/src/ntopng/include/flow_alerts/FlowRiskKnownProtocolOnNonStandardPortAlert.h
Line | Count | Source |
1 | | /* |
2 | | * |
3 | | * (C) 2013-24 - ntop.org |
4 | | * |
5 | | * |
6 | | * This program is free software; you can redistribute it and/or modify |
7 | | * it under the terms of the GNU General Public License as published by |
8 | | * the Free Software Foundation; either version 3 of the License, or |
9 | | * (at your option) any later version. |
10 | | * |
11 | | * This program is distributed in the hope that it will be useful, |
12 | | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
13 | | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
14 | | * GNU General Public License for more details. |
15 | | * |
16 | | * You should have received a copy of the GNU General Public License |
17 | | * along with this program; if not, write to the Free Software Foundation, |
18 | | * Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. |
19 | | * |
20 | | */ |
21 | | |
22 | | #ifndef _FR_KNOWN_PROTOCOL_ON_NON_STANDARD_PORT_ALERT_H_ |
23 | | #define _FR_KNOWN_PROTOCOL_ON_NON_STANDARD_PORT_ALERT_H_ |
24 | | |
25 | | #include "ntop_includes.h" |
26 | | |
27 | | class FlowRiskKnownProtocolOnNonStandardPortAlert : public FlowRiskAlert { |
28 | | private: |
29 | | ndpi_serializer* getAlertJSON(ndpi_serializer* serializer); |
30 | | |
31 | | public: |
32 | 0 | static ndpi_risk_enum getClassRisk() { |
33 | 0 | return NDPI_KNOWN_PROTOCOL_ON_NON_STANDARD_PORT; |
34 | 0 | } |
35 | 0 | static FlowAlertType getClassType() { |
36 | 0 | return FlowRiskAlerts::getFlowRiskAlertType(getClassRisk()); |
37 | 0 | } |
38 | 0 | static u_int8_t getDefaultScore() { |
39 | 0 | return FlowRiskAlerts::getFlowRiskScore(getClassRisk()); |
40 | 0 | } |
41 | | |
42 | | FlowRiskKnownProtocolOnNonStandardPortAlert(FlowCheck* c, Flow* f) |
43 | 0 | : FlowRiskAlert(c, f){ setAlertScore(getDefaultScore());}; |
44 | 0 | ~FlowRiskKnownProtocolOnNonStandardPortAlert(){}; |
45 | | |
46 | 0 | FlowAlertType getAlertType() const { return getClassType(); } |
47 | 0 | ndpi_risk_enum getAlertRisk() const { return getClassRisk(); } |
48 | | }; |
49 | | |
50 | | #endif /* _FR_KNOWN_PROTOCOL_ON_NON_STANDARD_PORT_ALERT_H_ */ |