#! /usr/bin/perl # # Purpose: # FlowViewer_UI.pm holds utility functions that are called # by FlowViewer, FlowGrapher, and FlowMonitor scripts to create # the version 4.0 User Interface. # # Description: # Various user interface utility functions. # # Input arguments: # Name Description # ----------------------------------------------------------------------- # None # # Modification history: # Author Date Vers. Description # ----------------------------------------------------------------------- # J. Loiacono 05/08/2012 4.0 Original Version. # J. Loiacono 08/07/2013 4.2 Fixed exporter NamedInterfaces [M. Donnelly] # J. Loiacono 09/11/2013 4.2.1 Mods to accomodate new Linear processing # Mods for international date formatting # J. Loiacono 01/26/2014 4.3 Introduced Detect Scanning # J. Loiacono 07/04/2014 4.4 Multiple dashboards and Analysis # J. Loiacono 11/02/2014 4.5 FlowTracker to FlowMonitor rename # Added option to eliminate bottom pulldowns # J. Loiacono 01/26/2015 4.6 Timezone from system (not Configuration) # Fixed wrong listing of very old Saved files # #$Author$ #$Date$ #$Header$ # ########################################################################### # # BEGIN EXECUTABLE STATEMENTS # use File::stat; use Time::Local; use Time::HiRes qw( usleep ualarm gettimeofday tv_interval ); sub create_UI_top { my ($active_dashboard) = @_; $active_dashboard =~ s/\\//; # Create the top FlowViewer title and Local Information print "Content-type:text/html\n\n"; print "\n\n"; print "\n"; print "\n"; print "\n"; print "FlowViewer - Maintaining Network Traffic Situational Awareness\n"; print "\n"; print "\n"; print "\n"; print "
\n"; print "
\n"; print "\n"; print "
\n"; print "
\n"; if ($active_dashboard ne "Main_Only") { foreach $dashboard_title (@dashboard_titles) { $dashboard_name = $dashboard_title; $dashboard_name =~ s/ /~/; if ($dashboard_name eq $active_dashboard) { next; } $dashboard_link = "$cgi_bin_short/FV.cgi?$dashboard_name"; print " $dashboard_title   \n"; } } else { print " $left_title\n"; } print "
\n"; print "
\n"; if ($active_dashboard ne "Main_Only") { $dashboard_name = $active_dashboard; $dashboard_name =~ s/\~/ /; $dashboard_link = "$cgi_bin_short/FV.cgi?$active_dashboard"; print " Active Dashboard: $dashboard_name\n"; } else { print " $right_title\n"; } print "
\n"; print "
\n"; print " FlowViewer\n"; print "

\n"; print " Powered by flow-tools and SiLK\n"; print "

\n"; print "\n"; } sub create_UI_service { my ($called_by,$service_location,$active_directory,$filter_hash) = @_; print "
\n"; if ($service_location eq "service_top") { @filters = (); @actives = (); @groups = (); @archives = (); @filters = <$filter_directory/*>; foreach $filter_file (@filters) { if ($filter_file =~ /\.fil/) { push (@actives,$filter_file); } elsif ($filter_file =~ /\.grp/) { push (@groups,$filter_file); } elsif ($filter_file =~ /\.archive/) { push (@archives,$filter_file); } } @actives = sort(@actives); unshift (@actives,"start_actives"); @groups = sort(@groups); unshift (@groups,"start_groups"); @archives = sort(@archives); unshift (@archives,"start_archives"); @filters = (@actives, @groups, @archives); } # Create the left-side Active Monitors pulldown if (($service_location eq "service_top") || (($service_location eq "service_bottom") && ($use_bottom_pulldowns eq "Y"))) { print " \n"; } else { print " \n"; } if ($called_by =~ /FlowViewer/) { print " \n"; if (($called_by =~ /Main/) && ($service_location eq "service_bottom")) { print "
\n"; print " \n"; } else { print " \n"; print " \n"; } print "
\n"; print " \n"; print "
\n"; print " \n"; print "
\n"; print " \n"; if (($called_by =~ /Main/) && ($service_location eq "service_bottom")) { print "
\n"; print " \n"; } else { print " \n"; print " \n"; } print "
\n"; } elsif ($called_by =~ /FlowGrapher/) { print " \n"; if (($called_by =~ /Main/) && ($service_location eq "service_bottom")) { print "
\n"; print " \n"; } else { print " \n"; print " \n"; } print "
\n"; print " \n"; print "
\n"; print " \n"; print "
\n"; print " \n"; if (($called_by =~ /Main/) && ($service_location eq "service_bottom")) { print "
\n"; print " \n"; } else { print " \n"; print " \n"; } print "
\n"; } elsif ($called_by =~ /FlowMonitor/) { print " \n"; if (($called_by =~ /Display/) && ($service_location eq "service_bottom")) { print "
\n"; print " \n"; } else { print " \n"; print " \n"; } print "
\n"; print " \n"; print "
\n"; print " \n"; print "
\n"; print " \n"; if (($called_by =~ /Display/) && ($service_location eq "service_bottom")) { print "
\n"; print " \n"; } else { print " \n"; print " \n"; } print "
\n"; } # Create the right-side Saved Reports pulldown if (($service_location eq "service_top") || (($service_location eq "service_bottom") && ($use_bottom_pulldowns eq "Y"))) { print " \n"; } print "
\n"; } sub create_UI_sides { my ($active_dashboard) = @_; $switch_dashboard = $active_dashboard; $switch_dashboard =~ s/\~/ /; $active_db_directory = $dashboard_directory; for ($i=0;$i<=$#dashboard_titles;$i++) { if (($dashboard_titles[$i] eq $switch_dashboard) && ($i > 0)) { $active_db_directory = $other_dashboards[$i-1]; } } while ($dashboard_file = <$active_db_directory/*>) { ($directory,$thumbnail_file) = $dashboard_file =~ m/(.*\/)(.*)$/; ($th_filter_hash,$suffix) = split(/\./,$thumbnail_file); $last_underscore = rindex($th_filter_hash,"_"); $th_filter_hash = substr($th_filter_hash,0,$last_underscore); $last_underscore = rindex($th_filter_hash,"_"); $th_filter_hash = substr($th_filter_hash,0,$last_underscore); $th_filter_hash = "MT_" . $th_filter_hash; $last_slash = rindex($active_db_directory,"/"); $active_short = substr($active_db_directory,$last_slash+1,255); $thumbnail_file = "/$active_short/$thumbnail_file"; if ($dashboard_file =~ "_1.png") { $side_thumbnails{pos_1} = $thumbnail_file; $side_hash{pos_1} = $th_filter_hash; } if ($dashboard_file =~ "_2.png") { $side_thumbnails{pos_2} = $thumbnail_file; $side_hash{pos_2} = $th_filter_hash; } if ($dashboard_file =~ "_3.png") { $side_thumbnails{pos_3} = $thumbnail_file; $side_hash{pos_3} = $th_filter_hash; } if ($dashboard_file =~ "_4.png") { $side_thumbnails{pos_4} = $thumbnail_file; $side_hash{pos_4} = $th_filter_hash; } if ($dashboard_file =~ "_5.png") { $side_thumbnails{pos_5} = $thumbnail_file; $side_hash{pos_5} = $th_filter_hash; } if ($dashboard_file =~ "_6.png") { $side_thumbnails{pos_6} = $thumbnail_file; $side_hash{pos_6} = $th_filter_hash; } if ($dashboard_file =~ "_7.png") { $side_thumbnails{pos_7} = $thumbnail_file; $side_hash{pos_7} = $th_filter_hash; } if ($dashboard_file =~ "_8.png") { $side_thumbnails{pos_8} = $thumbnail_file; $side_hash{pos_8} = $th_filter_hash; } } # Create the left side with Dashboard FlowMonitor Thumbnails print "
\n"; if ($side_thumbnails{pos_1} ne "") { print " \n"; print " \n"; } else { print "                 \n"; print "                 \n"; print "                 \n"; print "                 \n"; print "                 \n"; } if ($side_thumbnails{pos_3} ne "") { print " \n"; print " \n"; } if ($side_thumbnails{pos_5} ne "") { print " \n"; print " \n"; } if ($side_thumbnails{pos_7} ne "") { print " \n"; print " \n"; } print "
\n"; # Create the right side with Dashboard FlowMonitor Thumbnails print "
\n"; if ($side_thumbnails{pos_2} ne "") { print " \n"; print " \n"; } else { print "                 \n"; print "                 \n"; print "                 \n"; print "                 \n"; print "                 \n"; } if ($side_thumbnails{pos_4} ne "") { print " \n"; print " \n"; } if ($side_thumbnails{pos_6} ne "") { print " \n"; print " \n"; } if ($side_thumbnails{pos_8} ne "") { print " \n"; print " \n"; } print "
\n"; } sub finish_the_page { my ($called_by) = @_; # Finish the web page print "
\n"; print "\n"; print "\n"; } sub create_filtering_form { ($called_by,$filter_hash) = @_; if ($called_by eq "FlowViewer") { print "
\n"; } if ($called_by eq "FlowGrapher") { print " \n"; } if ($called_by eq "FlowMonitor") { print " \n"; } if ($called_by eq "FlowMonitor_Sol") { print " \n"; $skip_date = "Y";} load_filtering_parameters($called_by,$filter_hash); if ($new_device ne "") { $form_device_name = $new_device; } if ($new_exporter ne "") { $form_exporter = $new_exporter; } print "
\n"; if ($called_by eq "FlowViewer" ) { print "  Create a FlowViewer Report\n"; } if ($called_by eq "FlowGrapher") { print "  Create a FlowGrapher Report\n"; } if ($called_by eq "FlowMonitor") { print "  Create a FlowMonitor\n"; } if ($called_by =~ "FlowMonitor_Sol") { $monitor_hash = $form_monitor_label; $monitor_hash =~ s/ /~/g; print "  Revise FlowMonitor: $form_monitor_label\n"; } print "\n"; # List the saved filters in the pulldown print "
\n"; print " Saved Filters\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; print "\n"; # Prepare the Device and Exporter pulldowns if (($form_device_name eq "") && ($ipfix_default_device ne "")) { $form_device_name = $ipfix_default_device; } $IPFIX = 0; foreach $ipfix_device (@ipfix_devices) { if ($form_device_name eq $ipfix_device) { $IPFIX = 1; } } print "
\n"; print " Netflow Source\n"; print " \n"; if ($IPFIX) { print " \n"; } if ($form_device_name ne "") { if ($called_by eq "FlowMonitor_Sol") { print " \n"; } else { print " \n"; } print " \n"; } else { if ($called_by eq "FlowMonitor_Sol") { print " \n"; } else { print " \n"; } print " \n"; } @all_devices = (@devices,@ipfix_devices); if ($all_devices[0] ne "") { foreach $all_device_name (@all_devices) { if ($all_device_name eq $form_device_name) { if ($called_by eq "FlowMonitor_Sol") { $device_hash = $monitor_hash ."^DDD". $form_device_name; $option_value = "$cgi_bin_short/FlowMonitor_Management.cgi?$active_dashboard^Solicit^$device_hash"; } else { $device_hash = $filter_hash ."^DDD". $form_device_name; $option_value = "$cgi_bin_short/$called_by.cgi?$active_dashboard^filter_hash=$device_hash"; } print " \n"; } else { if ($called_by eq "FlowMonitor_Sol") { $device_hash = $monitor_hash ."^DDD". $all_device_name; $option_value = "$cgi_bin_short/FlowMonitor_Management.cgi?$active_dashboard^Solicit^$device_hash"; } else { $device_hash = $filter_hash ."^DDD". $all_device_name; $option_value = "$cgi_bin_short/$called_by.cgi?$active_dashboard^filter_hash=$device_hash"; } print " \n"; } } } print " \n"; print " \n"; if ($IPFIX) { if (($form_silk_rootdir eq "") || ($new_device ne "")) { $grep_command = "grep path-format $silk_data_directory/silk.conf"; open(GREP,"$grep_command 2>&1|"); while () { chop; ($left_part,$path_format) = split(/path-format/); if ($left_part =~ /\#/) { $form_silk_rootdir = "$silk_data_directory/$form_device_name"; } else { $path_format =~ s/\s+//g; $path_format =~ s/\///g; $path_format =~ s/\"//g; ($left_part,$dir1,$dir2,$dir3,$dir4,$dir5,$dir6,$dir7) = split(/\%/,$path_format); if ($dir1 ne "T") { $form_silk_rootdir = $silk_data_directory; } else { $form_silk_rootdir = "$silk_data_directory/$form_device_name"; } } } } if ($form_device_name eq "Site") { $form_silk_rootdir = $silk_data_directory; } print " \n"; print " \n"; print " \n"; } else { print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; print "\n"; # Prepare the Period Start and End times (calculate if not saved.) if ($called_by =~ "FlowMonitor") { if ($skip_date ne "Y") { ($sec,$min,$hr,$date,$mnth,$yr,$day,$yr_date,$DST) = localtime(time-$start_offset); $mnth += 1; $yr += 1900; $min_delta = $min % 5; $min = $min - $min_delta; if (length $mnth < 2) { $mnth = "0" . $mnth; } if (length $date < 2) { $date = "0" . $date; } if (length $hr < 2) { $hr = "0" . $hr; } if (length $min < 2) { $min = "0" . $min; } if (length $sec < 2) { $sec = "0" . $sec; } if ($date_format eq "DMY") { $start_date_out = $date ."/". $mnth ."/". $yr; } elsif ($date_format eq "DMY2") { $start_date_out = $date .".". $mnth .".". $yr; } elsif ($date_format eq "YMD") { $start_date_out = $yr ."-". $mnth ."-". $date; } else { $start_date_out = $mnth ."/". $date ."/". $yr; } if ($use_even_hours eq "Y") { $start_time_out = $hr .":00:00"; } else { $start_time_out = $hr .":". $min .":00"; } print "
\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; print "\n"; } else { $skip_date = ""; } } else { $start_date_out = $form_start_date; $start_time_out = $form_start_time; $end_date_out = $form_end_date; $end_time_out = $form_end_time; if ($start_date_out eq "") { ($sec,$min,$hr,$date,$mnth,$yr,$day,$yr_date,$DST) = localtime(time-$start_offset); $mnth += 1; $yr += 1900; $min_delta = $min % 5; $min = $min - $min_delta; if (length $mnth < 2) { $mnth = "0" . $mnth; } if (length $date < 2) { $date = "0" . $date; } if (length $hr < 2) { $hr = "0" . $hr; } if (length $min < 2) { $min = "0" . $min; } if (length $sec < 2) { $sec = "0" . $sec; } if ($date_format eq "DMY") { $start_date_out = $date ."/". $mnth ."/". $yr; } elsif ($date_format eq "DMY2") { $start_date_out = $date .".". $mnth .".". $yr; } elsif ($date_format eq "YMD") { $start_date_out = $yr ."-". $mnth ."-". $date; } else { $start_date_out = $mnth ."/". $date ."/". $yr; } if ($use_even_hours eq "Y") { $start_time_out = $hr .":00:00"; } else { $start_time_out = $hr .":". $min .":00"; } ($sec,$min,$hr,$date,$mnth,$yr,$day,$yr_date,$DST) = localtime(time-$end_offset); $mnth += 1; $yr += 1900; $min_delta = $min % 5; $min = $min - $min_delta; if (length $mnth < 2) { $mnth = "0" . $mnth; } if (length $date < 2) { $date = "0" . $date; } if (length $hr < 2) { $hr = "0" . $hr; } if (length $min < 2) { $min = "0" . $min; } if (length $sec < 2) { $sec = "0" . $sec; } if ($date_format eq "DMY") { $end_date_out = $date ."/". $mnth ."/". $yr; } elsif ($date_format eq "DMY2") { $end_date_out = $date .".". $mnth .".". $yr; } elsif ($date_format eq "YMD") { $end_date_out = $yr ."-". $mnth ."-". $date; } else { $end_date_out = $mnth ."/". $date ."/". $yr; } if ($use_even_hours eq "Y") { $end_time_out = $hr .":00:00"; } else { $end_time_out = $hr .":". $min .":00"; } } print "
\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; print "\n"; } # Prepare the Source related fields print "
\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; print "\n"; # Prepare the Destination related fields print "
\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; print "\n"; # Prepare the Additional Fields print "
\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; } sub create_reporting_form { $IPFIX = 0; foreach $ipfix_device (@ipfix_devices) { if ($form_device_name eq $ipfix_device) { $IPFIX = 1; } } print "
\n"; print " Reporting Parameters\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "


\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if ($form_cutoff_lines eq "") { $form_cutoff_lines = $default_lines; } print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "


\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; } sub create_graphing_form { $IPFIX = 0; foreach $ipfix_device (@ipfix_devices) { if ($form_device_name eq $ipfix_device) { $IPFIX = 1; } } print "
\n"; print " Graphing Parameters\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if ($form_detail_lines eq "") { $form_detail_lines = $detail_lines; } print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; } sub create_monitor_form { $IPFIX = 0; foreach $ipfix_device (@ipfix_devices) { if ($form_device_name eq $ipfix_device) { $IPFIX = 1; } } print "
\n"; print " Monitor Parameters\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "

\n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; } sub create_revision_form { print "
\n"; print " Revision Notes\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; } sub create_SiLK_form { # If using IPFIX, prepare the SiLK Selection $IPFIX = 0; foreach $ipfix_device (@ipfix_devices) { if ($form_device_name eq $ipfix_device) { $IPFIX = 1; } } if ($IPFIX) { # For legacy use of "silk_field", convert to silk_type if (substr($form_silk_field,1,1) eq "1") { $form_silk_type = "in,"; } if (substr($form_silk_field,2,1) eq "1") { $form_silk_type .= "out,"; } if (substr($form_silk_field,3,1) eq "1") { $form_silk_type .= "inweb,"; } if (substr($form_silk_field,4,1) eq "1") { $form_silk_type .= "outweb,"; } if (substr($form_silk_field,5,1) eq "1") { $form_silk_type .= "int2int,"; } if (substr($form_silk_field,6,1) eq "1") { $form_silk_type .= "ext2ext,"; } if (substr($form_silk_type,-1,1) eq ",") { $form_silk_type = substr($form_silk_type,0,-1); } if ($form_silk_other ne "") { $form_silk_type = $form_silk_other; } if ($form_silk_class eq "") { $form_silk_class = $silk_class_default; } if ($form_silk_flowtype eq "") { $form_silk_flowtype = $silk_flowtype_default; } if ($form_silk_type eq "") { $form_silk_type = $silk_type_default; } if ($form_silk_sensors eq "") { $form_silk_sensors = $silk_sensors_default; } if ($form_silk_switches eq "") { $form_silk_switches = $silk_switches_default; } print "
\n"; print " SiLK Selection\n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; } } sub create_submit_buttons { my ($called_by) = @_; if ($called_by ne "FlowMonitor_Sol") { print "
\n"; } print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print "
\n"; if ($called_by eq "FlowViewer") { print " \n"; } if ($called_by eq "FlowGrapher") { print " \n"; } if ($called_by eq "FlowMonitor") { print " \n"; } if ($called_by eq "FlowMonitor_Sol") { print " \n"; $called_by = "FlowMonitor"; } print "                     \n"; print " \n"; print " \n"; print " \n"; print "
\n"; if ($called_by ne "FlowMonitor_Sol") { print "
\n"; } print "
\n"; print "
\n"; } sub create_filter_output { my ($called_by,$filter_hash) = @_; load_filtering_parameters($called_by,$filter_hash); if ($called_by =~ "FlowMonitor_Replay") { print "
\n"; print " $form_Description\n"; print "
\n"; } if ($called_by =~ "FlowMonitor") { print "
\n"; print " $form_monitor_label\n"; print "
\n"; } if ($form_monitor_type eq "Group") { if ($form_general_comment ne "") { print "
\n"; print " $form_general_comment\n"; } return; } open(DATE,"date 2>&1|"); while () { ($d_tz,$m_tz,$dt_tz,$t_tz,$time_zone,$y_tz) = split(/\s+/,$_); } print " \n"; if (($called_by =~ "FlowViewer") || ($called_by =~ "FlowGrapher")) { print " \n"; if ($called_by =~ "FlowViewer") { if ($stat_report == 99) { $report_title = "Summary"; } if ($stat_report == 5) { $report_title = "UDP/TCP Destination Port"; } if ($stat_report == 6) { $report_title = "UDP/TCP Source Port"; } if ($stat_report == 7) { $report_title = "UDP/TCP Port"; } if ($stat_report == 8) { $report_title = "Destination IP"; } if ($stat_report == 9) { $report_title = "Source IP"; } if ($stat_report == 10) { $report_title = "Source/Destination IP"; } if ($stat_report == 11) { $report_title = "Source or Destination IP"; } if ($stat_report == 12) { $report_title = "IP Protocol"; } if ($stat_report == 17) { $report_title = "Input Interface"; } if ($stat_report == 18) { $report_title = "Output Interface"; } if ($stat_report == 19) { $report_title = "Source AS"; } if ($stat_report == 20) { $report_title = "Destination AS"; } if ($stat_report == 21) { $report_title = "Source/Destination AS"; } if ($stat_report == 22) { $report_title = "IP ToS"; } if ($stat_report == 23) { $report_title = "Input/Output Interface"; } if ($stat_report == 24) { $report_title = "Source Prefix"; } if ($stat_report == 25) { $report_title = "Destination Prefix"; } if ($stat_report == 26) { $report_title = "Source/Destination Prefix"; } if ($stat_report == 27) { $report_title = "Exporter IP"; } if ($stat_report == 30) { $report_title = "Detect Scanning"; } if ($print_report == 1) { $report_title = "Flow Times"; } if ($print_report == 4) { $report_title = "AS Numbers"; } if ($print_report == 5) { $report_title = "132 Columns"; } if ($print_report == 9) { $report_title = "1 Line with Tags"; } if ($print_report == 10) { $report_title = "AS Aggregation"; } if ($print_report == 11) { $report_title = "Protocol Port Aggregation"; } if ($print_report == 12) { $report_title = "Source Prefix Aggregation"; } if ($print_report == 13) { $report_title = "Destination Prefix Aggregation"; } if ($print_report == 14) { $report_title = "Prefix Aggregation"; } if ($print_report == 15) { $report_title = "Source Prefix Aggregation v6"; } if ($print_report == 16) { $report_title = "Destination Prefix Aggregation v6"; } if ($print_report == 17) { $report_title = "Prefix Aggregation v6"; } if ($print_report == 24) { $report_title = "Full (Catalyst)"; } print " \n"; print " \n"; print " \n"; if ($form_sort_field == 1) { print " \n"; } if ($form_sort_field == 2) { print " \n"; } if ($form_sort_field == 3) { print " \n"; } } elsif ($called_by =~ "FlowGrapher") { print " \n"; if ($form_graph_type eq "bps") { $graph_type_out = "Bits/Second"; } elsif ($form_graph_type eq "bpsa") { $graph_type_out = "Bits/Second Analysis"; } elsif ($form_graph_type eq "pps") { $graph_type_out = "Packets/Second"; } elsif ($form_graph_type eq "ppsa") { $graph_type_out = "Packets/Second Analysis"; } elsif ($form_graph_type eq "fpsi") { $graph_type_out = "Flows Initiated/Second"; } elsif ($form_graph_type eq "fpsa") { $graph_type_out = "Flows Active/Second"; } elsif ($form_graph_type eq "fpsia") { $graph_type_out = "Flows Initiated/Second Analysis"; } elsif ($form_graph_type eq "fpsaa") { $graph_type_out = "Flows Active/Second Analysis"; } print " \n"; print " \n"; print " \n"; } print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if ($form_exporter ne "") { foreach $exporter_pair (@exporters) { ($exporter_ip,$exporter_name) = split(/:/,$exporter_pair); if ($form_exporter eq $exporter_ip) { last; } } } print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if ($form_sif_names ne "") { if ($form_device_name ne "") { $interfaces_file = "$cgi_bin_directory/NamedInterfaces_Devices"; } elsif ($form_exporter ne "") { $interfaces_file = "$cgi_bin_directory/NamedInterfaces_Exporters"; } open (NAMED,"<$interfaces_file"); chomp (@interfaces = ); close (NAMED); foreach $interface (@interfaces) { if (($interface eq "") || (substr($interface,0,1) eq "#")) { next; } ($device,$interface_index,$interface_name) = split(/:/,$interface); if (($device eq $form_device_name) || ($device eq $form_exporter)) { if ($interface_index eq $form_sif_names) { $sif_name_out = $interface_name; } } } print " \n"; } else { print " \n"; } print " \n"; if ($form_dif_names ne "") { if ($form_device_name ne "") { $interfaces_file = "$cgi_bin_directory/NamedInterfaces_Devices"; } elsif ($form_exporter ne "") { $interfaces_file = "$cgi_bin_directory/NamedInterfaces_Exporters"; } open (NAMED,"<$interfaces_file"); chomp (@interfaces = ); close (NAMED); foreach $interface (@interfaces) { if (($interface eq "") || (substr($interface,0,1) eq "#")) { next; } ($device,$interface_index,$interface_name) = split(/:/,$interface); if (($device eq $form_device_name) || ($device eq $form_exporter)) { if ($interface_index eq $form_dif_names) { $dif_name_out = $interface_name; } } } print " \n"; } else { print " \n"; } print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; if (($form_nexthop_ips ne "") || ($form_protocols ne "")) { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if (($form_tos_fields ne "") || ($form_tcp_flags ne "")) { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if ($called_by =~ "FlowGrapher") { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if ($called_by =~ "FlowViewer") { print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; print " \n"; } if (($called_by =~ "FlowViewer") || ($called_by =~ "FlowGrapher")) { if ($form_flow_select == 1) { $flow_select_out = "Any Part in Specified Time Span"; } if ($form_flow_select == 2) { $flow_select_out = "End Time in Specified Time Span"; } if ($form_flow_select == 3) { $flow_select_out = "Start Time in Specified Time Span"; } if ($form_flow_select == 4) { $flow_select_out = "Entirely in Specified Time Span"; } print " \n"; print " \n"; print " \n"; } if ($form_IPFIX) { if ($form_silk_rootdir ne "") { $selection_out = "--data-rootdir=$form_silk_rootdir "; } if ($form_silk_class ne "") { $selection_out .= "--class=$form_silk_class "; } if ($form_silk_flowtype ne "") { $selection_out .= "--flowtype=$form_silk_flowtype "; } if ($form_silk_type ne "") { $selection_out .= "--type=$form_silk_type "; } if ($form_silk_sensors ne "") { $selection_out .= "--sensors=$form_silk_sensors "; } if ($form_silk_switches ne "") { $selection_out .= "$form_silk_switches "; } print " \n"; if ($called_by =~ "FlowMonitor") { print " \n"; } else { print " \n"; print " \n"; } } if ($called_by =~ "FlowMonitor") { $monitor_type_out = $form_monitor_type; if ($form_monitor_type eq "") { $monitor_type_out = "Bits/Second"; } if ($form_monitor_type eq "Individual") { $monitor_type_out = "Bits/Second"; } if ($form_monitor_type =~ "bps") { $monitor_type_out = "Bits/Second"; } if ($form_monitor_type =~ "pps") { $monitor_type_out = "Packets/Second"; } if (($form_monitor_type eq "fpsi") || ($form_monitor_type eq "Individual-fps")) { $monitor_type_out = "Flows Initiated/Second"; } if (($form_monitor_type eq "fpsa") || ($form_monitor_type =~ /fps-prorated/)) { $monitor_type_out = "Flows Active/Second"; } if ($form_IPFIX) { print " \n"; print " \n"; } else { print " \n"; print " \n"; print " \n"; } print " \n"; } else { if (($form_graph_type eq "bpsa") || ($form_graph_type eq "ppsa") || ($form_graph_type eq "fpsia") || ($form_graph_type eq "fpsaa")) { print " \n"; print " \n"; } } if (($called_by =~ "FlowMonitor") && ($form_general_comment ne "")) { print " \n"; print " \n"; print " \n"; print " \n"; } if (($form_sampling_multiplier > 1) && (!(($stat_report == 99) && ($IPFIX)))) { print " \n"; print " \n"; if (($print_report > 0) && ($print_report <= 10)) { print " \n"; } else { print " \n"; } print " \n"; } if ((($form_print_report >= 12) && ($form_print_report <= 17)) && (($form_source_addresses eq "") && ($form_dest_addresses eq ""))) { print " \n"; print " \n"; print " \n"; print " \n"; } print "
Report:  $report_titleSort Field:  OctetsFlowsPacketsReport:  $graph_type_outBucket Size:  $form_bucket_size sec
Start Time:  $form_start_date $form_start_time $time_zoneEnd Time:  $form_end_date $form_end_time $time_zone
Device Name:  $form_device_nameExporter:  $exporter_name
Source IPs:  $form_source_addressesDestination IPs:  $form_dest_addresses
Source Ports:  $form_source_portsDestination Ports:  $form_dest_ports
Source I/Fs:  $sif_name_out$form_source_ifsDestination I/Fs:  $dif_name_out$form_dest_ifs
Source AS:  $form_source_asesDestination AS:  $form_dest_ases
NextHop IPs:  $form_nexthop_ipsProtocols:  $form_protocols
TOS Field:  $form_tos_fieldsTCP Flags:  $form_tcp_flags
Detail Lines:  $form_detail_linesGraph Width:  $form_graph_multiplier
Cutoff Lines:  $form_cutoff_linesCutoff Octets:  $form_cutoff_octets
Include If:  $flow_select_outSiLK Selection:  $selection_out$selection_out
Monitor Type:  $monitor_type_out
Monitor Type:  $monitor_type_out
Peak Period Obs:  $analyze_peak_width
Comments:  $form_general_comment
Note:  The sampling multiplier option is not available for this report*all values have been multiplied by the Sampling Multiplier: $form_sampling_multiplier
Note:  You may change the mask using the Source or Dest IP: fields (e.g., /24)
\n"; } sub load_filtering_parameters { ($called_by,$filter_hash) = @_; if ($filter_hash eq "") { if ($called_by eq "FlowViewer") { $filter_hash = "FV_"; } if ($called_by eq "FlowGrapher") { $filter_hash = "FG_"; } if ($called_by eq "FlowMonitor") { $filter_hash = "FM_"; } } else { $filter_source = substr($filter_hash,0,2); $filter_link = substr($filter_hash,3,255); if ($filter_link =~ /^/) { if (substr($filter_link,0,1) eq "^") { $new_device = substr($filter_link,1,255); $filter_link = ""; } else { ($filter_filename,$new_device) = split(/\^/,$filter_link); } if (substr($new_device,0,3) eq "DDD") { $new_device = substr($new_device,3,255); $new_exporter = ""; } if (substr($new_device,0,3) eq "EEE") { $new_exporter = substr($new_device,3,255); $new_device = ""; } $filter_hash = $filter_source ."_". $filter_filename; } if ($filter_source eq "FV") { $filter_source_file = "$work_directory/$filter_filename"; } if ($filter_source eq "FG") { $filter_source_file = "$work_directory/$filter_filename"; } if (($filter_source eq "FM") || (filter_source eq "FT")) { $filter_source_file = "$work_directory/$filter_filename"; } if ($filter_source eq "PV") { $filter_source_file = "$work_directory/$filter_filename"; } if ($filter_source eq "FL") { $filter_source_file = "$save_directory/$filter_filename.svf"; } if ($filter_source eq "SV") { if (($filter_hash =~ /FlowMonitor/) || ($filter_hash =~ /FlowTracker/)) { $MT_saved_directory = substr($filter_link,0,25); $flowmonitor = substr($filter_link,26,255); if ($flowmonitor =~ /^/) { ($flowmonitor,$new_device_extra) = split(/\^/,$flowmonitor); } if (-e "$filter_directory/$flowmonitor.grp") { $filter_suffix = ".grp"; } if (-e "$filter_directory/$flowmonitor.fil") { $filter_suffix = ".fil"; } $filter_filename = $MT_saved_directory ."/". $flowmonitor . $filter_suffix; } $filter_source_file = "$save_directory/$filter_filename"; } if (($filter_source eq "MT") || ($filter_source eq "TR")) { if (-e "$filter_directory/$filter_filename.archive") { $filter_filename .= ".archive"; } if (-e "$filter_directory/$filter_filename.grp") { $filter_filename .= ".grp"; } if (-e "$filter_directory/$filter_filename.fil") { $filter_filename .= ".fil"; } $filter_source_file = "$filter_directory/$filter_filename"; } } print DEBUG "filter_hash: $filter_hash filter_source: $filter_source filter_source_file: $filter_source_file\n"; open(FILTER,"<$filter_source_file"); while () { chop; if ((($filter_source eq "MT") || ($filter_source eq "TR")) || (($filter_source eq "SV") && (($filter_hash =~ /FlowMonitor/) || ($filter_hash =~ /FlowTracker/)) )) { $key = substr($_,0,8); if ($key eq " input: ") { ($input,$field,$field_value) = split(/: /); if ($field eq "device_name") { $form_device_name = $field_value; } if ($field eq "Description") { $form_Description = $field_value; } if ($field eq "create_time") { $form_create_time = $field_value; } if ($field eq "start_date") { $form_start_date = $field_value; } if ($field eq "start_time") { $form_start_time = $field_value; } if ($field eq "end_date") { $form_end_date = $field_value; } if ($field eq "end_time") { $form_end_time = $field_value; } if ($field eq "source_addresses") { $form_source_addresses = $field_value; } if ($field eq "source_ports") { $form_source_ports = $field_value; } if ($field eq "source_ifs") { $form_source_ifs = $field_value; } if ($field eq "sif_names") { $form_sif_names = $field_value; } if ($field eq "source_ases") { $form_source_ases = $field_value; } if ($field eq "dest_addresses") { $form_dest_addresses = $field_value; } if ($field eq "dest_ports") { $form_dest_ports = $field_value; } if ($field eq "dest_ifs") { $form_dest_ifs = $field_value; } if ($field eq "dif_names") { $form_dif_names = $field_value; } if ($field eq "dest_ases") { $form_dest_ases = $field_value; } if ($field eq "protocols") { $form_protocols = $field_value; } if ($field eq "tcp_flags") { $form_tcp_flags = $field_value; } if ($field eq "tos_fields") { $form_tos_fields = $field_value; } if ($field eq "exporter") { $form_exporter = $field_value; } if ($field eq "nexthop_ips") { $form_nexthop_ips = $field_value; } if(($field eq "monitor_type") || ($field eq "tracking_type")) { if ($field_value eq "Individual") { $form_monitor_type = "bps"; } elsif ($field_value eq "Individual-bps") { $form_monitor_type = "bps"; } elsif ($field_value eq "Individual-bps-prorated") { $form_monitor_type = "bps"; } elsif ($field_value eq "Individual-pps") { $form_monitor_type = "pps"; } elsif ($field_value eq "Individual-pps-prorated") { $form_monitor_type = "pps"; } elsif ($field_value eq "Individual-fps") { $form_monitor_type = "fpsi"; } elsif ($field_value eq "Individual-fps-prorated") { $form_monitor_type = "fpsa"; } else { $form_monitor_type = $field_value; }} if(($field eq "monitor_label") || ($field eq "tracking_label")) { $form_monitor_label = $field_value; } if ($field eq "general_comment") { $form_general_comment = $field_value; } if ($field eq "alert_threshold") { $form_alert_threshold = $field_value; } if ($field eq "alert_frequency") { $form_alert_frequency = $field_value; } if ($field eq "alert_destination") { $form_alert_destination = $field_value; } if ($field eq "sampling_multiplier") { $form_sampling_multiplier = $field_value; } if ($field eq "IPFIX") { $form_IPFIX = $field_value; } if ($field eq "silk_field") { $form_silk_field = $field_value; } if ($field eq "silk_other") { $form_silk_other = $field_value; } if ($field eq "silk_rootdir") { $form_silk_rootdir = $field_value; } if ($field eq "silk_class") { $form_silk_class = $field_value; } if ($field eq "silk_flowtype") { $form_silk_flowtype = $field_value; } if ($field eq "silk_type") { $form_silk_type = $field_value; } if ($field eq "silk_sensors") { $form_silk_sensors = $field_value; } if ($field eq "silk_switches") { $form_silk_switches = $field_value; } } } else { ($field,$field_value) = split(/: /); if (/BEGIN FILTERING/) { $found_parameters = 1; next; } if ($found_parameters) { if (/END FILTERING/) { last; } if ($field eq "filter_title") { $filter_title = $field_value; } if ($field eq "device_name") { $form_device_name = $field_value; } if ($field eq "start_date") { $form_start_date = $field_value; } if ($field eq "start_time") { $form_start_time = $field_value; } if ($field eq "end_date") { $form_end_date = $field_value; } if ($field eq "end_time") { $form_end_time = $field_value; } if ($field eq "source_addresses") { $form_source_addresses = $field_value; } if ($field eq "source_ports") { $form_source_ports = $field_value; } if ($field eq "source_ifs") { $form_source_ifs = $field_value; } if ($field eq "sif_names") { $form_sif_names = $field_value; } if ($field eq "source_ases") { $form_source_ases = $field_value; } if ($field eq "dest_addresses") { $form_dest_addresses = $field_value; } if ($field eq "dest_ports") { $form_dest_ports = $field_value; } if ($field eq "dest_ifs") { $form_dest_ifs = $field_value; } if ($field eq "dif_names") { $form_dif_names = $field_value; } if ($field eq "dest_ases") { $form_dest_ases = $field_value; } if ($field eq "protocols") { $form_protocols = $field_value; } if ($field eq "tcp_flags") { $form_tcp_flags = $field_value; } if ($field eq "tos_fields") { $form_tos_fields = $field_value; } if ($field eq "exporter") { $form_exporter = $field_value; } if ($field eq "nexthop_ips") { $form_nexthop_ips = $field_value; } if(($field eq "monitor_type") || ($field eq "tracking_type")) { if ($field_value eq "Individual") { $form_monitor_type = "bps"; } elsif ($field_value eq "Individual-bps") { $form_monitor_type = "bps"; } elsif ($field_value eq "Individual-bps-prorated") { $form_monitor_type = "bps"; } elsif ($field_value eq "Individual-pps") { $form_monitor_type = "pps"; } elsif ($field_value eq "Individual-pps-prorated") { $form_monitor_type = "pps"; } elsif ($field_value eq "Individual-fps") { $form_monitor_type = "fpsi"; } elsif ($field_value eq "Individual-fps-prorated") { $form_monitor_type = "fpsa"; } else { $form_monitor_type = $field_value; }} if(($field eq "monitor_label") || ($field eq "tracking_label")) { $form_monitor_label = $field_value; } if(($field eq "monitor_status") || ($field eq "tracking_status")) { $form_monitor_status = $field_value; } if ($field eq "general_comment") { $form_general_comment = $field_value; } if ($field eq "sampling_multiplier") { $form_sampling_multiplier = $field_value; } if ($field eq "stat_report") { $form_stat_report = $field_value; } if ($field eq "print_report") { $form_print_report = $field_value; } if ($field eq "flow_select") { $form_flow_select = $field_value; } if ($field eq "sort_field") { $form_sort_field = $field_value; } if ($field eq "pie_charts") { $form_pie_charts= $field_value; } if ($field eq "flow_analysis") { $form_flow_analysis= $field_value; } if ($field eq "cutoff_lines") { $form_cutoff_lines = $field_value; } if ($field eq "cutoff_octets") { $form_cutoff_octets = $field_value; } if ($field eq "unit_conversion") { $form_unit_conversion = $field_value; } if ($field eq "detail_lines") { $form_detail_lines = $field_value; } if ($field eq "bucket_size") { $form_bucket_size = $field_value; } if ($field eq "resolve_addresses") { $form_resolve_addresses = $field_value; } if ($field eq "graph_multiplier") { $form_graph_multiplier = $field_value; } if ($field eq "stats_method") { $form_stats_method = $field_value; } if ($field eq "graph_type") { if ($field_value eq "Bits") { $form_graph_type = "bps"; } elsif ($field_value eq "Bits_P") { $form_graph_type = "bps"; } elsif ($field_value eq "Packets") { $form_graph_type = "pps"; } elsif ($field_value eq "Packets_P") { $form_graph_type = "pps"; } elsif ($field_value eq "Flows") { $form_graph_type = "fpsi"; } elsif ($field_value eq "Flows_I") { $form_graph_type = "fpsi"; } elsif ($field_value eq "Flows_P") { $form_graph_type = "fpsa"; } else {$form_graph_type = $field_value; } } if ($field eq "IPFIX") { $form_IPFIX = $field_value; } if ($field eq "silk_field") { $form_silk_field = $field_value; } if ($field eq "silk_other") { $form_silk_other = $field_value; } if ($field eq "silk_rootdir") { $form_silk_rootdir = $field_value; } if ($field eq "silk_class") { $form_silk_class = $field_value; } if ($field eq "silk_flowtype") { $form_silk_flowtype = $field_value; } if ($field eq "silk_type") { $form_silk_type = $field_value; } if ($field eq "silk_sensors") { $form_silk_sensors = $field_value; } if ($field eq "silk_switches") { $form_silk_switches = $field_value; } } } } close(FILTER); } sub get_monitor_title { my ($filter_filename,$suffix) = @_; $check_file = "$filter_directory/$filter_filename.fil"; if (-e $check_file) { $filter_source_file = "$filter_directory/$filter_filename.fil"; } $check_file = "$filter_directory/$filter_filename.grp"; if (-e $check_file) { $filter_source_file = "$filter_directory/$filter_filename.grp"; } $check_file = "$filter_directory/$filter_filename.archive"; if (-e $check_file) { $filter_source_file = "$filter_directory/$filter_filename.archive"; } open(FILTER,"<$filter_source_file"); while () { chop; $key = substr($_,0,8); if ($key eq " input: ") { ($input,$field,$field_value) = split(/: /); if (($field eq "monitor_label") || ($field eq "tracking_label")) { $monitor_title = $field_value; last; } } } close(FILTER); return $monitor_title; } sub start_saved_file { my ($saved_file) = @_; ($temp_mnth_s,$temp_day_s,$temp_yr_s) = split(/\//,$start_date); ($temp_mnth_e,$temp_day_e,$temp_yr_e) = split(/\//,$end_date); if ($date_format eq "DMY") { $start_date_save = $temp_day_s ."/". $temp_mnth_s ."/". $temp_yr_s; $end_date_save = $temp_day_e ."/". $temp_mnth_e ."/". $temp_yr_e; } elsif ($date_format eq "DMY2") { $start_date_save = $temp_day_s .".". $temp_mnth_s .".". $temp_yr_s; $end_date_save = $temp_day_e .".". $temp_mnth_e .".". $temp_yr_e; } elsif ($date_format eq "YMD") { $start_date_save = $temp_yr_s ."-". $temp_mnth_s ."-". $temp_day_s; $end_date_save = $temp_yr_e ."-". $temp_mnth_e ."-". $temp_day_e; } else { $start_date_save = $start_date; $end_date_save = $end_date; } open (SAVED,">$saved_file"); print SAVED "\n"; close(SAVED); } return 1;