mirror of
https://github.com/ntop/ntopng.git
synced 2026-04-30 07:59:35 +00:00
54 lines
1.5 KiB
Lua
54 lines
1.5 KiB
Lua
--
|
|
-- (C) 2017-20 - ntop.org
|
|
--
|
|
|
|
local flow_risk_utils = {}
|
|
|
|
-- ##############################################
|
|
|
|
-- Keep in sync with ndpi_typedefs.h, table keys are risk ids as found in nDPI
|
|
local id2name = {
|
|
[0] = "ndpi_no_risk",
|
|
[1] = "ndpi_url_possible_xss",
|
|
[2] = "ndpi_url_possible_sql_injection",
|
|
[3] = "ndpi_url_possible_rce_injection",
|
|
[4] = "ndpi_binary_application_transfer",
|
|
[5] = "ndpi_known_protocol_on_non_standard_port",
|
|
[6] = "ndpi_tls_selfsigned_certificate",
|
|
[7] = "ndpi_tls_obsolete_version",
|
|
[8] = "ndpi_tls_weak_cipher",
|
|
[9] = "ndpi_tls_certificate_expired",
|
|
[10] = "ndpi_tls_certificate_mismatch",
|
|
[11] = "ndpi_http_suspicious_user_agent",
|
|
[12] = "ndpi_http_numeric_ip_host",
|
|
[13] = "ndpi_http_suspicious_url",
|
|
[14] = "ndpi_http_suspicious_header",
|
|
[15] = "ndpi_tls_not_carrying_https",
|
|
[16] = "ndpi_suspicious_dga_domain",
|
|
[17] = "ndpi_malformed_packet",
|
|
|
|
}
|
|
|
|
-- ##############################################
|
|
|
|
-- Same as id2name, just with keys swapped
|
|
flow_risk_utils["risks"] = {}
|
|
|
|
for risk_id, risk_name in pairs(id2name) do
|
|
flow_risk_utils["risks"][risk_name] = risk_id
|
|
end
|
|
|
|
-- ##############################################
|
|
|
|
-- @brief Returns an i18n-localized risk description given a risk_id as defined in nDPI
|
|
function flow_risk_utils.risk_id_2_i18n(risk_id)
|
|
if risk_id and id2name[risk_id] then
|
|
return i18n("flow_risk."..id2name[risk_id])
|
|
end
|
|
|
|
return ''
|
|
end
|
|
|
|
-- ##############################################
|
|
|
|
return flow_risk_utils
|