TFMM/traffic-parsing
4
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Minor file structure updates

Browse Source
This commit is contained in:
Russ
2015-08-25 23:37:44 -04:00
parent a7d9b08865
commit b9781ea0b6
10 changed files with 79 additions and 80 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
webdata/index.php
View File

@ -86,7 +86,7 @@
</head>
<body>
<div class=header>
<h2>LiquidWeb Traffic Monitoring</h2>
<h2>Traffic Monitoring</h2>
<?php include("includes/menu.php"); ?>
</div>
<div name=content>
@ -100,11 +100,11 @@
//Set MySQL connection variables
// Create connection
$conn2 = new mysqli($servername, $username, $password, $dbname);
//Query
$sql = "SELECT src_ip, COUNT(DISTINCT(dst_ip)), COUNT(src_ip) FROM `rawdata` WHERE `dst_port` = '22' AND time > (UNIX_TIMESTAMP() - 1800) GROUP BY src_ip ORDER BY COUNT(DISTINCT(dst_ip)) DESC LIMIT 10";
$result = $conn2->query($sql);
//If there are results, display them in a table
if ($result->num_rows >0) {
@ -112,7 +112,7 @@
echo "<br>";
echo "<table align='center'><tr><th>Source IP</th><th># of targets</th><th># of connections</th><th>Source Whois</th><th>Destination IPs</th></tr>";
while ($row = $result->fetch_assoc()) {
echo "<tr><td>".$row["src_ip"]."</td><td>".$row["COUNT(DISTINCT(dst_ip))"]."</td><td>".$row["COUNT(src_ip)"]."</td><td><a href=http://utilities.mon.liquidweb.com/netdata/whoislookup.php?formIPaddr=".$row["src_ip"]." target=_blank>Whois</a></td><td><a href=http://utilities.mon.liquidweb.com/netdata/destinationips.php?formIP=".$row["src_ip"]."&formPort=22 target=_blank>List</a></td></tr>";
echo "<tr><td>".$row["src_ip"]."</td><td>".$row["COUNT(DISTINCT(dst_ip))"]."</td><td>".$row["COUNT(src_ip)"]."</td><td><a href=http://DOMAIN.com/netdata/whoislookup.php?formIPaddr=".$row["src_ip"]." target=_blank>Whois</a></td><td><a href=http://DOMAIN.com/netdata/destinationips.php?formIP=".$row["src_ip"]."&formPort=22 target=_blank>List</a></td></tr>";
}
echo "</table>";
} else {
@ -122,9 +122,9 @@
?>
</div>
<div id=col2>
Total Connections, every 30 minutes for the past 24hrs.
Total Connections, every 30 minutes for the past 24hrs.
<br>
<img src="graph/30min24hr.php?port=22">
<img src="graph/30min24hr.php?port=22">
</div>
<!--Perform the MySQL query to get the source IPs, and geolocate them using the Pear Net::GeoIP class -->