ntopng/scripts/lua/modules/alert_definitions/alert_tcp_syn_scan.lua
Simone Mainardi 290175b16f Refactors alrt builders into creators
Refactors builders into creators: calls
2020-04-27 15:53:56 +02:00

35 lines
1.1 KiB
Lua

--
-- (C) 2019-20 - ntop.org
--
local alert_keys = require "alert_keys"
local alert_creators = require "alert_creators"
local function formatSynScan(ifid, alert, threshold_info)
local alert_consts = require("alert_consts")
local entity = alert_consts.formatAlertEntity(ifid, alert_consts.alertEntityRaw(alert["alert_entity"]), alert["alert_entity_val"])
if(alert.alert_subtype == "syn_scan_attacker") then
return i18n("alert_messages.syn_scan_attacker", {
entity = firstToUpper(entity),
value = string.format("%u", math.ceil(threshold_info.value)),
threshold = threshold_info.threshold,
})
else
return i18n("alert_messages.syn_scan_victim", {
entity = firstToUpper(entity),
value = string.format("%u", math.ceil(threshold_info.value)),
threshold = threshold_info.threshold,
})
end
end
-- ##############################################
return {
alert_key = alert_keys.ntopng.alert_tcp_syn_scan,
i18n_title = "alerts_dashboard.tcp_syn_scan",
i18n_description = formatSynScan,
icon = "fas fa-life-ring",
creator = alert_creators.createThresholdCross,
}