ntopng/scripts/lua/rest/v2/get/host/fingerprint/data.lua
2024-08-09 10:40:11 +02:00

83 lines
2.1 KiB
Lua

--
-- (C) 2013-21 - ntop.org
--
local dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
require "lua_utils"
local graph_utils = require "graph_utils"
require "flow_utils"
local fingerprint_utils = require "fingerprint_utils"
local rest_utils = require("rest_utils")
local available_fingerprints = {
ja4 = {
stats_key = "ja4_fingerprint",
href = function(fp) return '<A class="ntopng-external-link" href="https://ja4db.com" target="_blank">'..fp..' <i class="fas fa-external-link-alt"></i></A>' end
},
hassh = {
stats_key = "hassh_fingerprint",
href = function(fp) return fp end
}
}
-- Parameters used for the rest answer --
local rc
local res = {}
local ifid = _GET["ifid"]
local host_info = url2hostinfo(_GET)
local fingerprint_type = _GET["fingerprint_type"]
-- #####################################################################
local stats
if isEmptyString(fingerprint_type) then
rc = rest_utils.consts.err.invalid_args
rest_utils.answer(rc)
return
end
if isEmptyString(ifid) then
rc = rest_utils.consts.err.invalid_interface
rest_utils.answer(rc)
return
end
if isEmptyString(host_info["host"]) then
rc = rest_utils.consts.err.invalid_args
rest_utils.answer(rc)
return
end
if(host_info["host"] ~= nil) then
stats = interface.getHostInfo(host_info["host"], host_info["vlan"])
end
stats = stats or {}
local function add_to_res(res, fingerprint_type, stats)
for key, value in pairs(stats) do
res[#res + 1] = value
if (fingerprint_type ~= "hassh") then
res[#res]["hash"] = key
res[#res]["type"] = string.upper(fingerprint_type)
else
res[#res][fingerprint_type] = key
end
end
return res
end
if fingerprint_type == "ja4" then
res = add_to_res(res, fingerprint_type, stats.ja4_fingerprint or {})
res = add_to_res(res, "ja4", stats.ja4_fingerprint or {})
elseif fingerprint_type == "hassh" then
res = add_to_res(res, fingerprint_type, stats.hassh_fingerprint or {})
end
rc = rest_utils.consts.success.ok
rest_utils.answer(rc, res)