MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

add: [pcap-metadata] new object template for pcap file metadata (WiP)

pull/125/head
Alexandre Dulaunoy 2018-10-23 16:35:08 +02:00
parent 49dee77a7f
commit 1a1972003d
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 54 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

54
objects/pcap-metadata/definition.json Normal file
View File

@ -0,0 +1,54 @@
{
"requiredOneOf": [
"text",
"first-packet-seen",
"last-packet-seen"
],
"attributes": {
"capture-length": {
"description": "Capture length set on the captured interface.",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text"
},
"capture-interface": {
"description": "Interface name where the packet capture was running.",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text"
},
"protocol": {
"description": "Capture protocol (linktype name).",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text",
"sane_default": [
"LINKTYPE_NULL",
"LINKTYPE_ETHERNET"
]
},
"text": {
"description": "A description of the packet capture.",
"disable_correlation": true,
"ui-priority": 1,
"misp-attribute": "text"
},
"first-packet-seen": {
"description": "When the first packet has been seen.",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
},
"last-packet-seen": {
"description": "When the last packet has been seen.",
"disable_correlation": true,
"ui-priority": 0,
"misp-attribute": "datetime"
}
},
"version": 1,
"description": "Network packet capture metadata",
"meta-category": "network",
"uuid": "0784aefa-ec3a-4eca-a431-c31ed7058bd3",
"name": "pcap-metadata"
}