From 41b0d33ab354334051ebc784e44449b7930d23df Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Wed, 31 Jan 2018 15:05:55 +0100
Subject: [PATCH] fix: improve ip-port object to add domain instead of IP
 address

---
 objects/ip-port/definition.json | 18 +++++++++++++-----
 1 file changed, 13 insertions(+), 5 deletions(-)

diff --git a/objects/ip-port/definition.json b/objects/ip-port/definition.json
index 528ab7c..b7be390 100644
--- a/objects/ip-port/definition.json
+++ b/objects/ip-port/definition.json
@@ -1,9 +1,8 @@
 {
   "requiredOneOf": [
     "dst-port",
-    "src-port"
-  ],
-  "required": [
+    "src-port",
+    "domain",
     "ip"
   ],
   "attributes": {
@@ -43,6 +42,15 @@
       "ui-priority": 1,
       "misp-attribute": "port"
     },
+    "domain": {
+      "description": "Domain",
+      "categories": [
+        "Network activity",
+        "External analysis"
+      ],
+      "ui-priority": 1,
+      "misp-attribute": "domain"
+    },
     "ip": {
       "description": "IP Address",
       "categories": [
@@ -53,8 +61,8 @@
       "misp-attribute": "ip-dst"
     }
   },
-  "version": 5,
-  "description": "An IP address and a port seen as a tuple (or as a triple) in a specific time frame.",
+  "version": 6,
+  "description": "An IP address (or domain) and a port seen as a tuple (or as a triple) in a specific time frame.",
   "meta-category": "network",
   "uuid": "9f8cea74-16fe-4968-a2b4-026676949ac6",
   "name": "ip-port"