vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-04-29 07:29:32 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Implements skeleton to drilldown historical flows from alerts

Browse source 
Addresses #5326
This commit is contained in:
Simone Mainardi 2021-07-28 17:19:44 +02:00
parent 0043e9c0d6
commit b6913c946d
4 changed files with 74 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

17
scripts/lua/modules/alert_definitions/host/host_alert_dns_server_contacts.lua
View file

@ -63,4 +63,21 @@ end
-- #######################################################
function host_alert_dns_server_contacts.filter_to_past_flows(ifid, alert, alert_type_params)
local res = {}
local host_key = hostinfo2hostkey({ip = alert["ip"], vlan = alert["vlan_id"]})
if alert["is_client"] == true or alert["is_client"] == "1" then
res["client_ip"] = host_key
elseif alert["is_server"] == true or alert["is_server"] == "1" then
res["server_ip"] = host_key
end
res["l7_proto"] = "DNS"
return res
end
-- #######################################################
return host_alert_dns_server_contacts