} $security_report = new Security_report(); if (!strcmp($target, "ip_src") || !strcmp($target, "src_ip")) { $title = _("TOP ATTACKER"); $sufix = "er"; $color = "#FF0000"; //$color = "navy"; //$color2 = "lightsteelblue"; $titlecolor = "darkblue"; } elseif (!strcmp($target, "ip_dst") || !strcmp($target, "dst_ip")) { $title = _("TOP ATTACKED"); $sufix = "ed"; $color = "#FAC800"; $titlecolor = "darkred"; } $shared = new DBA_shared(GET('shared')); $SS_Attack = $shared->get("SS_Attack" . $sufix . "Host{$runorder}"); $SA_Attack = $shared->get("SA_Attack" . $sufix . "Host{$runorder}"); if ($type == "event" && is_array($SS_Attack) && count($SS_Attack) > 0) { $list = $SS_Attack; } elseif ($type == "alarm" && is_array($SA_Attack) && count($SA_Attack) > 0) { $list = $SA_Attack; } else { $list = $security_report->AttackHost($target, $limit, $type, $date_from, $date_to); } $datax = $datay = array(); $gorientation = "h"; foreach ($list as $key => $l) { if ($key >= 10) { // ponemos un límite de resultados para la gráfica //break;
require_once 'av_init.php'; Session::logcheck("analysis-menu", "IncidentsReport"); $by = GET('by'); ossim_valid($by, OSS_ALPHA, OSS_SPACE, OSS_SCORE, 'illegal:' . _("Target")); if (ossim_error()) { die(ossim_error()); } // Define colors $color_list = array('#D6302C', '#3933FC', 'green', 'yellow', 'pink', '#40E0D0', '#00008B', '#800080', '#FFA500', '#A52A2A', '#228B22', '#D3D3D3'); $conf = $GLOBALS["CONF"]; $jpgraph = $conf->get_conf("jpgraph_path"); require "{$jpgraph}/jpgraph.php"; require "{$jpgraph}/jpgraph_bar.php"; $db = new ossim_db(); $conn = $db->connect(); $shared = new DBA_shared(GET('shared')); if ($by == "ticketsByTypePerMonth") { $titley = _("Month") . '-' . _("Year"); $titlex = _("Num. Tickets"); $title = ''; $width = 650; $user = $shared->get("TicketsStatus4_user"); $assets = $shared->get("TicketsStatus4_assets"); $final_values = array(); $ticket_by_type_per_month = Incident::incidents_by_type_per_month($conn, $assets, $user); if (is_array($ticket_by_type_per_month) && !empty($ticket_by_type_per_month)) { foreach ($ticket_by_type_per_month as $event_type => $months) { $final_values[$event_type] = implode(",", $months); } $event_types = array_keys($ticket_by_type_per_month); }
if ($runorder == 0) { $runorder = ""; } $multiple_colors = intval(GET('colors')); if (ossim_error()) { die(ossim_error()); } /* hosts to show */ if (empty($limit) || $limit <= 0 || $limit > 10) { $limit = 10; } if (empty($type)) { $type = "event"; } $security_report = new Security_report(); $shared = new DBA_shared(GET('shared')); $SS_TopEvents = $shared->get("SS_TopEvents{$runorder}"); $SA_TopAlarms = $shared->get("SA_TopAlarms{$runorder}"); if ($type == "event" && is_array($SS_TopEvents) && count($SS_TopEvents) > 0) { $list = $SS_TopEvents; } elseif ($type == "alarm" && is_array($SA_TopAlarms) && count($SA_TopAlarms) > 0) { $list = $SA_TopAlarms; } else { $list = $security_report->Events($limit, $type, $date_from, $date_to); } $data_pie = array(); $legend = $data = array(); foreach ($list as $key => $l) { if ($key >= 10) { // ponemos un límite de resultados para la gráfica break;
$runorder = intval(GET('runorder')); if ($runorder == 0) { $runorder = ""; } if (ossim_error()) { die(ossim_error()); } /* ports to show */ if (empty($limit)) { $limit = 10; } if (empty($type)) { $type = "event"; } $security_report = new Security_report(); $shared = new DBA_shared(GET('shared')); $SS_UsedPorts = $shared->get("SS_UsedPorts{$runorder}"); $SA_UsedPorts = $shared->get("SA_UsedPorts{$runorder}"); if ($type == "event" && is_array($SS_UsedPorts) && count($SS_UsedPorts) > 0) { $list = $SS_UsedPorts; } elseif ($type == "alarm" && is_array($SA_UsedPorts) && count($SA_UsedPorts) > 0) { $list = $SA_UsedPorts; } else { $list = $security_report->Ports($limit, $type, $date_from, $date_to); } $datax = $datay = array(); $gorientation = "h"; foreach ($list as $key => $l) { if ($key >= 10) { // ponemos un limite de resultados para la grafica //break;
* Public License can be found in `/usr/share/common-licenses/GPL-2'. * * Otherwise you can read it here: http://www.gnu.org/licenses/gpl-2.0.txt * */ require_once 'av_init.php'; Session::logcheck("analysis-menu", "EventsForensics"); $conf = $GLOBALS["CONF"]; $jpgraph = $conf->get_conf("jpgraph_path"); require "{$jpgraph}/jpgraph.php"; require "{$jpgraph}/jpgraph_line.php"; require "{$jpgraph}/jpgraph_scatter.php"; $geo_year = GET("year"); $geo_month = GET("month"); $user = GET("user"); $shared = new DBA_shared(GET('shared')); $runorder = intval(GET('runorder')); if ($runorder == 0) { $runorder = ""; } $ips = $shared->get("geoips" . $runorder); if (!is_array($ips)) { $ips = array(); } #Resolution de la database: $xdb = 620; $ydb = 310; # Resolution de l'image $ximg = 1264; $yimg = 694; # Rapport :
define('COLOR9', '#FFA500'); define('COLOR10', '#A52A2A'); define('COLOR11', '#228B22'); define('COLOR12', '#D3D3D3'); require_once 'av_init.php'; require_once 'ossim_conf.inc'; Session::logcheck("analysis-menu", "EventsForensics"); $conf = $GLOBALS["CONF"]; $jpgraph = $conf->get_conf("jpgraph_path"); require_once "{$jpgraph}/jpgraph.php"; require_once "{$jpgraph}/jpgraph_line.php"; $runorder = intval(GET('runorder')); if ($runorder == 0) { $runorder = ""; } $shared = new DBA_shared(GET('shared')); $data = $shared->get('data' . $runorder); $legend = array(); $values = array(); foreach ($data as $k => $aux_data) { $legend[] = $aux_data['label']; $values[] = $aux_data['value']; } // Setup the graph. $graph = new Graph(730, 180, "auto"); $graph->SetScale("textlin"); $graph->SetMargin(60, 50, 15, 25); $graph->SetMarginColor("#ffffff"); $graph->xaxis->SetTickLabels($legend); $graph->SetColor("#fafafa"); $graph->SetFrame(true, '#ffffff', 0);
* On Debian GNU/Linux systems, the complete text of the GNU General * Public License can be found in `/usr/share/common-licenses/GPL-2'. * * Otherwise you can read it here: http://www.gnu.org/licenses/gpl-2.0.txt ****************************************************************************/ /** * Class and Function List: * Function list: * Classes list: */ require_once 'classes/SecurityReport.inc'; require_once 'classes/Security.inc'; require_once 'classes/Util.inc'; //Session::logcheck("MenuReports", "ReportsSecurityReport"); Session::logcheck("MenuEvents", "EventsForensics"); $shared = new DBA_shared(GET('shared')); $ips = $shared->get("geoips"); if (!is_array($ips)) { $ips = array(); } $data_pie = array(); $legend = $data = array(); foreach ($ips as $country => $val) { $cou = explode(":", $country); $val = round($val, 1); $legend[] = $cou[1]; $data[] = $val; } $total = array_sum($data); $labels = array(); $tlabels = array();