Implements Local Host behaviour analysis and it's alert

Alert in case the host has an unexpected behaviour
This commit is contained in:
Matteo Biscosi 2021-02-25 12:01:54 +01:00
parent 7a1a9be9af
commit dbfdec34fe
14 changed files with 226 additions and 37 deletions

View file

@ -113,7 +113,8 @@ local alert_keys = {
alert_tcp_syn_scan_victim = {NO_PEN, 98},
alert_remote_to_local_insecure_proto = {NO_PEN, 99},
alert_contacted_peers = {NO_PEN, 100},
alert_unexpected_behaviour = {NO_PEN, 101},
-- Add here additional keys for alerts generated
-- by ntopng plugins
-- WARNING: make sure integers do NOT OVERLAP with