mirror of
https://github.com/ntop/ntopng.git
synced 2026-05-05 19:15:03 +00:00
Removed no more used parameters
This commit is contained in:
Matteo Biscosi
parent
b0854c85f7
commit
cfb8734d7c
1 changed files with 294 additions and 312 deletions
|
|
@ -3,9 +3,7 @@
|
|||
--
|
||||
local dirs = ntop.getDirs()
|
||||
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
|
||||
package.path = dirs.installdir ..
|
||||
"/scripts/lua/modules/vulnerability_scan/?.lua;" ..
|
||||
package.path
|
||||
package.path = dirs.installdir .. "/scripts/lua/modules/vulnerability_scan/?.lua;" .. package.path
|
||||
|
||||
require "lua_utils"
|
||||
require "flow_utils"
|
||||
|
|
@ -17,8 +15,7 @@ local l4_protocol_list = require "l4_protocol_list"
|
|||
local icmp_utils = require("icmp_utils")
|
||||
|
||||
if ntop.isPro() then
|
||||
package.path = dirs.installdir .. "/scripts/lua/pro/modules/?.lua;" ..
|
||||
package.path
|
||||
package.path = dirs.installdir .. "/scripts/lua/pro/modules/?.lua;" .. package.path
|
||||
end
|
||||
|
||||
-- Trick to handle the application and the categories togheter
|
||||
|
|
@ -30,25 +27,25 @@ local current_ifid = interface.getId()
|
|||
interface.select(ifid)
|
||||
|
||||
if not isEmptyString(application) then
|
||||
if string.starts(application, "cat_") then
|
||||
local category = split(application, "cat_")
|
||||
_GET["category"] = category[2]
|
||||
_GET["application"] = nil
|
||||
end
|
||||
if string.starts(application, "cat_") then
|
||||
local category = split(application, "cat_")
|
||||
_GET["category"] = category[2]
|
||||
_GET["application"] = nil
|
||||
end
|
||||
end
|
||||
|
||||
if not isEmptyString(ip_version_or_host) then
|
||||
if string.starts(ip_version_or_host, "ip_version_") then
|
||||
local version = split(ip_version_or_host, "ip_version_")
|
||||
_GET["version"] = version[2]
|
||||
_GET["flowhosts_type"] = nil
|
||||
else
|
||||
local host = hostkey2hostinfo(ip_version_or_host)
|
||||
if isIPv4(host.host) or isIPv6(host.host) then
|
||||
_GET["host"] = ip_version_or_host
|
||||
_GET["flowhosts_type"] = nil
|
||||
end
|
||||
end
|
||||
if string.starts(ip_version_or_host, "ip_version_") then
|
||||
local version = split(ip_version_or_host, "ip_version_")
|
||||
_GET["version"] = version[2]
|
||||
_GET["flowhosts_type"] = nil
|
||||
else
|
||||
local host = hostkey2hostinfo(ip_version_or_host)
|
||||
if isIPv4(host.host) or isIPv6(host.host) then
|
||||
_GET["host"] = ip_version_or_host
|
||||
_GET["flowhosts_type"] = nil
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
local throughput_type = getThroughputType()
|
||||
|
|
@ -56,342 +53,327 @@ local flows_filter = getFlowsFilter()
|
|||
|
||||
-- column names defined in include/ntop_typedefs.h:682 enum sortField
|
||||
local mapping_column_lua_c = {
|
||||
server = "column_server",
|
||||
client = "column_client",
|
||||
l4_proto = "column_proto_l4",
|
||||
application = "column_ndpi",
|
||||
protocol = "column_protocol",
|
||||
score = "column_score",
|
||||
first_seen = "column_first_seen",
|
||||
last_seen = "column_last_seen",
|
||||
throughput = "column_thpt",
|
||||
bytes = "column_bytes",
|
||||
info = "column_info",
|
||||
flow_exporter = "column_device_ip",
|
||||
in_index = "column_in_index",
|
||||
out_index = "column_out_index",
|
||||
qoe = "column_qoe",
|
||||
cli_asn = "column_cli_asn",
|
||||
srv_asn = "column_srv_asn",
|
||||
transit_asn = "column_transit_asn"
|
||||
server = "column_server",
|
||||
client = "column_client",
|
||||
l4_proto = "column_proto_l4",
|
||||
application = "column_ndpi",
|
||||
protocol = "column_protocol",
|
||||
score = "column_score",
|
||||
first_seen = "column_first_seen",
|
||||
last_seen = "column_last_seen",
|
||||
throughput = "column_thpt",
|
||||
bytes = "column_bytes",
|
||||
info = "column_info",
|
||||
flow_exporter = "column_device_ip",
|
||||
in_index = "column_in_index",
|
||||
out_index = "column_out_index",
|
||||
qoe = "column_qoe",
|
||||
cli_asn = "column_cli_asn",
|
||||
srv_asn = "column_srv_asn",
|
||||
transit_asn = "column_transit_asn"
|
||||
}
|
||||
|
||||
if _GET["start"] and _GET["length"] then
|
||||
flows_filter.perPage = tonumber(_GET["length"])
|
||||
flows_filter.maxHits = tonumber(_GET["length"])
|
||||
flows_filter.toSkip = tonumber(_GET["start"])
|
||||
flows_filter.perPage = tonumber(_GET["length"])
|
||||
flows_filter.maxHits = tonumber(_GET["length"])
|
||||
flows_filter.toSkip = tonumber(_GET["start"])
|
||||
end
|
||||
|
||||
if not isEmptyString(_GET["sort"]) then
|
||||
flows_filter.sortColumn = mapping_column_lua_c[_GET["sort"]]
|
||||
local order = _GET["order"]
|
||||
if order == "asc" then
|
||||
flows_filter.a2zSortOrder = true
|
||||
else
|
||||
flows_filter.a2zSortOrder = false
|
||||
end
|
||||
flows_filter.sortColumn = mapping_column_lua_c[_GET["sort"]]
|
||||
local order = _GET["order"]
|
||||
if order == "asc" then
|
||||
flows_filter.a2zSortOrder = true
|
||||
else
|
||||
flows_filter.a2zSortOrder = false
|
||||
end
|
||||
end
|
||||
|
||||
-- A cheat for retrocompatibility
|
||||
if not isEmptyString(flows_filter.statusFilter) then
|
||||
local alert_severity_groups = require "alert_severity_groups"
|
||||
for alert_severity, value in pairs(alert_severity_groups) do
|
||||
if (alert_severity == flows_filter.statusFilter) then
|
||||
flows_filter.statusSeverityFilter = value.severity_group_id
|
||||
flows_filter.statusFilter = nil
|
||||
break
|
||||
end
|
||||
end
|
||||
local alert_severity_groups = require "alert_severity_groups"
|
||||
for alert_severity, value in pairs(alert_severity_groups) do
|
||||
if (alert_severity == flows_filter.statusFilter) then
|
||||
flows_filter.statusSeverityFilter = value.severity_group_id
|
||||
flows_filter.statusFilter = nil
|
||||
break
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
local rsp = {}
|
||||
local flows_stats = interface.getFlowsInfo(flows_filter["hostFilter"],
|
||||
flows_filter,
|
||||
flows_filter["talkingWith"],
|
||||
flows_filter["client"],
|
||||
flows_filter["server"],
|
||||
flows_filter["flow_info"])
|
||||
local flows_stats = interface.getFlowsInfo(flows_filter["hostFilter"], flows_filter, flows_filter["talkingWith"], flows_filter["client"],
|
||||
flows_filter["server"], flows_filter["flow_info"])
|
||||
|
||||
if not flows_stats then
|
||||
rest_utils.extended_answer(rest_utils.consts.success.ok, {},
|
||||
{["recordsTotal"] = 0})
|
||||
return
|
||||
rest_utils.extended_answer(rest_utils.consts.success.ok, {}, {
|
||||
["recordsTotal"] = 0
|
||||
})
|
||||
return
|
||||
end
|
||||
|
||||
for _, value in ipairs(flows_stats.flows) do
|
||||
local record = {}
|
||||
local record = {}
|
||||
|
||||
local key = value["ntopng.key"]
|
||||
local cli_ip = value["cli.ip"]
|
||||
local srv_ip = value["srv.ip"]
|
||||
local key = value["ntopng.key"]
|
||||
local cli_ip = value["cli.ip"]
|
||||
local srv_ip = value["srv.ip"]
|
||||
|
||||
local info_cli = interface.getHostMinInfo(cli_ip, value["cli.vlan"])
|
||||
local info_srv = interface.getHostMinInfo(srv_ip, value["srv.vlan"])
|
||||
local info_cli = interface.getHostMinInfo(cli_ip, value["cli.vlan"])
|
||||
local info_srv = interface.getHostMinInfo(srv_ip, value["srv.vlan"])
|
||||
|
||||
if not info_cli then
|
||||
info_cli = {
|
||||
host = cli_ip,
|
||||
vlan = value["cli.vlan"],
|
||||
localhost = value["cli.localhost"],
|
||||
systemhost = value["cli.systemhost"]
|
||||
}
|
||||
end
|
||||
if not info_cli then
|
||||
info_cli = {
|
||||
host = cli_ip,
|
||||
vlan = value["cli.vlan"],
|
||||
localhost = value["cli.localhost"],
|
||||
systemhost = value["cli.systemhost"]
|
||||
}
|
||||
end
|
||||
|
||||
if not info_srv then
|
||||
info_srv = {
|
||||
host = srv_ip,
|
||||
vlan = value["srv.vlan"],
|
||||
localhost = value["srv.localhost"],
|
||||
systemhost = value["srv.systemhost"]
|
||||
}
|
||||
end
|
||||
if not info_srv then
|
||||
info_srv = {
|
||||
host = srv_ip,
|
||||
vlan = value["srv.vlan"],
|
||||
localhost = value["srv.localhost"],
|
||||
systemhost = value["srv.systemhost"]
|
||||
}
|
||||
end
|
||||
|
||||
-- ASN data extraction
|
||||
local cli_asn = value['src_as']
|
||||
local srv_asn = value['dst_as']
|
||||
local cli_peer_as = value.src_peer_as
|
||||
local srv_peer_as = value.dst_peer_as
|
||||
local transit_asn = 0
|
||||
local transit_asn_ip = ""
|
||||
-- ASN data extraction
|
||||
local cli_asn = value['src_as']
|
||||
local srv_asn = value['dst_as']
|
||||
local cli_peer_as = value.src_peer_as
|
||||
local srv_peer_as = value.dst_peer_as
|
||||
local transit_asn = 0
|
||||
local transit_asn_ip = ""
|
||||
|
||||
-- Get transit asn from flow
|
||||
if ((cli_peer_as) and (cli_peer_as ~= cli_asn)) then
|
||||
transit_asn = cli_peer_as
|
||||
transit_asn_ip = cli_ip
|
||||
elseif ((srv_peer_as) and (srv_peer_as ~= srv_asn)) then
|
||||
transit_asn = srv_peer_as
|
||||
transit_asn_ip = srv_ip
|
||||
end
|
||||
-- Get transit asn from flow
|
||||
if ((cli_peer_as) and (cli_peer_as ~= cli_asn)) then
|
||||
transit_asn = cli_peer_as
|
||||
transit_asn_ip = cli_ip
|
||||
elseif ((srv_peer_as) and (srv_peer_as ~= srv_asn)) then
|
||||
transit_asn = srv_peer_as
|
||||
transit_asn_ip = srv_ip
|
||||
end
|
||||
|
||||
local cli_asn_data = {
|
||||
asn = cli_asn,
|
||||
name = format_utils.formatASN(cli_asn, true, false)
|
||||
}
|
||||
local cli_asn_data = {
|
||||
asn = cli_asn,
|
||||
name = format_utils.formatASN(cli_asn, true, false)
|
||||
}
|
||||
|
||||
local srv_asn_data = {
|
||||
asn = srv_asn,
|
||||
name = format_utils.formatASN(srv_asn, true, false)
|
||||
}
|
||||
local srv_asn_data = {
|
||||
asn = srv_asn,
|
||||
name = format_utils.formatASN(srv_asn, true, false)
|
||||
}
|
||||
|
||||
local transit_asn_data = {
|
||||
asn = transit_asn or 0,
|
||||
name = format_utils.formatASN(transit_asn or 0, true, false)
|
||||
}
|
||||
local transit_asn_data = {
|
||||
asn = transit_asn or 0,
|
||||
name = format_utils.formatASN(transit_asn or 0, true, false)
|
||||
}
|
||||
|
||||
-- Formatting client column
|
||||
local client = {
|
||||
ip = cli_ip,
|
||||
vlan = value["cli.vlan"],
|
||||
name = hostinfo2label(info_cli, true),
|
||||
port = value["cli.port"],
|
||||
process = {},
|
||||
container = {}
|
||||
}
|
||||
client = format_utils.formatMainAddressCategoryNoHTML(info_cli, client)
|
||||
client.allowed_host = value["cli.allowed_host"] and not interface.isViewed()
|
||||
if client.allowed_host then
|
||||
if value["cli.port"] > 0 or value["proto.l4"] == "TCP" or
|
||||
value["proto.l4"] == "UDP" then
|
||||
client.service_port = ntop.getservbyport(value["cli.port"],
|
||||
string.lower(
|
||||
value["proto.l4"]))
|
||||
end
|
||||
end
|
||||
-- Formatting client column
|
||||
local client = {
|
||||
ip = cli_ip,
|
||||
vlan = value["cli.vlan"],
|
||||
name = hostinfo2label(info_cli, true),
|
||||
port = value["cli.port"],
|
||||
process = {},
|
||||
container = {}
|
||||
}
|
||||
client = format_utils.formatMainAddressCategoryNoHTML(info_cli, client)
|
||||
client.allowed_host = value["cli.allowed_host"] and not interface.isViewed()
|
||||
if client.allowed_host then
|
||||
if value["cli.port"] > 0 or value["proto.l4"] == "TCP" or value["proto.l4"] == "UDP" then
|
||||
client.service_port = ntop.getservbyport(value["cli.port"], string.lower(value["proto.l4"]))
|
||||
end
|
||||
end
|
||||
|
||||
if (value["cli.serialize_by_mac"] and (value["cli.mac"] ~= nil)) then
|
||||
client.mac = value["cli.mac"]
|
||||
end
|
||||
if value["client_process"] and
|
||||
not isEmptyString(value["client_process"]["name"]) then
|
||||
local name = value["client_process"]["name"]
|
||||
client.process.name = name
|
||||
client.process.pid = value["client_process"]["pid"]
|
||||
client.process.pid_name = value["client_process"]["name"]:gsub("'", '')
|
||||
local tmp = split(client.process.pid_name, "/")
|
||||
client.process.process_name = tmp[#tmp]
|
||||
end
|
||||
if value["client_container"] then
|
||||
client.container.id = value["client_container"]["id"]
|
||||
client.container.name = format_utils.formatContainer(
|
||||
value["client_container"])
|
||||
end
|
||||
if (value["cli.serialize_by_mac"] and (value["cli.mac"] ~= nil)) then
|
||||
client.mac = value["cli.mac"]
|
||||
end
|
||||
if value["client_process"] and not isEmptyString(value["client_process"]["name"]) then
|
||||
local name = value["client_process"]["name"]
|
||||
client.process.name = name
|
||||
client.process.pid = value["client_process"]["pid"]
|
||||
client.process.pid_name = value["client_process"]["name"]:gsub("'", '')
|
||||
local tmp = split(client.process.pid_name, "/")
|
||||
client.process.process_name = tmp[#tmp]
|
||||
end
|
||||
if value["client_container"] then
|
||||
client.container.id = value["client_container"]["id"]
|
||||
client.container.name = format_utils.formatContainer(value["client_container"])
|
||||
end
|
||||
|
||||
-- Formatting server column
|
||||
local server = {
|
||||
ip = srv_ip,
|
||||
vlan = value["srv.vlan"],
|
||||
name = hostinfo2label(info_srv, true),
|
||||
port = value["srv.port"],
|
||||
process = {},
|
||||
container = {}
|
||||
}
|
||||
server = format_utils.formatMainAddressCategoryNoHTML(info_srv, server)
|
||||
server.allowed_host = value["srv.allowed_host"] and not interface.isViewed()
|
||||
if server.allowed_host then
|
||||
if value["cli.port"] > 0 or value["proto.l4"] == "TCP" or
|
||||
value["proto.l4"] == "UDP" then
|
||||
server.service_port = ntop.getservbyport(value["srv.port"],
|
||||
string.lower(
|
||||
value["proto.l4"]))
|
||||
end
|
||||
end
|
||||
-- Formatting server column
|
||||
local server = {
|
||||
ip = srv_ip,
|
||||
vlan = value["srv.vlan"],
|
||||
name = hostinfo2label(info_srv, true),
|
||||
port = value["srv.port"],
|
||||
process = {},
|
||||
container = {}
|
||||
}
|
||||
server = format_utils.formatMainAddressCategoryNoHTML(info_srv, server)
|
||||
server.allowed_host = value["srv.allowed_host"] and not interface.isViewed()
|
||||
if server.allowed_host then
|
||||
if value["cli.port"] > 0 or value["proto.l4"] == "TCP" or value["proto.l4"] == "UDP" then
|
||||
server.service_port = ntop.getservbyport(value["srv.port"], string.lower(value["proto.l4"]))
|
||||
end
|
||||
end
|
||||
|
||||
if value["server_process"] and
|
||||
not isEmptyString(value["server_process"]["name"]) then
|
||||
local name = value["server_process"]["name"]
|
||||
server.process.name = name
|
||||
server.process.pid = value["server_process"]["pid"]
|
||||
server.process.pid_name = value["server_process"]["name"]:gsub("'", '')
|
||||
local tmp = split(server.process.pid_name, "/")
|
||||
server.process.process_name = tmp[#tmp]
|
||||
end
|
||||
if value["server_container"] then
|
||||
server.container.id = value["server_container"]["id"]
|
||||
server.container.name = format_utils.formatContainer(
|
||||
value["server_container"])
|
||||
server.container.pod = value["server_container"]["k8s.pod"]
|
||||
end
|
||||
if value["server_process"] and not isEmptyString(value["server_process"]["name"]) then
|
||||
local name = value["server_process"]["name"]
|
||||
server.process.name = name
|
||||
server.process.pid = value["server_process"]["pid"]
|
||||
server.process.pid_name = value["server_process"]["name"]:gsub("'", '')
|
||||
local tmp = split(server.process.pid_name, "/")
|
||||
server.process.process_name = tmp[#tmp]
|
||||
end
|
||||
if value["server_container"] then
|
||||
server.container.id = value["server_container"]["id"]
|
||||
server.container.name = format_utils.formatContainer(value["server_container"])
|
||||
server.container.pod = value["server_container"]["k8s.pod"]
|
||||
end
|
||||
|
||||
-- snmp interface index
|
||||
if (value["in_index"] ~= nil and value["out_index"] ~= nil) then
|
||||
local probe_uuid = 0
|
||||
local in_port_name = ""
|
||||
local out_port_name = ""
|
||||
local device_ip = value["device_ip"]
|
||||
-- snmp interface index
|
||||
if (value["in_index"] ~= nil and value["out_index"] ~= nil) then
|
||||
local probe_uuid = 0
|
||||
local in_port_name = ""
|
||||
local out_port_name = ""
|
||||
local device_ip = value["device_ip"]
|
||||
|
||||
if ntop.isPro() then
|
||||
local snmp_cached_dev = require "snmp_cached_dev"
|
||||
local cached_dev = snmp_cached_dev:get_interfaces(device_ip)
|
||||
in_port_name = format_portidx_name(device_ip, value["in_index"],
|
||||
true,
|
||||
cached_dev["interfaces"][tostring(
|
||||
value["in_index"])])
|
||||
out_port_name = format_portidx_name(device_ip, value["out_index"],
|
||||
true,
|
||||
cached_dev["interfaces"][tostring(
|
||||
value["out_index"])])
|
||||
-- get exporter info
|
||||
local ifstats = interface.getStats()
|
||||
for interface_id, probes_list in pairs(ifstats.probes or {}) do
|
||||
for source_id, probe_info in pairs(probes_list or {}) do
|
||||
local probe_ip = probe_info["probe.ip"]
|
||||
if ntop.isPro() then
|
||||
local snmp_cached_dev = require "snmp_cached_dev"
|
||||
local cached_dev = snmp_cached_dev:get_interfaces(device_ip)
|
||||
in_port_name = format_portidx_name(device_ip, value["in_index"], true)
|
||||
out_port_name = format_portidx_name(device_ip, value["out_index"], true)
|
||||
-- get exporter info
|
||||
local ifstats = interface.getStats()
|
||||
for _, probes_list in pairs(ifstats.probes or {}) do
|
||||
for _, probe_info in pairs(probes_list or {}) do
|
||||
local probe_ip = probe_info["probe.ip"]
|
||||
|
||||
-- get probe uuid if ips match
|
||||
if probe_ip == device_ip then
|
||||
probe_uuid = probe_info["probe.source_id"]
|
||||
end
|
||||
end
|
||||
-- get probe uuid if ips match
|
||||
if probe_ip == device_ip then
|
||||
probe_uuid = probe_info["probe.source_id"]
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
end
|
||||
|
||||
record.flow_exporter = {
|
||||
device = {
|
||||
ip = device_ip,
|
||||
name = device_ip,
|
||||
label = getProbeName(device_ip, false, false, false),
|
||||
probe_uuid = probe_uuid
|
||||
},
|
||||
in_port = {
|
||||
index = value["in_index"],
|
||||
-- last param is short version
|
||||
name = in_port_name
|
||||
},
|
||||
out_port = {
|
||||
index = value["out_index"],
|
||||
-- last param is short version
|
||||
name = out_port_name
|
||||
}
|
||||
}
|
||||
record.flow_exporter = {
|
||||
device = {
|
||||
ip = device_ip,
|
||||
name = device_ip,
|
||||
label = getProbeName(device_ip, false, false, false),
|
||||
probe_uuid = probe_uuid
|
||||
},
|
||||
in_port = {
|
||||
index = value["in_index"],
|
||||
-- last param is short version
|
||||
name = in_port_name
|
||||
},
|
||||
out_port = {
|
||||
index = value["out_index"],
|
||||
-- last param is short version
|
||||
name = out_port_name
|
||||
}
|
||||
}
|
||||
|
||||
if interface.isView() then
|
||||
record.flow_exporter.seen_on_interface = {
|
||||
name = getInterfaceName(value["iface_index"], true),
|
||||
id = value["iface_index"]
|
||||
}
|
||||
end
|
||||
end
|
||||
if interface.isView() then
|
||||
record.flow_exporter.seen_on_interface = {
|
||||
name = getInterfaceName(value["iface_index"], true),
|
||||
id = value["iface_index"]
|
||||
}
|
||||
end
|
||||
end
|
||||
|
||||
if value["predominant_alert"] then
|
||||
record["predominant_alert"] = {
|
||||
severity_id = map_score_to_severity(value["predominant_alert_score"]),
|
||||
name = alert_consts.alertTypeLabel(value["predominant_alert"], true)
|
||||
}
|
||||
end
|
||||
if value["predominant_alert"] then
|
||||
record["predominant_alert"] = {
|
||||
severity_id = map_score_to_severity(value["predominant_alert_score"]),
|
||||
name = alert_consts.alertTypeLabel(value["predominant_alert"], true)
|
||||
}
|
||||
end
|
||||
|
||||
local proto_id = 0
|
||||
local proto_name = ""
|
||||
local proto_id = 0
|
||||
local proto_name = ""
|
||||
|
||||
-- l4_protocol_list.l4_keys entry is like: { "IP", "ip", 0 }
|
||||
for _, proto in pairs(l4_protocol_list.l4_keys) do
|
||||
if proto[1] == value["proto.l4"] or proto[2] == value["proto.l4"] or
|
||||
proto[3] == tonumber(value["proto.l4"]) then
|
||||
proto_id = (proto[3])
|
||||
proto_name = (proto[1])
|
||||
break
|
||||
end
|
||||
end
|
||||
-- l4_protocol_list.l4_keys entry is like: { "IP", "ip", 0 }
|
||||
for _, proto in pairs(l4_protocol_list.l4_keys) do
|
||||
if proto[1] == value["proto.l4"] or proto[2] == value["proto.l4"] or proto[3] == tonumber(value["proto.l4"]) then
|
||||
proto_id = (proto[3])
|
||||
proto_name = (proto[1])
|
||||
break
|
||||
end
|
||||
end
|
||||
|
||||
record["l4_proto"] = {id = proto_id, name = proto_name}
|
||||
record["first_seen"] = value["seen.first"]
|
||||
record["last_seen"] = value["seen.last"]
|
||||
record["key"] = string.format("%u", value["ntopng.key"])
|
||||
record["hash_id"] = string.format("%u", value["hash_entry_id"])
|
||||
record["verdict"] = value["verdict.pass"]
|
||||
record["duration"] = value["duration"]
|
||||
if (((record.l4_proto.id == 58) or (record.l4_proto.id == 1)) -- ICMP or ICMPv6
|
||||
and (value["info"] ~= "")) then
|
||||
local tc = split(value["info"], ",")
|
||||
record["info"] = icmp_utils.get_icmp_label(tc[1], tc[2])
|
||||
else
|
||||
record["info"] = value["info"]
|
||||
end
|
||||
record["periodic_flow"] = value.periodic_flow
|
||||
record["client"] = client
|
||||
record["server"] = server
|
||||
record["cli_asn"] = cli_asn_data
|
||||
record["srv_asn"] = srv_asn_data
|
||||
record["transit_asn"] = transit_asn_data
|
||||
record["l4_proto"] = {
|
||||
id = proto_id,
|
||||
name = proto_name
|
||||
}
|
||||
record["first_seen"] = value["seen.first"]
|
||||
record["last_seen"] = value["seen.last"]
|
||||
record["key"] = string.format("%u", value["ntopng.key"])
|
||||
record["hash_id"] = string.format("%u", value["hash_entry_id"])
|
||||
record["verdict"] = value["verdict.pass"]
|
||||
record["duration"] = value["duration"]
|
||||
if (((record.l4_proto.id == 58) or (record.l4_proto.id == 1)) -- ICMP or ICMPv6
|
||||
and (value["info"] ~= "")) then
|
||||
local tc = split(value["info"], ",")
|
||||
record["info"] = icmp_utils.get_icmp_label(tc[1], tc[2])
|
||||
else
|
||||
record["info"] = value["info"]
|
||||
end
|
||||
record["periodic_flow"] = value.periodic_flow
|
||||
record["client"] = client
|
||||
record["server"] = server
|
||||
record["cli_asn"] = cli_asn_data
|
||||
record["srv_asn"] = srv_asn_data
|
||||
record["transit_asn"] = transit_asn_data
|
||||
|
||||
record["ifid"] = ifid
|
||||
if value.score then record["score"] = value.score.flow_score end
|
||||
record["bytes"] = {
|
||||
total = value["bytes"],
|
||||
cli_bytes = value["cli2srv.bytes"],
|
||||
srv_bytes = value["srv2cli.bytes"]
|
||||
}
|
||||
record["throughput"] = {
|
||||
type = throughput_type,
|
||||
pps = value["throughput_pps"],
|
||||
bps = (8 * value["throughput_bps"] or 0), -- This is in BYTES per seconds, see Flow.cpp:7005!
|
||||
trend = value["throughput_trend_" .. throughput_type]
|
||||
}
|
||||
record["application"] = {
|
||||
confidence_id = value["confidence"],
|
||||
confidence = get_confidence(value["confidence"]),
|
||||
name = value["proto.ndpi"],
|
||||
master_id = value["proto.master_ndpi_id"],
|
||||
app_id = value["proto.ndpi_id"],
|
||||
breed = value["proto.ndpi_breed"],
|
||||
encrypted = value["proto.is_encrypted"]
|
||||
}
|
||||
record["ifid"] = ifid
|
||||
if value.score then
|
||||
record["score"] = value.score.flow_score
|
||||
end
|
||||
record["bytes"] = {
|
||||
total = value["bytes"],
|
||||
cli_bytes = value["cli2srv.bytes"],
|
||||
srv_bytes = value["srv2cli.bytes"]
|
||||
}
|
||||
record["throughput"] = {
|
||||
type = throughput_type,
|
||||
pps = value["throughput_pps"],
|
||||
bps = (8 * value["throughput_bps"] or 0), -- This is in BYTES per seconds, see Flow.cpp:7005!
|
||||
trend = value["throughput_trend_" .. throughput_type]
|
||||
}
|
||||
record["application"] = {
|
||||
confidence_id = value["confidence"],
|
||||
confidence = get_confidence(value["confidence"]),
|
||||
name = value["proto.ndpi"],
|
||||
master_id = value["proto.master_ndpi_id"],
|
||||
app_id = value["proto.ndpi_id"],
|
||||
breed = value["proto.ndpi_breed"],
|
||||
encrypted = value["proto.is_encrypted"]
|
||||
}
|
||||
|
||||
if (not isEmptyString(value["protos.http.last_method"])) then
|
||||
record["application"]["http_method"] = value["protos.http.last_method"]
|
||||
record["application"]["return_code"] =
|
||||
value["protos.http.last_return_code"]
|
||||
record["application"]["rsp_status_code"] =
|
||||
http_utils.getResponseStatusCode(
|
||||
value["protos.http.last_return_code"])
|
||||
end
|
||||
if (not isEmptyString(value["protos.http.last_method"])) then
|
||||
record["application"]["http_method"] = value["protos.http.last_method"]
|
||||
record["application"]["return_code"] = value["protos.http.last_return_code"]
|
||||
record["application"]["rsp_status_code"] = http_utils.getResponseStatusCode(value["protos.http.last_return_code"])
|
||||
end
|
||||
|
||||
if ((value.qoe ~= nil) and (value.qoe.score ~= nil)) then
|
||||
record["qoe"] = value.qoe.score.overall
|
||||
end
|
||||
if ((value.qoe ~= nil) and (value.qoe.score ~= nil)) then
|
||||
record["qoe"] = value.qoe.score.overall
|
||||
end
|
||||
|
||||
rsp[#rsp + 1] = record
|
||||
rsp[#rsp + 1] = record
|
||||
end
|
||||
|
||||
if tostring(current_ifid) ~= tostring(ifid) then interface.select(current_ifid) end
|
||||
if tostring(current_ifid) ~= tostring(ifid) then
|
||||
interface.select(current_ifid)
|
||||
end
|
||||
|
||||
rest_utils.extended_answer(rest_utils.consts.success.ok, rsp,
|
||||
{["recordsTotal"] = flows_stats["numFlows"]})
|
||||
rest_utils.extended_answer(rest_utils.consts.success.ok, rsp, {
|
||||
["recordsTotal"] = flows_stats["numFlows"]
|
||||
})
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue