ntopng/scripts/callbacks/minute/system/vulnerability_scan.lua
2024-01-12 11:44:18 +01:00

60 lines
1.7 KiB
Lua

--
-- (C) 2019-24 - ntop.org
--
--
-- This script performs the scheduled vulnerability scans
--
local dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
package.path = dirs.installdir .. "/scripts/lua/modules/vulnerability_scan/?.lua;".. package.path
local vs_utils = require "vs_utils"
-- ###########################
local use_coroutines
local max_num_scans_for_loop = ntop.getCache("ntopng.prefs.host_to_scan_max_num_scans")
if((max_num_scans_for_loop == nil) or (max_num_scans_for_loop == "")) then
max_num_scans_for_loop = 4 -- avoid lasting too long (too many loops)
else
max_num_scans_for_loop = tonumber(max_num_scans_for_loop)
end
if(max_num_scans_for_loop > 16) then
max_num_scans_for_loop = 16
elseif(max_num_scans_for_loop < 1) then
max_num_scans_for_loop = 1
end
if(max_num_scans_for_loop == 1) then
use_coroutines = false
else
use_coroutines = true
end
local num_scans = vs_utils.process_all_scheduled_scans(max_num_scans_for_loop, use_coroutines)
if(ntop.isEnterpriseL()) then
-- send the notification at the end of periodic scan
local is_periodic_scan_completed, periodicity = vs_utils.is_periodic_scan_completed()
if (is_periodic_scan_completed) then
vs_utils.notify_scan_results(vs_utils.scan_in_exec_type.periodic_scan, periodicity)
end
end
local is_ondemand_scan_completed = vs_utils.is_ondemand_scan_completed()
if (is_ondemand_scan_completed) then
-- send notification at the end of scan all
vs_utils.notify_scan_results(vs_utils.scan_in_exec_type.scan_all, nil)
end
local is_single_scan_completed = vs_utils.is_single_scan_completed()
if (is_single_scan_completed) then
vs_utils.generate_report()
end