vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 07:29:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

IDS alert -> External alert

Browse source
This commit is contained in:
Alfredo Cardigliano 2019-10-09 11:35:51 +02:00
parent b203201b91
commit 7e9678de37
18 changed files with 72 additions and 60 deletions
Download patch file Download diff file Expand all files Collapse all files

16
scripts/lua/modules/lua_utils.lua
View file

@ -2451,9 +2451,9 @@ function formatIDSFlowAlert(flowstatus_info)
return i18n("alerts_dashboard.ids_alert")
end
local signature = (flowstatus_info.ids_alert and flowstatus_info.ids_alert.signature)
local category = (flowstatus_info.ids_alert and flowstatus_info.ids_alert.category)
local severity = (flowstatus_info.ids_alert and flowstatus_info.ids_alert.severity)
local signature = (flowstatus_info.external_alert and flowstatus_info.external_alert.signature)
local category = (flowstatus_info.external_alert and flowstatus_info.external_alert.category)
local severity = (flowstatus_info.external_alert and flowstatus_info.external_alert.severity)
local signature_info = (signature and signature:split(" "));
local maker = (signature_info and table.remove(signature_info, 1))
local scope = (signature_info and table.remove(signature_info, 1))
@ -2467,6 +2467,12 @@ end
-- ###############################################
function formatExternalFlowAlert(flowstatus_info)
return formatIDSFlowAlert(flowstatus_info)
end
-- ###############################################
function formatElephantFlowAlert(flowstatus_info, local2remote)
local threshold = ""
local res = ""
@ -2624,8 +2630,8 @@ function getFlowStatus(status, flowstatus_info, alert, no_icon)
res = formatElephantFlowAlert(flowstatus_info, false --[[ remote 2 local --]])
elseif(status == flow_consts.status_longlived) then
res = formatLongLivedFlowAlert(flowstatus_info)
elseif(status == flow_consts.status_ids_alert) then
res = formatIDSFlowAlert(flowstatus_info)
elseif(status == flow_consts.status_external_alert) then
res = formatExternalFlowAlert(flowstatus_info)
elseif(status == flow_consts.status_tcp_severe_connection_issues) then
res = i18n("flow_details.tcp_severe_connection_issues")
elseif(status == flow_consts.status_malicious_signature) then res = formatMaliciousSignature(flowstatus_info)