Added new flow alert hook

This commit is contained in:
MatteoBiscosi 2021-12-17 17:58:14 +01:00
parent ce7e93ae89
commit f1a6000350
2 changed files with 2 additions and 0 deletions

View file

@ -33,6 +33,7 @@ Checks execution for flows consists in ntopng calling for every flow:
- :code:`FlowCheck::protocolDetected` as soon as the Layer-7 is detected
- :code:`FlowCheck::periodicUpdate` approximately every 300 seconds only for flows with a minimum duration of 300 seconds
- :code:`FlowCheck::flowEnd` as soon as the flow ends, i.e., when a TCP session is closed or when an UDP flow timeouts
- :code:`FlowCheck::flowBegin` as soon as the flow is seen for the first time
Every flow check, when subclassing :code:`FlowCheck`, must override one or more of the methods above to implement the desired check behavior.

View file

@ -21,6 +21,7 @@ Available hooks for flow checks are the following:
- :code:`statusChanged`: Called when the internal status of the flow has changed since the previous invocation.
- :code:`periodicUpdate`: Called every few minutes on long-lived flows.
- :code:`flowEnd`: Called when the flow is considered finished.
- :code:`flowBegin`: Called when the flow is seen for the first time.
- :code:`all`: A special hook which will cause the associated check to be called for all the available hooks.
Flow Check Hooks Parameters