Add support for custom categories lists

- Extend malware hosts from list
- Read web mining hosts from list and generate alerts
This commit is contained in:
emanuele-f 2018-05-10 17:07:02 +02:00
parent 0a0d2d76ee
commit 89d203883f
20 changed files with 2262 additions and 111 deletions

View file

@ -646,7 +646,12 @@ function formatRawFlow(record, flow_json)
msg = msg..flow.." "
end
if not isEmptyString(decoded["info"]) then
msg = msg.."["..i18n("info")..": "..decoded["info"].."] "
local lb = ""
if (record["flow_status"] == "13") -- blacklisted flow
and (not flow["srv.blacklisted"]) and (not flow["cli.blacklisted"]) then
lb = " <i class='fa fa-ban' aria-hidden='true' title='Blacklisted'></i>"
end
msg = msg.."["..i18n("info")..": "..decoded["info"]..lb.."] "
end
flow = msg