1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
|
--
-- (C) 2019-22 - ntop.org
--
-- ##############################################
local flow_alert_keys = require "flow_alert_keys"
-- Import the classes library.
local classes = require "classes"
-- Make sure to import the Superclass!
local alert = require "alert"
-- ##############################################
local alert_broadcast_non_udp_traffic = classes.class(alert)
-- ##############################################
alert_broadcast_non_udp_traffic.meta = {
alert_key = flow_alert_keys.flow_alert_broadcast_non_udp_traffic,
i18n_title = "flow_checks_config.broadcast_non_udp_traffic_title",
icon = "fas fa-fw fa-exclamation",
has_attacker = true,
-- Default values
default = {
-- Fitlters to be applied on the alert, e.g., cli_port=23
filters = {},
}
}
-- ##############################################
function alert_broadcast_non_udp_traffic:init(cli_mac)
-- Call the parent constructor
self.super:init()
self.alert_type_params = {
cli_mac = cli_mac
}
end
-- #######################################################
function alert_broadcast_non_udp_traffic.format(ifid, alert, alert_type_params)
local data = {
ip = alert.cli_ip or "~",
mac = "~"
}
if alert_type_params.cli_mac then
data["mac"] = alert_type_params["cli_mac"]
end
return i18n("flow_details.broadcast_non_udp_traffic", data)
end
-- #######################################################
return alert_broadcast_non_udp_traffic
|
