mirror of
https://github.com/ntop/ntopng.git
synced 2026-04-30 07:59:35 +00:00
75 lines
2.9 KiB
Lua
75 lines
2.9 KiB
Lua
--
|
|
-- (C) 2019-20 - ntop.org
|
|
--
|
|
|
|
local alert_keys = require "alert_keys"
|
|
local format_utils = require "format_utils"
|
|
local json = require("dkjson")
|
|
|
|
-- #######################################################
|
|
|
|
-- @brief Prepare an alert table used to generate the alert
|
|
-- @param alert_severity A severity as defined in `alert_severities`
|
|
-- @param alert_granularity A granularity as defined in `alert_consts.alerts_granularities`
|
|
-- @param alert_subtype A string with the subtype of the alert
|
|
-- @param requests The number of requests
|
|
-- @param replies The number of replies
|
|
-- @return A table with the alert built
|
|
local function createRequestReplyRatio(alert_severity, alert_granularity, alert_subtype, requests, replies)
|
|
local built = {
|
|
alert_subtype = alert_subtype,
|
|
alert_granularity = alert_granularity,
|
|
alert_severity = alert_severity,
|
|
alert_type_params = {
|
|
requests = requests,
|
|
replies = replies,
|
|
}
|
|
}
|
|
|
|
return built
|
|
end
|
|
|
|
-- #######################################################
|
|
|
|
function requestReplyRatioFormatter(ifid, alert, info)
|
|
local alert_consts = require("alert_consts")
|
|
|
|
local entity = firstToUpper(alert_consts.formatAlertEntity(ifid, alert_consts.alertEntityRaw(alert["alert_entity"]), alert["alert_entity_val"]))
|
|
local engine_label = alert_consts.alertEngineLabel(alert_consts.alertEngine(alert_consts.sec2granularity(alert["alert_granularity"])))
|
|
local ratio = round(math.min((info.replies * 100) / (info.requests + 1), 100), 1)
|
|
|
|
-- {i18_string, what}
|
|
local subtype_to_info = {
|
|
dns_sent = {"alerts_dashboard.too_low_replies_received", "DNS"},
|
|
dns_rcvd = {"alerts_dashboard.too_low_replies_sent", "DNS"},
|
|
http_sent = {"alerts_dashboard.too_low_replies_received", "HTTP"},
|
|
http_rcvd = {"alerts_dashboard.too_low_replies_sent", "HTTP"},
|
|
icmp_echo_sent = {"alerts_dashboard.too_low_replies_received", "ICMP ECHO"},
|
|
icmp_echo_rcvd = {"alerts_dashboard.too_low_replies_received", "ICMP ECHO"},
|
|
}
|
|
|
|
local subtype_info = subtype_to_info[alert.alert_subtype]
|
|
|
|
return(i18n(subtype_info[1], {
|
|
entity = entity,
|
|
host_category = format_utils.formatAddressCategory((json.decode(alert.alert_json)).alert_generation.host_info),
|
|
granularity = engine_label,
|
|
ratio = ratio,
|
|
requests = i18n(
|
|
ternary(info.requests == 1, "alerts_dashboard.one_request", "alerts_dashboard.many_requests"),
|
|
{count = formatValue(info.requests), what = subtype_info[2]}),
|
|
replies = i18n(
|
|
ternary(info.replies == 1, "alerts_dashboard.one_reply", "alerts_dashboard.many_replies"),
|
|
{count = formatValue(info.replies), what = subtype_info[2]}),
|
|
}))
|
|
end
|
|
|
|
-- #######################################################
|
|
|
|
return {
|
|
alert_key = alert_keys.ntopng.alert_request_reply_ratio,
|
|
i18n_title = "entity_thresholds.request_reply_ratio_title",
|
|
i18n_description = requestReplyRatioFormatter,
|
|
icon = "fas fa-exclamation",
|
|
creator = createRequestReplyRatio,
|
|
}
|