mirror of
https://github.com/ntop/ntopng.git
synced 2026-05-05 10:41:34 +00:00
0e341f3d0b
* Modified blacklisted script in view of the new flow_script API * Modified plugins scripting in view of the new API * Modified flow scripts with the new trigger API * Fixed creators severity Co-authored-by: matteo <biscosi@ntop.org>
37 lines
1.3 KiB
Lua
37 lines
1.3 KiB
Lua
--
|
|
-- (C) 2019-20 - ntop.org
|
|
--
|
|
|
|
local alerts_api = require "alerts_api"
|
|
local flow_consts = require("flow_consts")
|
|
local alert_consts = require("alert_consts")
|
|
|
|
-- #################################################################
|
|
|
|
-- Default risk handler for all flow-risks that don't have
|
|
-- a specific handler coded
|
|
local handler = {}
|
|
|
|
-- #################################################################
|
|
|
|
-- @brief Called by flow_risks.lua when a risk for the flow is detected.
|
|
-- flow_risks.lua also passes flow-, client- and server-score as parameters
|
|
-- @param risk_id Integer nDPI flow risk identifier
|
|
-- @param flow_score An integer score that will be added to the total flow score
|
|
-- @param cli_score An integer score that will be added to the client score
|
|
-- @param srv_score An integer score that will be added to the server score
|
|
function handler.handle_risk(risk_id, flow_score, cli_score, srv_score)
|
|
-- Set a flow status for the generic flow_risk. This will also
|
|
-- cause an alert to be generated.
|
|
local flow_risk_type = flow_consts.status_types.status_flow_risk.create(
|
|
risk_id
|
|
)
|
|
|
|
alerts_api.trigger_status(flow_risk_type, alert_consts.alert_severities.warning, cli_score or 0, srv_score or 0, flow_score or 0)
|
|
|
|
end
|
|
|
|
-- #################################################################
|
|
|
|
return handler
|
|
|