webadmin/bpfire
1
0
Fork 0
mirror of https://github.com/vincentmli/bpfire.git synced 2026-05-02 08:12:54 +02:00
Code Issues Packages Projects Releases Wiki Activity

suricata: Track whitelisted traffic and add it to the IPS graph

Browse Source 
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Michael Tremer
2024-09-13 10:12:30 +02:00
parent 4721fac3c8
commit 5da15c5d3b
14 changed files with 46 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
config/cfgroot/graphs.pl
View File

@@ -1219,9 +1219,17 @@ sub updateipsthroughputgraph {
"VDEF:scanned_bytes_min=scanned_bytes,MINIMUM",
"VDEF:scanned_bytes_max=scanned_bytes,MAXIMUM",
# Read whitelisted packets
"DEF:whitelisted_bytes=$mainsettings{'RRDLOG'}/collectd/localhost/iptables-mangle-IPS/ipt_bytes-WHITELISTED.rrd:value:AVERAGE",
#"DEF:whitelisted_packets=$mainsettings{'RRDLOG'}/collectd/localhost/iptables-mangle-IPS/ipt_packets-WHITELISTED.rrd:value:AVERAGE",
"VDEF:whitelisted_bytes_avg=whitelisted_bytes,AVERAGE",
"VDEF:whitelisted_bytes_min=whitelisted_bytes,MINIMUM",
"VDEF:whitelisted_bytes_max=whitelisted_bytes,MAXIMUM",
# Total
"CDEF:total_bytes=bypassed_bytes,scanned_bytes,+",
#"CDEF:total_packets=bypassed_packets,scanned_packets,+",
"CDEF:total_bytes=bypassed_bytes,scanned_bytes,ADDNAN,whitelisted_bytes,ADDNAN",
#"CDEF:total_packets=bypassed_packets,scanned_packets,ADDNAN,whitelisted_packets,ADDNAN",
"VDEF:total_bytes_avg=total_bytes,AVERAGE",
"VDEF:total_bytes_min=total_bytes,MINIMUM",
@@ -1236,8 +1244,14 @@ sub updateipsthroughputgraph {
"COMMENT:" . sprintf("%16s", $Lang::tr{'minimum'}),
"COMMENT:" . sprintf("%16s", $Lang::tr{'maximum'}) . "\\j",
# Whitelisted Packets
"AREA:whitelisted_bytes$color{'color12'}A0:" . sprintf("%-30s", $Lang::tr{'whitelisted'}),
"GPRINT:whitelisted_bytes_avg:%9.2lf %sbps",
"GPRINT:whitelisted_bytes_min:%9.2lf %sbps",
"GPRINT:whitelisted_bytes_max:%9.2lf %sbps\\j",
# Bypassed Packets
"AREA:bypassed_bytes$color{'color12'}A0:" . sprintf("%-30s", $Lang::tr{'bypassed'}),
"STACK:bypassed_bytes$color{'color11'}A0:" . sprintf("%-30s", $Lang::tr{'bypassed'}),
"GPRINT:bypassed_bytes_avg:%9.2lf %sbps",
"GPRINT:bypassed_bytes_min:%9.2lf %sbps",
"GPRINT:bypassed_bytes_max:%9.2lf %sbps\\j",