ntopng/scripts/lua/get_db_data.lua
2016-04-19 11:06:39 +02:00

95 lines
3.3 KiB
Lua

--
-- (C) 2013-16 - ntop.org
--
dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
require "lua_utils"
local json = require ("dkjson")
local ifId = _GET["ifId"]
local ip_version = _GET["version"]
local host = _GET["host"]
local epoch_begin = _GET["epoch_begin"]
local epoch_end = _GET["epoch_end"]
local l4proto = _GET["l4proto"]
local l7proto = _GET["l7proto"]
local profile = _GET["profile"]
local port = _GET["port"]
local info = _GET["info"]
local limit = _GET["limit"]
local format = _GET["format"]
local action = _GET["action"]
if(ip_version == nil) then ip_version = "4" end
ip_version = tonumber(ip_version)
function top_peers_query(interface_id, version, host, protocol, port, l7proto, info, begin_epoch, end_epoch)
if(host == nil or host == "") then return nil end
if(version == nil) then version = 4 end
if(info == "") then info = nil end
if(l7proto == "") then l7proto = nil end
if(protocol == "") then protocol = nil end
sql = " SELECT "
if(version == 4) then
sql = sql.." CASE WHEN IP_SRC_ADDR = INET_ATON('"..host.."') THEN INET_NTOA(IP_DST_ADDR) ELSE INET_NTOA(IP_SRC_ADDR) END peer, "
else
sql = sql.." CASE WHEN IP_SRC_ADDR = '"..host.."' THEN IP_DST_ADDR ELSE IP_SRC_ADDR END peer, "
end
sql = sql.."BYTES as bytes, PACKETS as packets, PROTOCOL as l4proto, L7_PROTO as l7proto, "
sql = sql.."FIRST_SWITCHED as first_switched, LAST_SWITCHED as last_switched "
sql = sql.." FROM flowsv"..version
sql = sql.." WHERE FIRST_SWITCHED <= "..end_epoch.." and FIRST_SWITCHED >= "..begin_epoch
sql = sql.." AND (NTOPNG_INSTANCE_NAME='"..ntop.getPrefs()["instance_name"].."'OR NTOPNG_INSTANCE_NAME IS NULL)"
sql = sql.." AND (INTERFACE_ID='"..tonumber(interface_id).."')"
if((l7proto ~= nil) and (l7proto ~= "")) then sql = sql .." AND L7_PROTO="..l7proto end
if((protocol ~= nil) and (protocol ~= "")) then sql = sql .." AND PROTOCOL="..protocol end
if(info ~= nil) then sql = sql .." AND (INFO='"..info.."')" end
if((port ~= nil) and (port ~= "")) then sql = sql .." AND (L4_SRC_PORT="..port.." OR L4_DST_PORT="..port..")" end
if((host ~= nil) and (host ~= "")) then
if(version == 4) then
sql = sql .." AND (IP_SRC_ADDR=INET_ATON('"..host.."') OR IP_DST_ADDR=INET_ATON('"..host.."'))"
else
sql = sql .." AND (IP_SRC_ADDR='"..host.."' OR IP_DST_ADDR='"..host.."')"
end
end
sql = sql.." order by bytes desc limit 2001"
if(db_debug == true) then io.write(sql.."\n") end
res = interface.execSQLQuery(sql)
if(type(res) == "string") then
if(db_debug == true) then io.write(res.."\n") end
return nil
else
return(res)
end
end
if action == "get_peers" then
local res = top_peers_query(ifId, ip_version, host, l4proto, port, l7proto, info, epoch_begin, epoch_end)
local ndpi_protocols = {}
for proto_name, proto_id in pairs(interface.getnDPIProtocols()) do
ndpi_protocols[proto_id] = proto_name
end
for _,flow in pairs(res) do
local peer_info = interface.getHostInfo(flow["peer"])
if peer_info ~= nil then
flow["peer"] = ntop.getResolvedAddress(hostinfo2hostkey(peer_info))
end
if ndpi_protocols[flow["l7proto"]] ~= "" then
flow["l7proto"] = ndpi_protocols[flow["l7proto"]]
end
end
sendHTTPHeader('application/json')
print(json.encode(res, nil))
end