################
+
+return script