mirror of
https://github.com/ntop/ntopng.git
synced 2026-05-03 01:10:10 +00:00
38 lines
1.3 KiB
Lua
38 lines
1.3 KiB
Lua
--
|
|
-- (C) 2019-21 - ntop.org
|
|
--
|
|
|
|
local alerts_api = require "alerts_api"
|
|
local alert_severities = require "alert_severities"
|
|
local alert_consts = require("alert_consts")
|
|
|
|
-- #################################################################
|
|
|
|
-- Default risk handler for all flow-risks that don't have
|
|
-- a specific handler coded
|
|
local handler = {}
|
|
|
|
-- #################################################################
|
|
|
|
-- @brief Called by flow_risks.lua when a risk for the flow is detected.
|
|
-- flow_risks.lua also passes flow-, client- and server-score as parameters
|
|
-- @param risk_id Integer nDPI flow risk identifier
|
|
-- @param flow_score An integer score that will be added to the total flow score
|
|
-- @param cli_score An integer score that will be added to the client score
|
|
-- @param srv_score An integer score that will be added to the server score
|
|
function handler.handle_risk(risk_id, flow_score, cli_score, srv_score)
|
|
-- Set a flow status for the generic flow_risk. This will also
|
|
-- cause an alert to be generated.
|
|
local alert = alert_consts.alert_types.alert_flow_risk.new(
|
|
risk_id
|
|
)
|
|
|
|
alert:set_severity(alert_severities.warning)
|
|
|
|
alert:trigger_status(cli_score or 0, srv_score or 0, flow_score or 0)
|
|
end
|
|
|
|
-- #################################################################
|
|
|
|
return handler
|
|
|