vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-02 00:40:10 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

Shows unhanlded flow risks as issues with score not accounted

Browse source 
Addresses #5402
This commit is contained in:
Simone Mainardi 2021-06-11 18:05:49 +02:00
parent bd5ebabb16
commit cb2aa4b816
2 changed files with 39 additions and 15 deletions
Download patch file Download diff file Expand all files Collapse all files

52
scripts/lua/flow_details.lua
View file

@ -1274,10 +1274,10 @@ else
end
local other_alerts_by_score = {} -- Table used to keep messages ordered by score
if flow["alerts_map"] then
local first = true
local num_statuses = 0
local num_statuses = 0
local first = true
if flow["alerts_map"] then
for _, t in pairsByKeys(alert_consts.alert_types) do
if t.meta and t.meta.alert_key then
local id = t.meta.alert_key
@ -1302,26 +1302,50 @@ else
end
end
end
end
-- Print additional flow statuses (ordered by score and then alphabetically)
if num_statuses > 0 then
for _, messages in pairsByKeys(other_alerts_by_score, rev) do
for _, message in pairsByValues(messages, asc) do
if first then
print("<tr><th width=30%>"..i18n("flow_details.additional_alert_type").."</th><td colspan=2>")
first = false
end
-- ######################################
print(message.."<br />")
end
-- Unhandled flow risk as 'fake' issues with a 'fake' score of zero
if flow["unhandled_flow_risk"] and table.len(flow["unhandled_flow_risk"]) > 0 then
local unhandled_risk_score = 0
local risk = flow["unhandled_flow_risk"]
for risk_str,risk_id in pairs(risk) do
if not other_alerts_by_score[unhandled_risk_score] then
other_alerts_by_score[unhandled_risk_score] = {}
end
print("</td></tr>\n")
local message = string.format("%s [%s: %s]",
risk_str,
i18n("score"),
i18n("score_not_accounted"))
other_alerts_by_score[unhandled_risk_score][#other_alerts_by_score[unhandled_risk_score] + 1] = message
num_statuses = num_statuses + 1
end
end
-- ######################################
-- Print additional flow statuses (ordered by score and then alphabetically)
if num_statuses > 0 then
for _, messages in pairsByKeys(other_alerts_by_score, rev) do
for _, message in pairsByValues(messages, asc) do
if first then
print("<tr><th width=30%>"..i18n("flow_details.additional_alert_type").."</th><td colspan=2>")
first = false
end
print(message.."<br />")
end
end
print("</td></tr>\n")
end
-- ######################################
if(isScoreEnabled() and (flow.score.flow_score > 0)) then
print("\n<tr><th width=30%>"..i18n("flow_details.flow_score").."</th><td>"..format_utils.formatValue(flow.score.flow_score).."</td>\n")