mirror of
https://github.com/ntop/ntopng.git
synced 2026-04-29 15:39:33 +00:00
2739aac076
[AlertsK] Implements alert consts builder [AlertsK] alert_threshold_cross.lua [AlertsK] too_many_drops.lua [AlertsK] alert_test_failed.lua [AlertsK] alert_flows_flood.lua alert_tcp_syn_flood.lua lert_tcp_syn_scan.lua [AlertsK] alert_snmp_topology_changed.lua [AlertsK] snmp_device_reset.lua [AlertsK] alert_slow_periodic_activity.lua [AlertsK] alert_port_status_change.lua [AlertsK] alert_port_status_change.lua [AlertsK] alert_port_load_threshold_exceeded.lua [AlertsK] alert_port_errors.lua [AlertsK] alert_port_duplexstatus_change.lua [AlertsK] alert_periodic_activity_not_executed.lua [AlertsK] alert_misbehaving_flows_ratio.lua [AlertsK] alert_influxdb_error.lua [AlertsK] alert_influxdb_dropped_points.lua [AlertsK] alert_dropped_alerts.lua [AlertsK] alert_am_threshold_cross.lua [AlertsK] alert_broadcast_domain_too_large.lua [AlertsK] alert_device_connection.lua [AlertsK] alert_device_connection.lua [AlertsK] alert_host_pool_connection.lua alert_host_pool_disconnection.lua [AlertsK] alert_ghost_network.lua [AlertsK] alert_ip_outsite_dhcp_range.lua [AlertsK] alert_list_download_failed.lua [AlertsK] alert_login_failed.lua [AlertsK] alert_mac_ip_association_change.lua [AlertsK] alert_slow_purge.lua [AlertsK] alert_request_reply_ratio.lua [AlertsK] alert_quota_exceeded.lua [AlertsK] alert_process_notification.lua [AlertsK] alert_nfq_flushed.lua [AlertsK] alert_misconfigured_app.lua alert_new_device.lua [AlertsK] alert_influxdb_export_failure.lua [AlertsK] alert_unresponsive_device.lua [AlertsK] alert_user_activity.lua [AlertsK] alert_user_script_calls_drops.lua [AlertsK] minor fix
72 lines
2.7 KiB
Lua
72 lines
2.7 KiB
Lua
--
|
|
-- (C) 2019-20 - ntop.org
|
|
--
|
|
|
|
local alert_keys = require "alert_keys"
|
|
|
|
-- #######################################################
|
|
|
|
-- @brief Prepare an alert table used to generate the alert
|
|
-- @param alert_severity A severity as defined in `alert_consts.alert_severities`
|
|
-- @param alert_granularity A granularity as defined in `alert_consts.alerts_granularities`
|
|
-- @param alert_subtype A string with the subtype of the alert
|
|
-- @param requests The number of requests
|
|
-- @param replies The number of replies
|
|
-- @return A table with the alert built
|
|
local function buildRequestReplyRatio(alert_severity, alert_granularity, alert_subtype, requests, replies)
|
|
local built = {
|
|
alert_subtype = alert_subtype,
|
|
alert_granularity = alert_granularity,
|
|
alert_severity = alert_severity,
|
|
alert_type_params = {
|
|
requests = requests,
|
|
replies = replies,
|
|
}
|
|
}
|
|
|
|
return built
|
|
end
|
|
|
|
-- #######################################################
|
|
|
|
function requestReplyRatioFormatter(ifid, alert, info)
|
|
local alert_consts = require("alert_consts")
|
|
|
|
local entity = firstToUpper(alert_consts.formatAlertEntity(ifid, alert_consts.alertEntityRaw(alert["alert_entity"]), alert["alert_entity_val"]))
|
|
local engine_label = alert_consts.alertEngineLabel(alert_consts.alertEngine(alert_consts.sec2granularity(alert["alert_granularity"])))
|
|
local ratio = round(math.min((info.replies * 100) / (info.requests + 1), 100), 1)
|
|
|
|
-- {i18_string, what}
|
|
local subtype_to_info = {
|
|
dns_sent = {"alerts_dashboard.too_low_replies_received", "DNS"},
|
|
dns_rcvd = {"alerts_dashboard.too_low_replies_sent", "DNS"},
|
|
http_sent = {"alerts_dashboard.too_low_replies_received", "HTTP"},
|
|
http_rcvd = {"alerts_dashboard.too_low_replies_sent", "HTTP"},
|
|
icmp_echo_sent = {"alerts_dashboard.too_low_replies_received", "ICMP ECHO"},
|
|
icmp_echo_rcvd = {"alerts_dashboard.too_low_replies_received", "ICMP ECHO"},
|
|
}
|
|
|
|
local subtype_info = subtype_to_info[alert.alert_subtype]
|
|
|
|
return(i18n(subtype_info[1], {
|
|
entity = entity,
|
|
granularity = engine_label,
|
|
ratio = ratio,
|
|
requests = i18n(
|
|
ternary(info.requests == 1, "alerts_dashboard.one_request", "alerts_dashboard.many_requests"),
|
|
{count = formatValue(info.requests), what = subtype_info[2]}),
|
|
replies = i18n(
|
|
ternary(info.replies == 1, "alerts_dashboard.one_reply", "alerts_dashboard.many_replies"),
|
|
{count = formatValue(info.replies), what = subtype_info[2]}),
|
|
}))
|
|
end
|
|
|
|
-- #######################################################
|
|
|
|
return {
|
|
alert_key = alert_keys.ntopng.alert_request_reply_ratio,
|
|
i18n_title = "entity_thresholds.request_reply_ratio_title",
|
|
i18n_description = requestReplyRatioFormatter,
|
|
icon = "fas fa-exclamation",
|
|
builder = buildRequestReplyRatio,
|
|
}
|