Filter applied to 'live' profile:
\n"; ?>
> Conditions based on total flow summary:
0 ) { print "\n"; } else { print "\n"; } ?> \n"; print "\n"; print "\n"; print "\n"; ?>     \n"; print "\n"; print "\n"; ?> 0 ) { print "trash\n"; } ?> plus icon\n"; } ?>
\n"; ?>
> Conditions based on individual Top 1 statistics:
$num_ConditionList ) { print "\n"; } else { print "\n"; } ?> \n"; print "\n of Top 1  "; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; ?> $num_ConditionList ) { print "trash\n"; } ?> plus icon\n"; } ?>
> Conditions based on plugin:
Trigger:
after x condition = true, and block next trigger for cycles
>
Action:
> No action
0 ? 'checked' : ''; ?> > Send alert email To: \n"; ?>
Subject: \n"; ?>
0 ? 'checked' : ''; ?> > Run system command \n"; ?>
0 ? 'checked' : ''; ?> > Call plugin:
>

\n"; } else { $num = 0; print "

\n"; } ?> \n"; $offset = $alert['type'] == 1 ? $num_ConditionList : 0; print "\n"; for ( $i=0; $i< $num; $i++ ) { print "\n"; } print ""; print "\n"; print "\n"; print "\n"; for ( $i=0; $i< $num; $i++ ) { print "\n"; } print ""; print "\n"; print "
Alert Infos:
Last cycle:
$val\n"; } ?> $val\n"; } ?> $val\n"; } ?> $val\n"; } ?> $val\n"; } ?> $val\n"; } ?>
Last Avg 10m Avg 30m Avg 1h Avg 6h Avg 12h Avg 24h
> Flows
> Packets
> Bytes

Last conditions not available

\n"; print "
Conditions:"; print $i+$offset; print "Final:
State:"; print $vec[$i] ? "True" : "False"; print ""; print $alert['final_condition'] ? "True" : "False"; print "
\n"; } ?>
Alerts overview:
No Alerts defined.
No. Status Name Last Triggered
\n"; print "\n"; print "\n"; print "\n"; print "\n"; print "\n"; // for a new alert display the controls to add the alert if ( $new_alert ) { ?> \n"; } $controls_display_style = $new_alert || $readonly ? "style='display:none'" : ''; print "
New alert
Name
Status >enabled
Alerts details:
Trigger Status Last Triggered
>enabled > \n"; } print $alert['last_trigger']; ?> );" name="edit_row" border="0" align="left" alt="trash">
\n"; DisplayFilterTable($alert, $readonly); print "
\n"; DisplaySumStatTable($alert, $readonly); print "
\n"; DisplayTopNTable($alert, $readonly); print "
\n"; DisplayPluginTable($alert, $readonly); print "
\n"; DisplayTriggerTable($alert, $readonly); print "
\n"; DisplayActionTable($alert, $readonly); print "
\n"; DisplayEventTable($alert, $readonly); print "
\n" ?>
$alert), 0); if ( !is_array($alertinfo) ) { $_SESSION['action'] = 'list'; return; } else { $_SESSION['action'] = 'details'; } $cmdout = nfsend_query("get-alertfilter", array('alert' => $alert ), 0); if ( !is_array($cmdout) ) { $_SESSION['action'] = 'list'; return; } $alertinfo['filter'] = $cmdout['alertfilter']; if ( $alertinfo['type'] == 0 ) { $i = 0; } else { $i = $num_ConditionList; } // preset all possible conditions for ( $i=0; $i < (2*$num_ConditionList); $i++ ) { $alertinfo["visible_$i"] = 0; $alertinfo["op_$i"] = 0; $alertinfo["type_$i"] = 0; $alertinfo["comp_$i"] = 0; $alertinfo["comp_type_$i"] = 0; $alertinfo["stat_type_$i"] = 0; $alertinfo["comp_value_$i"] = 0; $alertinfo["scale_$i"] = 0; } // if it's a type 0/1 type, break up the condition and fill the appropriate variables for displaying if ( $alertinfo['type'] != 2 ) { $i = $alertinfo['type'] == 1 ? $num_ConditionList : 0; // preset all configured conditions foreach ( $alertinfo['condition'] as $condition ) { list($op,$type,$comp,$comp_type,$stat_type,$comp_value,$scale) = explode(':', $condition); $alertinfo["visible_$i"] = 1; $alertinfo["op_$i"] = $op; $alertinfo["type_$i"] = $type; $alertinfo["comp_$i"] = $comp; $alertinfo["comp_type_$i"] = $comp_type; $alertinfo["stat_type_$i"] = $stat_type; $alertinfo["comp_value_$i"] = $comp_value; $alertinfo["scale_$i"] = $scale; $i++; } } $_SESSION['alertinfo'] = $alertinfo; if ( !array_key_exists('avg_type', $_COOKIE) ) { $_SESSION['alert_display']['avg_type'] = 0; } else { $_type = $_COOKIE['avg_type']; if ( is_numeric($_type) && ($_type >= 0 && $_type <= 2 ) ) $_SESSION['alert_display']['avg_type'] = $_type; else $_SESSION['alert_display']['avg_type'] = 0; } } // End of UpdateAlert function Process_alert_tab ($tab_changed, $profile_changed) { global $num_ConditionList; global $ConditionList; global $num_ConditionList; global $ConditionList; global $ActionList; global $FlowStat_type; global $SumStat_type_options; global $SumStat_comp_type; global $SumStat_scale; // register 'get-alertgraph' command for rrdgraph.php if ( !array_key_exists('rrdgraph_cmds', $_SESSION) || !array_key_exists('get-alertgraph', $_SESSION['rrdgraph_cmds']) ) { $_SESSION['rrdgraph_cmds']['get-alertgraph'] = 1; $_SESSION['rrdgraph_getparams']['alert'] = 1; } $_SESSION['action'] = 'list'; // Delete an alert? if ( array_key_exists('delete_alert_x', $_POST )) { $parse_opts = array( "alert" => array( "required" => 1, "default" => NULL, "allow_null" => 0, "match" => $_SESSION['alertlist'], "validate" => null, "must_exist" => 1), ); list ($form_data, $has_errors) = ParseForm($parse_opts); if ( $has_errors ) return; $cmd_out = nfsend_query("delete-alert", $form_data, 0); $_SESSION['action'] = 'list'; UpdateAlertList(); return; } // Arm the alert if ( array_key_exists('arm_trigger_x', $_POST )) { $parse_opts = array( "alert" => array( "required" => 1, "default" => NULL, "allow_null" => 0, "match" => $_SESSION['alertlist'], "validate" => null, "must_exist" => 1), ); list ($form_data, $has_errors) = ParseForm($parse_opts); if ( $has_errors ) return; $cmd_out = nfsend_query("arm-alert", $form_data, 0); $_SESSION['action'] = 'list'; UpdateAlert($_SESSION['alertinfo']['name']); return; } // cancel a new alert dialog if ( array_key_exists('new_alert_cancel', $_POST ) ) { $_SESSION['action'] = 'list'; return; } // provide the add new alert dialog? if ( array_key_exists('new_alert_x', $_POST ) ) { $_SESSION['action'] = 'new'; $_SESSION['refresh'] = 0; // preset alert info for new alert $alertinfo['alert'] = ''; $alertinfo['type'] = 0; $alertinfo['visible_0'] = 1; $alertinfo['status'] = 'disabled'; $alertinfo['trigger_type'] = 0; $alertinfo['trigger_status'] = 0; $alertinfo['trigger_number'] = 0; $alertinfo['trigger_blocks'] = 0; $alertinfo['action_type'] = 0; $alertinfo['action_email'] = ''; $alertinfo['action_subject'] = 'Alert triggered'; $alertinfo['action_system'] = ''; $alertinfo['filter'] = array(); $alertinfo['channellist'] = implode('|', array_keys($_SESSION['profileinfo']['channel']) ); for ( $i=0; $i < (2*$num_ConditionList); $i++ ) { $alertinfo["visible_$i"] = 0; $alertinfo["op_$i"] = 0; $alertinfo["type_$i"] = 0; $alertinfo["comp_$i"] = 0; $alertinfo["comp_type_$i"] = 0; $alertinfo["stat_type_$i"] = 0; $alertinfo["comp_value_$i"] = 0; $alertinfo["scale_$i"] = 0; } $_SESSION['alertinfo'] = $alertinfo; // disable page refresh $_SESSION['refresh'] = 0; return; } // create the new alert $ModifyOrNew = NULL; if ( array_key_exists('new_alert_commit_x', $_POST ) || array_key_exists('new_alert_commit', $_POST )) { $ModifyOrNew = 'new'; } if ( array_key_exists('edit_alert_commit', $_POST ) ) { $ModifyOrNew = 'modify'; } if ( $ModifyOrNew != NULL ) { $parse_opts = array( "alert" => array( "required" => 1, "default" => NULL, "allow_null" => 0, "match" => "/^[A-Za-z0-9][A-Za-z0-9\-+_]*$/" , "validate" => 'alert_name_check', "must_exists" => $ModifyOrNew == 'modify'), "channellist" => array( "required" => 0, "default" => '', "allow_null" => 0, "match" => null, "validate" => 'channellist_validate'), "filter" => array( "required" => 0, "default" => NULL, "allow_null" => 1, "match" => "/^[\s!-~]*$/", "validate" => 'filter_validate'), "type" => array( "required" => 1, "default" => 0, "allow_null" => 1, "match" => array( 0, 1, 2), "validate" => null), "status" => array( "required" => 0, "default" => 'disabled', "allow_null" => 1, "match" => array('enabled', 'disabled'), "validate" => null), "trigger_type" => array( "required" => 1, "default" => 0, "allow_null" => 1, "match" => array( 0, 1, 2), "validate" => null), "trigger_number" => array( "required" => 1, "default" => 1, "allow_null" => 0, "match" => range( 1, 9), "validate" => null), "trigger_blocks" => array( "required" => 1, "default" => 0, "allow_null" => 1, "match" => range( 0, 9), "validate" => null), "plugin_condition" => array( "required" => 0, "default" => -1, "allow_null" => 0, "match" => range(-1, count($_SESSION['alert_condition_plugin'])), "validate" => null), "action_plugin" => array( "required" => 0, "default" => -1, "allow_null" => 0, "match" => range(-1, count($_SESSION['alert_action_plugin'])), "validate" => null), "action_email" => array( "required" => 0, "default" => '', "allow_null" => 1, "match" => null, "validate" => 'check_email_address'), "action_subject" => array( "required" => 0, "default" => 'Alert triggered', "allow_null" => 1, "match" => "/^[\s!-~]+$/", "validate" => 'subject_validate'), "action_system" => array( "required" => 0, "default" => null, "allow_null" => 1, "match" => "/^[\s!-~]+$/", "validate" => null), ); for ( $i=0; $i < (2*$num_ConditionList); $i++ ) { $name = "op_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => array(0, 1), "validate" => null); $name = "visible_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => array(0, 1), "validate" => null); $name = "type_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => range(0, count($SumStat_type_options)-1), "validate" => null); $name = "comp_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => array(0, 1, 2), "validate" => null); $name = "comp_type_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => range(0, count($SumStat_comp_type)-1), "validate" => null); $name = "stat_type_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => range(0, count($FlowStat_type)-1), "validate" => null); $name = "comp_value_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => "/^\d+$/", "validate" => null); $name = "scale_$i"; $parse_opts[$name] = array( "required" => 0, "default" => 0, "allow_null" => 1, "match" => range(0, count($SumStat_scale)-1), "validate" => null); } list ($alertinfo, $has_errors) = ParseForm($parse_opts); $form_values = $alertinfo; if ( $has_errors ) { if ( $ModifyOrNew == 'new' ) { $_SESSION['action'] = 'new'; $_SESSION['refresh'] = 0; } else { $_SESSION['action'] = 'details'; $_SESSION['refresh'] = 0; } return; } // process action types $action_type = 0; for ($i=1; $i < 4; $i++ ) { if ( array_key_exists("action_$i", $_POST ) ) { $action_type += 1 << ($i-1); } } $alertinfo['action_type'] = $action_type; $form_values['action_type'] = $action_type; if ( $alertinfo['type'] == 2 ) { $lim = 2*$num_ConditionList; } else { $lim = $alertinfo['type'] == 0 ? 0 : $num_ConditionList; } if ( $alertinfo['action_plugin'] > -1 ) { $alertinfo['action_plugin'] = $_SESSION['alert_action_plugin'][$alertinfo['action_plugin']]; } else { unset($alertinfo['action_plugin']); } // prepare condition array $condition = array(); if ( $alertinfo['type'] == 2 ) { $condition[] = $_SESSION['alert_condition_plugin'][$alertinfo['plugin_condition']]; } else { for ( $i = 0; $i < ( 2*$num_ConditionList); $i++ ) { if ( $i >= $lim && $i < ( $lim + $num_ConditionList) && $alertinfo["visible_$i"] ) { // add to condition array $condition[] = implode(':', array( $alertinfo["op_$i"], $alertinfo["type_$i"], $alertinfo["comp_$i"], $alertinfo["comp_type_$i"], $alertinfo["stat_type_$i"], $alertinfo["comp_value_$i"], $alertinfo["scale_$i"]) ); } } } for ( $i = 0; $i < ( 2*$num_ConditionList); $i++ ) { // delete other condition values unset($alertinfo["visible_$i"]); unset($alertinfo["op_$i"]); unset($alertinfo["type_$i"]); unset($alertinfo["comp_$i"]); unset($alertinfo["comp_type_$i"]); unset($alertinfo["stat_type_$i"]); unset($alertinfo["comp_value_$i"]); unset($alertinfo["scale_$i"]); } unset($alertinfo['plugin_condition']); $alertinfo['condition'] = $condition; ob_start(); print "Add/modify alert - alertinfo\n"; print_r($alertinfo); ReportLog(ob_get_contents()); ob_clean(); if ( $ModifyOrNew == 'new' ) { $cmd_out = nfsend_query("add-alert", $alertinfo, 0); if ( !is_array($cmd_out) ) { $_SESSION['action'] = 'new'; $_SESSION['alertinfo'] = $form_values; return; } // Update alert list UpdateAlertList(); } else { $cmd_out = nfsend_query("modify-alert", $alertinfo, 0); if ( !is_array($cmd_out) ) { $_SESSION['action'] = 'details'; $_SESSION['refresh'] = 0; return; } } // prepare details view of new alert UpdateAlert($alertinfo['alert']); return; } // status change $status = 'none'; if ( array_key_exists('status', $_POST ) && !array_key_exists('status_hidden', $_POST ) ) { // status set to enabled $status = 'enabled'; } if ( !array_key_exists('status', $_POST ) && array_key_exists('status_hidden', $_POST ) ) { // status set to disabled $status = 'disabled'; } if ( $status != 'none' ) { // redisplay alert $_SESSION['action'] = 'details'; $_SESSION['refresh'] = 0; $cmd_out = nfsend_query("modify-alert", array( 'alert' => $_SESSION['alertinfo']['name'], 'status' => $status ), 0); if ( !is_array($cmd_out) ) { return; } UpdateAlert($_SESSION['alertinfo']['name']); return; } if ( array_key_exists('view_alert_x', $_POST ) ) { $parse_opts = array( "alert" => array( "required" => 1, "default" => NULL, "allow_null" => 0, "match" => $_SESSION['alertlist'], "validate" => null, "must_exist" => 1), ); list ($form_data, $has_errors) = ParseForm($parse_opts); if ( $has_errors ) return; $_SESSION['refresh'] = 0; UpdateAlert($form_data['alert']); return; } if ( array_key_exists('edit_alert_cancel', $_POST ) ) { // redisplay current alert $_SESSION['action'] = 'details'; $_SESSION['refresh'] = 0; return; } // everything else - show alert list UpdateAlertList(); return; } // End of Process_alert_tab function DisplayAlerts() { global $num_ConditionList; ?> ERROR action: " . $_SESSION['action'] . ""; break; } unset($_SESSION['action']); if ( $setup ) { ?>