vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-02 08:50:12 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Implements builders for each flow status definition

Browse source 
[FlowsK] alert_blacklisted_country.lua

[FlowsK] alert_flow_blacklisted.lua

[FlowsK] alert_device_protocol_not_allowed.lua

[FlowsK] external_alert.lua

[FlowsK] alert_potentially_dangerous_protocol.lua

[FlowsK] tls_certificate_mismatch.lua

[FlowsK] tls_certificate_expired.lua

[FlowsK] tls_malicious_signature.lua

[FlowsK] elephant_flows.lua

[FlowsK] not_purged.lua

[FlowsK] web_mining.lua

[FlowsK] potentially_dangerous.lua

[FlowsK] alert_flow_blocked.lua
This commit is contained in:
Simone Mainardi 2020-04-27 12:42:26 +02:00
parent f323aa741c
commit ab1690ad9e
18 changed files with 258 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

14
scripts/plugins/device_application_not_allowed/user_scripts/flow/device_protocol_not_allowed.lua
View file

@ -47,8 +47,18 @@ function script.hooks.protocolDetected(now)
srv_score = 80
end
flow.triggerStatus(flow_consts.status_types.status_device_protocol_not_allowed, alert_info,
flow_score, cli_score, srv_score)
flow.triggerStatus(
flow_consts.status_types.status_device_protocol_not_allowed.builder(
flow_consts.status_types.status_device_protocol_not_allowed.alert_severity,
alert_info["cli.devtype"],
alert_info["srv.devtype"],
alert_info["devproto_forbidden_peer"],
alert_info["devproto_forbidden_id"]
),
flow_score,
cli_score,
srv_score
)
end
end