vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-05 19:15:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Improve reported scan message

Browse source
This commit is contained in:
Alfredo Cardigliano 2026-01-07 15:21:50 +01:00
parent 245a121d2c
commit f124dab10f
2 changed files with 13 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

19
scripts/lua/modules/alert_definitions/host/host_alert_scan_realtime.lua
View file

@ -21,11 +21,11 @@ local i18n = require "i18n"
local host_alert_scan_realtime = classes.class(alert)
local alert_table = {
[0] = i18n("alert.scan_realtime.incomplete_flows"),
[1] = i18n("alert.scan_realtime.rx_only_scan"),
[2] = i18n("alert.scan_realtime.syn_scan"),
[3] = i18n("alert.scan_realtime.fin_scan"),
[4] = i18n("alert.scan_realtime.rst_scan"),
[0] = { descr = i18n("alert.scan_realtime.incomplete_flows") },
[1] = { descr = i18n("alert.scan_realtime.rx_only_scan"), is_victim = true },
[2] = { descr = i18n("alert.scan_realtime.syn_scan") },
[3] = { descr = i18n("alert.scan_realtime.fin_scan") },
[4] = { descr = i18n("alert.scan_realtime.rst_scan") },
}
-- ##############################################
@ -62,13 +62,16 @@ end
function host_alert_scan_realtime.format(ifid, alert, alert_type_params)
local alert_consts = require("alert_consts")
local entity = alert_consts.formatHostAlert(ifid, alert["ip"], alert["vlan_id"])
local i18n_key
local i18n_key = "alert_messages.scan_realtime"
local alerts = ""
for i, alert in ipairs(alert_type_params.alerts) do
alerts = alerts .. alert_table[alert] .. ", "
alerts = alerts .. alert_table[alert].descr .. ", "
if alert_table[alert].is_victim then
i18n_key = "alert_messages.scan_realtime_victim"
end
end
alerts = string.sub(alerts, 1, -3)
return i18n("alert_messages.scan_realtime",{
return i18n(i18n_key, {
entity = entity,
alerts = alerts
})