From 1651281d0b1ffbb93b30b1b39b1c198e1f642ef5 Mon Sep 17 00:00:00 2001
From: Christian Studer <christian.studer@circl.lu>
Date: Tue, 7 Mar 2023 16:48:00 +0100
Subject: [PATCH] add: [network-socket] Added the first & last packet seen
 object relation and made the protocol attribute multiple

---
 objects/network-socket/definition.json | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/objects/network-socket/definition.json b/objects/network-socket/definition.json
index dd3ee2c..73ef807 100644
--- a/objects/network-socket/definition.json
+++ b/objects/network-socket/definition.json
@@ -120,6 +120,12 @@
       "misp-attribute": "filename",
       "ui-priority": 1
     },
+    "first-packet-seen": {
+      "description": "Datetime of the first packet seen.",
+      "disable_correlation": true,
+      "misp-attribute": "datetime",
+      "ui-priority": 1
+    },
     "hostname-dst": {
       "description": "Destination hostname of the network socket connection.",
       "misp-attribute": "hostname",
@@ -148,6 +154,12 @@
       "misp-attribute": "ip-src",
       "ui-priority": 1
     },
+    "last-packet-seen": {
+      "description": "Datetime of the last packet seen.",
+      "disable_correlatioin": true,
+      "misp-attribute": "datetime",
+      "ui-priority": 1
+    },
     "option": {
       "description": "Option on the socket connection.",
       "misp-attribute": "text",
@@ -157,6 +169,7 @@
     "protocol": {
       "description": "Protocol used by the network socket.",
       "misp-attribute": "text",
+      "multiple": true,
       "ui-priority": 0,
       "values_list": [
         "TCP",