From 6185e68498c285862656d6bc1c27f60da96a69fa Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 13 Mar 2017 08:19:27 +0100
Subject: [PATCH] JQifized

---
 objects/ddos/definition.json | 42 ++++++++++++++++++------------------
 1 file changed, 21 insertions(+), 21 deletions(-)

diff --git a/objects/ddos/definition.json b/objects/ddos/definition.json
index 0e7cd4c..b72debd 100644
--- a/objects/ddos/definition.json
+++ b/objects/ddos/definition.json
@@ -4,30 +4,14 @@
   "description": "DDoS object describes a current DDoS activity from a specific or/and to a specific target. Type of DDoS can be attached to the object as a taxonomy",
   "version": 1,
   "attributes": {
-    "total-pps": {
+    "total-bps": {
       "misp-attribute": "counter",
       "misp-usage-frequency": 0
     },
-    "last-seen": {
-      "misp-attribute": "datetime",
-      "misp-usage-frequency": 0
-    },
     "text": {
       "misp-attribute": "text",
       "misp-usage-frequency": 0
     },
-    "total-bps": {
-      "misp-attribute": "counter",
-      "misp-usage-frequency": 0
-    },
-    "ip-src": {
-      "misp-attribute": "ip-src",
-      "misp-usage-frequency": 1,
-      "categories": [
-        "Network activity",
-        "External analysis"
-      ]
-    },
     "ip-dst": {
       "misp-attribute": "ip-dst",
       "misp-usage-frequency": 1,
@@ -36,9 +20,9 @@
         "External analysis"
       ]
     },
-    "src-port": {
-      "misp-attribute": "text",
-      "misp-usage-frequency": 0,
+    "ip-src": {
+      "misp-attribute": "ip-src",
+      "misp-usage-frequency": 1,
       "categories": [
         "Network activity",
         "External analysis"
@@ -52,6 +36,18 @@
         "External analysis"
       ]
     },
+    "src-port": {
+      "misp-attribute": "text",
+      "misp-usage-frequency": 0,
+      "categories": [
+        "Network activity",
+        "External analysis"
+      ]
+    },
+    "first-seen": {
+      "misp-attribute": "datetime",
+      "misp-usage-frequency": 0
+    },
     "protocol": {
       "misp-attribute": "text",
       "misp-usage-frequency": 0,
@@ -62,7 +58,11 @@
         "IP"
       ]
     },
-    "first-seen": {
+    "total-pps": {
+      "misp-attribute": "counter",
+      "misp-usage-frequency": 0
+    },
+    "last-seen": {
       "misp-attribute": "datetime",
       "misp-usage-frequency": 0
     }