-- -- (C) 2013-24 - ntop.org -- local dirs = ntop.getDirs() package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path package.path = dirs.installdir .. "/scripts/lua/modules/vulnerability_scan/?.lua;" .. package.path require "lua_utils" local json = require "dkjson" local custom_column_utils = require "custom_column_utils" local vs_utils = require "vs_utils" local custom_column = _GET["custom_column"] sendHTTPHeader('application/json') function getNetworkStats(network) local hosts_stats = interface.getHostsInfo() hosts_stats = hosts_stats["hosts"] local my_network for key, value in pairs(hosts_stats) do h = hosts_stats[key] nw_name = h["local_network_name"] if (h["local_network_name"] == network) then -- io.write(nw_name.."\n") if (nw_name ~= nil) then if (my_network == nil) then h["ip"] = nw_name h["name"] = nw_name my_network = h else my_network["num_alerts"] = my_network["num_alerts"] + h["num_alerts"] my_network["throughput_bps"] = my_network["throughput_bps"] + h["throughput_bps"] my_network["throughput_pps"] = my_network["throughput_pps"] + h["throughput_pps"] my_network["bytes.sent"] = my_network["bytes.sent"] + h["bytes.sent"] my_network["bytes.rcvd"] = my_network["bytes.rcvd"] + h["bytes.rcvd"] if (my_network["seen.first"] > h["seen.first"]) then my_network["seen.first"] = h["seen.first"] end if (my_network["seen.last"] < h["seen.last"]) then my_network["seen.last"] = h["seen.last"] end end end end end return (my_network) end local function get_host_data(host) local res = {} local now = os.time() -- Get from redis the throughput type bps or pps local throughput_type = getThroughputType() res["column_since"] = secondsToTime(now - host["seen.first"] + 1) res["column_last"] = secondsToTime(now - host["seen.last"] + 1) res["column_traffic"] = bytesToSize(host["bytes.sent"] + host["bytes.rcvd"]) res["column_score"] = custom_column_utils.hostToScoreValue(host) if not isEmptyString(custom_column) and custom_column_utils.isCustomColumn(custom_column) then local custom_column_key, custom_column_format = custom_column_utils.label2criteriakey(custom_column) local val = custom_column_utils.hostStatsToColumnValue(host, custom_column_key, true) res["column_custom"] = val end if ((host["throughput_trend_" .. throughput_type] ~= nil) and (host["throughput_trend_" .. throughput_type] > 0)) then local res_thpt if (throughput_type == "pps") then res_thpt = pktsToSize(host["throughput_bps"]) else res_thpt = bitsToSize(8 * host["throughput_bps"]) end -- See ValueTrend in ntop_typedefs.h for values if host["throughput_trend_" .. throughput_type] == 1 then res_thpt = res_thpt .. " " elseif host["throughput_trend_" .. throughput_type] == 2 then res_thpt = res_thpt .. " " elseif host["throughput_trend_" .. throughput_type] == 3 then res_thpt = res_thpt .. " " end res["column_thpt"] = res_thpt else res["column_thpt"] = "0 " .. throughput_type end local host_vulnerabilities = vs_utils.retrieve_host(host["ip"]) if (host_vulnerabilities and host_vulnerabilities.num_vulnerabilities_found ~= nil and host_vulnerabilities.num_vulnerabilities_found > 0) then res["column_num_vulnerabilities"] = format_high_num_value_for_tables( host_vulnerabilities, "num_vulnerabilities_found") end res["column_num_flows"] = host["active_flows.as_client"] + host["active_flows.as_server"] res["column_num_flows"] = format_high_num_value_for_tables(res, "column_num_flows") if isBridgeInterface(interface.getStats()) then res["column_num_dropped_flows"] = (host["flows.dropped"] or 0) end if ((host["num_alerts"] ~= nil) and (host["num_alerts"] > 0)) then res["column_alerts"] = host["num_alerts"] else res["column_alerts"] = 0 end local sent = host["bytes.sent"] or 0 local rcvd = host["bytes.rcvd"] or 0 local sent2rcvd = 0 if sent + rcvd > 0 then sent2rcvd = round((sent * 100) / (sent + rcvd), 0) end if sent2rcvd == nil then sent2rcvd = 0 end res["column_breakdown"] = "