vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 23:49:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Reworks flow alerts with JSON and extra info

Browse source
This commit is contained in:
Simone Mainardi 2017-12-13 20:18:39 +01:00
parent 40ee069b4e
commit aeeb0fa261
14 changed files with 160 additions and 194 deletions
Download patch file Download diff file Expand all files Collapse all files

46
scripts/lua/get_alerts_data.lua
View file

@ -7,6 +7,8 @@ package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
require "lua_utils"
require "alert_utils"
require "flow_utils"
local json = require "dkjson"
sendHTTPContentTypeHeader('text/html')
@ -43,6 +45,47 @@ if num_alerts == nil then
num_alerts = getNumAlerts(status, alert_options)
end
local function record_to_description(alert_entity, record)
-- pretend record is a flow to reuse getFlowLabel
local flow = ""
if alert_entity == "flow" then
flow = {
["cli.ip"] = record["cli_addr"], ["cli.port"] = tonumber(record["cli_port"]),
["cli.blacklisted"] = record["cli_blacklisted"] == "1",
["srv.ip"] = record["srv_addr"], ["srv.port"] = tonumber(record["srv_port"]),
["srv.blacklisted"] = record["srv_blacklisted"] == "1",
["vlan"] = record["vlan_id"]}
local l7proto_name = interface.getnDPIProtoName(tonumber(record["l7_proto"]) or 0)
flow = "["..i18n("flow")..": "..(getFlowLabel(flow, false, true) or "").."] "
if not isEmptyString(l7proto_name) then
flow = flow.."["..i18n("application")..": <A HREF='"..ntop.getHttpPrefix().."/lua/hosts_stats.lua?protocol="..record["l7_proto"].."'> " ..l7proto_name.."</A>] "
end
end
local column_msg = json.decode(record["alert_json"])
if column_msg == nil then
column_msg = string.gsub(record["alert_json"], '"', "'")
else
-- render the json
local msg = ""
if not isEmptyString(record["flow_status"]) then
msg = msg..getFlowStatus(tonumber(record["flow_status"])).." "
end
if not isEmptyString(flow) then
msg = msg..flow.." "
end
if not isEmptyString(column_msg["info"]) then
msg = msg.."["..i18n("info")..": "..column_msg["info"].."] "
end
column_msg = msg
end
return column_msg
end
local alerts = getAlerts(status, alert_options)
if alerts == nil then alerts = {} end
@ -83,7 +126,8 @@ for _key,_value in ipairs(alerts) do
local column_severity = alertSeverityLabel(tonumber(_value["alert_severity"]))
local column_type = alertTypeLabel(tonumber(_value["alert_type"]))
local column_msg = string.gsub(_value["alert_json"], '"', "'")
local column_msg = record_to_description(alert_entity, _value) or ""
local column_id = tostring(alert_id)