ntopng/scripts/lua/get_hosts_stats.lua

--
-- (C) 2013-24 - ntop.org
--
local dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
package.path = dirs.installdir .. "/scripts/lua/modules/vulnerability_scan/?.lua;" .. package.path

require "lua_utils"
local json = require "dkjson"
local custom_column_utils = require "custom_column_utils"
local vs_utils = require "vs_utils"
local custom_column = _GET["custom_column"]

sendHTTPHeader('application/json')

function getNetworkStats(network)
    local hosts_stats = interface.getHostsInfo()
    hosts_stats = hosts_stats["hosts"]

    local my_network

    for key, value in pairs(hosts_stats) do
        h = hosts_stats[key]
        nw_name = h["local_network_name"]

        if (h["local_network_name"] == network) then
            -- io.write(nw_name.."\n")

            if (nw_name ~= nil) then
                if (my_network == nil) then
                    h["ip"] = nw_name
                    h["name"] = nw_name
                    my_network = h
                else
                    my_network["num_alerts"] = my_network["num_alerts"] + h["num_alerts"]
                    my_network["throughput_bps"] = my_network["throughput_bps"] + h["throughput_bps"]
                    my_network["throughput_pps"] = my_network["throughput_pps"] + h["throughput_pps"]
                    my_network["bytes.sent"] = my_network["bytes.sent"] + h["bytes.sent"]
                    my_network["bytes.rcvd"] = my_network["bytes.rcvd"] + h["bytes.rcvd"]

                    if (my_network["seen.first"] > h["seen.first"]) then
                        my_network["seen.first"] = h["seen.first"]
                    end

                    if (my_network["seen.last"] < h["seen.last"]) then
                        my_network["seen.last"] = h["seen.last"]
                    end
                end
            end
        end
    end

    return (my_network)
end

local function get_host_data(host)

    local res = {}

    local now = os.time()
    -- Get from redis the throughput type bps or pps
    local throughput_type = getThroughputType()

    res["column_since"] = secondsToTime(now - host["seen.first"] + 1)
    res["column_last"] = secondsToTime(now - host["seen.last"] + 1)
    res["column_traffic"] = bytesToSize(host["bytes.sent"] + host["bytes.rcvd"])
    res["column_score"] = custom_column_utils.hostToScoreValue(host)

    if not isEmptyString(custom_column) and custom_column_utils.isCustomColumn(custom_column) then
        local custom_column_key, custom_column_format = custom_column_utils.label2criteriakey(custom_column)
        local val = custom_column_utils.hostStatsToColumnValue(host, custom_column_key, true)
        res["column_custom"] = val
    end

    if ((host["throughput_trend_" .. throughput_type] ~= nil) and (host["throughput_trend_" .. throughput_type] > 0)) then
        local res_thpt

        if (throughput_type == "pps") then
            res_thpt = pktsToSize(host["throughput_bps"])
        else
            res_thpt = bitsToSize(8 * host["throughput_bps"])
        end

        -- See ValueTrend in ntop_typedefs.h for values
        if host["throughput_trend_" .. throughput_type] == 1 then
            res_thpt = res_thpt .. " <i class='fas fa-arrow-up'></i>"
        elseif host["throughput_trend_" .. throughput_type] == 2 then
            res_thpt = res_thpt .. " <i class='fas fa-arrow-down'></i>"
        elseif host["throughput_trend_" .. throughput_type] == 3 then
            res_thpt = res_thpt .. " <i class='fas fa-minus'></i>"
        end

        res["column_thpt"] = res_thpt
    else
        res["column_thpt"] = "0 " .. throughput_type
    end

    local host_vulnerabilities = vs_utils.retrieve_host(host["ip"])

    if (host_vulnerabilities and 
        host_vulnerabilities.num_vulnerabilities_found ~= nil and 
        host_vulnerabilities.num_vulnerabilities_found > 0) then
        res["column_num_vulnerabilities"] = format_high_num_value_for_tables(
            host_vulnerabilities, "num_vulnerabilities_found")
    end


    res["column_num_flows"] = host["active_flows.as_client"] + host["active_flows.as_server"]
    res["column_num_flows"] = format_high_num_value_for_tables(res, "column_num_flows")
    if isBridgeInterface(interface.getStats()) then
        res["column_num_dropped_flows"] = (host["flows.dropped"] or 0)
    end

    if ((host["num_alerts"] ~= nil) and (host["num_alerts"] > 0)) then
        res["column_alerts"] = host["num_alerts"]
    else
        res["column_alerts"] = 0
    end

    local sent = host["bytes.sent"] or 0
    local rcvd = host["bytes.rcvd"] or 0
    
    local sent2rcvd = 0
    if sent + rcvd > 0 then
        sent2rcvd = round((sent * 100) / (sent + rcvd), 0)
    end
    if sent2rcvd == nil then
        sent2rcvd = 0
    end
    res["column_breakdown"] =
        "<div class='progress'><div class='progress-bar bg-warning' style='width: " .. sent2rcvd ..
            "%;'>Sent</div><div class='progress-bar bg-success' style='width: " .. (100 - sent2rcvd) ..
            "%;'>Rcvd</div></div>"

    return res
end

---

local hosts = _GET["hosts"]

local criteria = _GET["criteria"]
if criteria == nil then
    criteria = ""
end

local res = {}

if not isEmptyString(hosts) then

    local items = split(hosts, ',')

    for _, item in pairs(items) do
        local host_info = hostkey2hostinfo(item)
        local host

        if host_info["host"] ~= nil then
            if (string.contains(host_info["host"], "/")) then
                -- This is a network
                host = getNetworkStats(host_info["host"])
            else
                host = interface.getHostInfo(host_info["host"], host_info["vlan"])
            end
        else
            host = interface.getAggregatedHostInfo(host_info["host"])
        end

        if host then
            res[item] = get_host_data(host)
        end

    end

end

print(json.encode(res))