Reworks plugin loading and structure

Implements #4358

scripts/plugins/alerts/security/syn_flood/user_scripts/host/syn_flood_attacker.lua

@@ -0,0 +1,49 @@
+--
+-- (C) 2019-20 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local user_scripts = require("user_scripts")
+
+local script = {
+  -- Script category
+  category = user_scripts.script_categories.security,
+
+  default_enabled = true,
+  default_value = {
+    -- "> 50"
+    operator = "gt",
+    threshold = 50,
+  },
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  -- See below
+  hooks = {},
+
+  gui = {
+    i18n_title = "entity_thresholds.syn_attacker_title",
+    i18n_description = "entity_thresholds.syn_attacker_description",
+    i18n_field_unit = user_scripts.field_units.syn_sec,
+    input_builder = "threshold_cross",
+    field_max = 65535,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local sf = host.getSynFlood()
+  local value = sf["hits.syn_flood_attacker"] or 0
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_tcp_syn_flood, value)
+end
+
+-- #################################################################
+
+return script

scripts/plugins/alerts/security/syn_flood/user_scripts/host/syn_flood_victim.lua

@@ -0,0 +1,49 @@
+--
+-- (C) 2019-20 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local user_scripts = require("user_scripts")
+
+local script = {
+  -- Script category
+  category = user_scripts.script_categories.security,
+
+  default_enabled = true,
+  default_value = {
+    -- "> 50"
+    operator = "gt",
+    threshold = 50,
+  },
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  -- See below
+  hooks = {},
+
+  gui = {
+    i18n_title = "entity_thresholds.syn_victim_title",
+    i18n_description = "entity_thresholds.syn_victim_description",
+    i18n_field_unit = user_scripts.field_units.syn_sec,
+    input_builder = "threshold_cross",
+    field_max = 65535,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local sf = host.getSynFlood()
+  local value = sf["hits.syn_flood_victim"] or 0
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_tcp_syn_flood, value)
+end
+
+-- #################################################################
+
+return script

scripts/plugins/alerts/security/syn_flood/user_scripts/network/syn_flood_victim.lua

@@ -0,0 +1,43 @@
+--
+-- (C) 2019-20 - ntop.org
+--
+
+local alerts_api = require("alerts_api")
+local alert_consts = require("alert_consts")
+local user_scripts = require("user_scripts")
+
+local script = {
+  -- Script category
+  category = user_scripts.script_categories.security,
+
+  default_enabled = false,
+
+  -- See below
+  hooks = {},
+
+  -- This script is only for alerts generation
+  is_alert = true,
+
+  gui = {
+    i18n_title = "entity_thresholds.syn_victim_title",
+    i18n_description = "entity_thresholds.syn_victim_description",
+    i18n_field_unit = user_scripts.field_units.syn_sec,
+    input_builder = "threshold_cross",
+    field_max = 65535,
+    field_min = 1,
+    field_operator = "gt";
+  }
+}
+
+-- #################################################################
+
+function script.hooks.min(params)
+  local value = params.entity_info["hits.syn_flood_victim"] or 0
+
+  -- Check if the configured threshold is crossed by the value and possibly trigger an alert
+  alerts_api.checkThresholdAlert(params, alert_consts.alert_types.alert_tcp_syn_flood, value)
+end
+
+-- #################################################################
+
+return script