1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
--
-- (C) 2013-16 - ntop.org
--
dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
require "lua_utils"
sendHTTPHeader('text/html; charset=iso-8859-1')
mode = _GET["mode"] --l4,l7,host
pid = tonumber(_GET["pid"])
name = _GET["name"]
host = _GET["host"]
local debug = false
if (debug) then setTraceLevel(TRACE_DEBUG) end
interface.select(ifname)
if (pid ~= nil) then
flows = interface.findPidFlows(pid)
elseif (name ~= nil) then
flows = interface.findNameFlows(name)
end
if(mode == nil) then
mode = "host"
end
if(flows == nil) then
print('[ { "label": "No flows", "value": 1 } ]') -- No flows found
else
apps = { }
tot = 0
for k,f in pairs(flows) do
process = 1
traceError(TRACE_DEBUG,TRACE_CONSOLE,"Cli:"..f["cli.ip"].." - Srv:"..f["srv.ip"])
if((host ~= nil) and ((f["cli.ip"] ~= host) and (f["srv.ip"] ~= host))) then
process = 0
end
if(mode == "l7") then
key = f["proto.ndpi"]
v = f["cli2srv.bytes"] + f["srv2cli.bytes"]
elseif(mode == "l4") then
key = f["proto.l4"]
v = f["cli2srv.bytes"] + f["srv2cli.bytes"]
elseif(mode == "host") then
if ((f["client_process"] ~= nil) and (f["client_process"]["name"] == name)) then
-- key = f["cli.source_id"].."-"..f["cli.ip"].."(client)"
key = f["cli.ip"].."(client)"
v = f["cli2srv.bytes"]
elseif ((f["server_process"] ~= nil) and (f["server_process"]["name"] == name)) then
-- key = f["srv.source_id"].."-"..f["srv.ip"].."(server)"
key = f["srv.ip"].."(server)"
v = f["srv2cli.bytes"]
end
end
if((key ~= nil) and (process == 1))then
if(apps[key] == nil) then apps[key] = 0 end
traceError(TRACE_DEBUG,TRACE_CONSOLE,"key: "..key..",value: "..apps[key])
apps[key] = apps[key] + v
tot = tot + v
end
end
-- Print up to this number of entries
max_num_entries = 10
-- Print entries whose value >= 5% of the total
threshold = (tot * 5) / 100
print "[\n"
num = 0
accumulate = 0
for key, value in pairs(apps) do
if((num ~= 0) and (value < threshold)) then
break
end
if(num > 0) then
print ",\n"
end
print("\t { \"label\": \"" .. key .."\", \"value\": ".. value .." }")
accumulate = accumulate + value
num = num + 1
if(num == max_num_entries) then
break
end
end
if((num == 0) and (top_key ~= nil)) then
print("\t { \"label\": \"" .. top_key .."\", \"value\": ".. top_value ..", \"url\": \""..ntop.getHttpPrefix().."/lua/host_details.lua?host=".. top_key .."\" }")
accumulate = accumulate + top_value
end
-- In case there is some leftover do print it as "Other"
if(accumulate < tot) then
if(num > 0) then print(",") end
print("\n\t { \"label\": \"Other\", \"value\": ".. (tot-accumulate) .." }")
end
print "\n]"
end
|
