/src/ntopng/src/flow_checks/ExternalAlertCheck.cpp
Line | Count | Source (jump to first uncovered line) |
1 | | /* |
2 | | * |
3 | | * (C) 2013-24 - ntop.org |
4 | | * |
5 | | * |
6 | | * This program is free software; you can redistribute it and/or modify |
7 | | * it under the terms of the GNU General Public License as published by |
8 | | * the Free Software Foundation; either version 3 of the License, or |
9 | | * (at your option) any later version. |
10 | | * |
11 | | * This program is distributed in the hope that it will be useful, |
12 | | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
13 | | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
14 | | * GNU General Public License for more details. |
15 | | * |
16 | | * You should have received a copy of the GNU General Public License |
17 | | * along with this program; if not, write to the Free Software Foundation, |
18 | | * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. |
19 | | * |
20 | | */ |
21 | | |
22 | | #include "ntop_includes.h" |
23 | | #include "flow_checks_includes.h" |
24 | | |
25 | | /* Note: this is overridden by ExternalAlertCheckPro::checkExternalAlert on Pro */ |
26 | 0 | void ExternalAlertCheck::checkExternalAlert(Flow *f) { |
27 | 0 | if (f->hasExternalAlert()) { |
28 | 0 | FlowAlertType alert_type = ExternalAlertCheckAlert::getClassType(); |
29 | 0 | risk_percentage cli_score_pctg = CLIENT_FAIR_RISK_PERCENTAGE; |
30 | 0 | u_int8_t c_score, s_score; |
31 | |
|
32 | 0 | computeCliSrvScore(ntop->getFlowAlertScore(alert_type.id), cli_score_pctg, &c_score, &s_score); |
33 | |
|
34 | 0 | FlowAlert *alert = buildAlert(f); |
35 | 0 | alert->setCliSrvScores(c_score, s_score); |
36 | 0 | f->triggerAlert(alert); |
37 | 0 | } |
38 | 0 | } |
39 | | |
40 | | /* ***************************************************** */ |
41 | | |
42 | 0 | void ExternalAlertCheck::protocolDetected(Flow *f) { checkExternalAlert(f); } |
43 | | |
44 | | /* ***************************************************** */ |
45 | | |
46 | 0 | void ExternalAlertCheck::flowEnd(Flow *f) { checkExternalAlert(f); } |
47 | | |
48 | | /* ***************************************************** */ |
49 | | |
50 | 0 | FlowAlert *ExternalAlertCheck::buildAlert(Flow *f) { |
51 | 0 | return new ExternalAlertCheckAlert(this, f); |
52 | 0 | } |
53 | | |
54 | | /* ***************************************************** */ |