vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-01 00:19:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Reworked MAC/IP Reassociation alert used to detect spoofind and MITM (Man In The Middle) Attacks

Browse source
This commit is contained in:
Luca Deri 2022-05-15 19:17:18 +02:00
parent cdbb0e5380
commit b0158f89c2
10 changed files with 51 additions and 45 deletions
Download patch file Download diff file Expand all files Collapse all files

27
scripts/lua/modules/check_definitions/host/host_mac_reassociation.lua Normal file
View file

@ -0,0 +1,27 @@
--
-- (C) 2019-22 - ntop.org
--
local checks = require("checks")
local host_alert_keys = require "host_alert_keys"
-- #################################################################
local score_threshold = {
-- Script category
category = checks.check_categories.security,
default_enabled = true,
alert_id = host_alert_keys.host_alert_normal,
gui = {
i18n_title = "alerts_thresholds_config.host_mac_reassociation_title",
i18n_description = "alerts_thresholds_config.host_mac_reassociation_description",
i18n_field_unit = checks.field_units.score,
}
}
-- #################################################################
return score_threshold