Add SRC_LABEL/DST_LABEL to hourly flows

This commit is contained in:
Alfredo Cardigliano 2023-08-23 10:12:27 +02:00
parent 68172fc882
commit 98504cc1b4
3 changed files with 12 additions and 0 deletions

View file

@ -1068,6 +1068,8 @@ local aggregated_flow_columns = {
['L7_PROTO_MASTER'] = { tag = "l7proto_master", dt_func = dt_format_l7_proto, simple_dt_func = interface.getnDPIProtoName },
['NUM_FLOWS'] = { tag = "flows_number", dt_func = dt_format_high_number },
['FLOW_RISK'] = { tag = "flow_risk", dt_func = dt_format_flow_risk },
['SRC_LABEL'] = { tag = "cli_name" },
['DST_LABEL'] = { tag = "srv_name" },
['SRC_MAC'] = { tag = "cli_mac", dt_func = dt_format_mac },
['DST_MAC'] = { tag = "srv_mac", dt_func = dt_format_mac },
['PROBE_IP'] = { tag = "probe_ip", dt_func = dt_format_probe, select_func = "IPv4NumToString", where_func = "IPv4StringToNum" },
@ -1134,6 +1136,8 @@ historical_flow_utils.min_aggregated_flow_db_columns = {
"IPV4_DST_ADDR",
"IPV6_SRC_ADDR",
"IPV6_DST_ADDR",
"SRC_LABEL",
"DST_LABEL",
"IP_DST_PORT",
"L7_PROTO",
"L7_PROTO_MASTER",