mirror of
https://github.com/ntop/ntopng.git
synced 2026-08-15 19:33:21 +00:00
b962ed2185
* Updated error page to vuejs * Update dist * Fixes live flows filters flow risk * Update dist
134 lines
3.7 KiB
Lua
134 lines
3.7 KiB
Lua
--
|
|
-- (C) 2013-26 - ntop.org
|
|
--
|
|
local dirs = ntop.getDirs()
|
|
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
|
|
|
|
require "lua_utils"
|
|
require "flow_utils"
|
|
local rest_utils = require "rest_utils"
|
|
local as_utils = require "as_utils"
|
|
|
|
if not (ntop.hasGeoIP and ntop.hasGeoIP()) then
|
|
rest_utils.answer(rest_utils.consts.err.not_granted)
|
|
return
|
|
end
|
|
|
|
local ip_version_or_host = _GET["flowhosts_type"]
|
|
local ifid = _GET["ifid"] or interface.getId()
|
|
local current_ifid = interface.getId()
|
|
|
|
interface.select(ifid)
|
|
|
|
if not isEmptyString(ip_version_or_host) then
|
|
if string.starts(ip_version_or_host, "ip_version_") then
|
|
local version = split(ip_version_or_host, "ip_version_")
|
|
_GET["version"] = version[2]
|
|
_GET["flowhosts_type"] = nil
|
|
else
|
|
local host = hostkey2hostinfo(ip_version_or_host)
|
|
if isIPv4(host.host) or isIPv6(host.host) then
|
|
_GET["host"] = ip_version_or_host
|
|
_GET["flowhosts_type"] = nil
|
|
end
|
|
end
|
|
end
|
|
|
|
local flows_filter = getFlowsFilter()
|
|
flows_filter = as_utils.formatFilters(flows_filter, true)
|
|
|
|
-- Capped tightly since this powers a map view, not a paginated table.
|
|
flows_filter.maxHits = 512
|
|
flows_filter.perPage = 512
|
|
flows_filter.toSkip = 0
|
|
|
|
local flows_stats = interface.getFlowsInfo(flows_filter["hostFilter"], flows_filter, flows_filter["talkingWith"],
|
|
flows_filter["client"], flows_filter["server"], flows_filter["flow_info"])
|
|
|
|
local nodes = {}
|
|
local nodes_seen = {}
|
|
local edges = {}
|
|
|
|
local geoloc_cache = {}
|
|
|
|
local function get_geoloc(ip)
|
|
if geoloc_cache[ip] ~= nil then
|
|
return geoloc_cache[ip]
|
|
end
|
|
|
|
local info = interface.getHostInfo(ip)
|
|
local geoloc = false
|
|
if info and info.latitude and info.longitude and info.latitude ~= 0 and info.longitude ~= 0 then
|
|
geoloc = { lat = info.latitude, lng = info.longitude, country = info.country }
|
|
end
|
|
|
|
geoloc_cache[ip] = geoloc
|
|
return geoloc
|
|
end
|
|
|
|
local function add_node(ip, protocol)
|
|
local geoloc = get_geoloc(ip)
|
|
if isEmptyString(ip) or not geoloc then
|
|
return
|
|
end
|
|
if not nodes_seen[ip] then
|
|
nodes_seen[ip] = {
|
|
lat = geoloc.lat,
|
|
lng = geoloc.lng,
|
|
label = ip,
|
|
ip = ip,
|
|
status = "Online",
|
|
country = geoloc.country,
|
|
protocols = {},
|
|
connectionCount = 0
|
|
}
|
|
nodes[#nodes + 1] = nodes_seen[ip]
|
|
end
|
|
nodes_seen[ip].connectionCount = nodes_seen[ip].connectionCount + 1
|
|
if not isEmptyString(protocol) then
|
|
nodes_seen[ip].protocols[protocol] = true
|
|
end
|
|
end
|
|
|
|
if flows_stats and flows_stats.flows then
|
|
for _, value in ipairs(flows_stats.flows) do
|
|
local cli_ip = value["cli.ip"]
|
|
local srv_ip = value["srv.ip"]
|
|
local protocol = value["proto.ndpi"]
|
|
|
|
add_node(cli_ip, protocol)
|
|
add_node(srv_ip, protocol)
|
|
|
|
local cli_geoloc = get_geoloc(cli_ip)
|
|
local srv_geoloc = get_geoloc(srv_ip)
|
|
if cli_geoloc and srv_geoloc then
|
|
edges[#edges + 1] = {
|
|
sourcePosition = { cli_geoloc.lng, cli_geoloc.lat },
|
|
targetPosition = { srv_geoloc.lng, srv_geoloc.lat },
|
|
sourceSiteId = cli_ip,
|
|
targetSiteId = srv_ip,
|
|
protocol = protocol,
|
|
severity = (value["predominant_alert"] and "Warning") or "Normal"
|
|
}
|
|
end
|
|
end
|
|
end
|
|
|
|
-- Flatten the protocol set into a sorted, comma-joined string for the tooltip
|
|
for _, node in ipairs(nodes) do
|
|
local proto_list = {}
|
|
for proto, _ in pairs(node.protocols) do
|
|
proto_list[#proto_list + 1] = proto
|
|
end
|
|
table.sort(proto_list)
|
|
node.protocols = table.concat(proto_list, ", ")
|
|
end
|
|
|
|
if tostring(current_ifid) ~= tostring(ifid) then
|
|
interface.select(current_ifid)
|
|
end
|
|
|
|
rest_utils.answer(rest_utils.consts.success.ok, {
|
|
nodes = nodes,
|
|
edges = edges
|
|
})
|