d4-core/server/documentation/Database.md

2.3 KiB

D4 core

D4 core server

D4 core server is a complete server to handle clients (sensors) including the decapsulation of the D4 protocol, control of sensor registrations, management of decoding protocols and dispatching to adequate decoders/analysers.

Database map

Key Value

Server

Key Value
server:hmac_default_key hmac_default_key
Set Key Value
server:accepted_type accepted type
server:accepted_extended_type accepted extended type

Stats

Zset Key Field Value
stat_uuid_ip:date:uuid IP number D4 Packets
stat_uuid_type:date:uuid type number D4 Packets
stat_type_uuid:date:type uuid number D4 Packets
stat_ip_uuid:20190519:158.64.14.86 uuid number D4 Packets
daily_uuid:date uuid number D4 Packets
daily_type:date type number D4 Packets
daily_ip:date IP number D4 Packets

metadata sensors

Hset Key Field Value
metadata_uuid:uuid first_seen epoch
last_seen epoch
description description
Error error message
Last IP
List Key Value
list_uuid_ip:uuid IP

metadata types by sensors

Hset Key Field Value
metadata_uuid:uuid first_seen epoch
last_seen epoch
Set Key Value
all_types_by_uuid:uuid type

analyzers

metadata
Hset Key Field Value
analyzer:uuid last_updated epoch
description description
max_size queue max size
all analyzers by type
Set Key Value
analyzer:type uuid
analyzer:254:extended type uuid