Skip to content

Commit 661c71e

Browse files
committed
add: [network-traffic] Generic Network Traffic object
- Following the STIX 2.1 spec
1 parent 08f5f77 commit 661c71e

1 file changed

Lines changed: 108 additions & 0 deletions

File tree

Lines changed: 108 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,108 @@
1+
{
2+
"attributes": {
3+
"dst_bytes_count": {
4+
"description": "Number of bytes sent from the destination to the source",
5+
"misp-attribute": "size-in-bytes",
6+
"ui-priority": 0
7+
},
8+
"dst_hostname": {
9+
"description": "Destination hostname of the network traffic",
10+
"misp-attribute": "hostname",
11+
"ui-priority": 1
12+
},
13+
"dst_ip": {
14+
"description": "Destination IP address of the network traffic",
15+
"misp-attribute": "ip-dst",
16+
"ui-priority": 1
17+
},
18+
"dst_mac": {
19+
"description": "Destination MAC address of the network traffic",
20+
"misp-attribute": "mac-address",
21+
"ui-priority": 1
22+
},
23+
"dst_packets": {
24+
"description": "Number of packets sent from the destination to the source",
25+
"misp-attribute": "counter",
26+
"ui-priority": 0
27+
},
28+
"dst_port": {
29+
"categories": [
30+
"Network activity",
31+
"External analysis"
32+
],
33+
"description": "Destination port of the nework connection",
34+
"misp-attribute": "port",
35+
"ui-priority": 1
36+
},
37+
"end_time": {
38+
"description": "Time the network traffic ended",
39+
"misp-attribute": "datetime",
40+
"ui-priority": 0
41+
},
42+
"is_active": {
43+
"description": "Indicates whether the network traffic is still ongoing. Must be False if the end_time attribute is present",
44+
"misp-attribute": "boolean",
45+
"ui-priority": 0
46+
},
47+
"protocols": {
48+
"description": "Protocols observed in the network traffic",
49+
"misp-attribute": "text",
50+
"multiple": true,
51+
"ui-priority": 0
52+
},
53+
"src_bytes_count": {
54+
"description": "Number of bytes sent from the source to the destination",
55+
"misp-attribute": "size-in-bytes",
56+
"ui-priority": 0
57+
},
58+
"src_hostname": {
59+
"description": "Destination hostname of the network traffic",
60+
"misp-attribute": "hostname",
61+
"ui-priority": 1
62+
},
63+
"src_ip": {
64+
"description": "Source IP address of the network traffic",
65+
"misp-attribute": "ip-dst",
66+
"ui-priority": 1
67+
},
68+
"src_mac": {
69+
"description": "Source MAC address of the network traffic",
70+
"misp-attribute": "mac-address",
71+
"ui-priority": 1
72+
},
73+
"src_packets": {
74+
"description": "Number of packets sent from the source to the destination",
75+
"misp-attribute": "counter",
76+
"ui-priority": 0
77+
},
78+
"src_port": {
79+
"categories": [
80+
"Network activity",
81+
"External analysis"
82+
],
83+
"description": "Source port of the nework connection",
84+
"misp-attribute": "port",
85+
"ui-priority": 1
86+
},
87+
"start_time": {
88+
"description": "Time the network traffic started",
89+
"misp-attribute": "datetime",
90+
"ui-priority": 0
91+
}
92+
},
93+
"description": "Generic network traffic that originates from a source and is addressed to a destination.",
94+
"meta-category": "network",
95+
"name": "network-traffic",
96+
"requiredOneOf": [
97+
"dst_hostname",
98+
"dst_ip",
99+
"dst_mac",
100+
"dst_port",
101+
"src_hostname",
102+
"src_ip",
103+
"src_mac",
104+
"src_port"
105+
],
106+
"uuid": "16290b18-9af5-4a43-b195-75fe1eef0c35",
107+
"version": 1
108+
}

0 commit comments

Comments
 (0)