mirror of https://github.com/MISP/misp-objects
chg: [netflow] attribute community-id added in netflow object template
Ref: https://github.com/corelight/community-id-spec
Ref: 020e67c154
pull/195/head
parent
919f6638e1
commit
d504979f10
|
@ -3,7 +3,7 @@
|
|||
"uuid": "bf148c58-3e7e-414e-8de8-5d96379ca77e",
|
||||
"meta-category": "network",
|
||||
"description": "Netflow object describes an network object based on the Netflowv5/v9 minimal definition",
|
||||
"version": 1,
|
||||
"version": 2,
|
||||
"attributes": {
|
||||
"ip-dst": {
|
||||
"misp-attribute": "ip-dst",
|
||||
|
@ -70,6 +70,7 @@
|
|||
"protocol": {
|
||||
"misp-attribute": "text",
|
||||
"ui-priority": 0,
|
||||
"disable_correlation": true,
|
||||
"values_list": [
|
||||
"TCP",
|
||||
"UDP",
|
||||
|
@ -133,18 +134,26 @@
|
|||
"first-packet-seen": {
|
||||
"misp-attribute": "datetime",
|
||||
"ui-priority": 1,
|
||||
"description": "First packet seen in this flow"
|
||||
"description": "First packet seen in this flow",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"last-packet-seen": {
|
||||
"misp-attribute": "datetime",
|
||||
"ui-priority": 0,
|
||||
"description": "Last packet seen in this flow"
|
||||
"description": "Last packet seen in this flow",
|
||||
"disable_correlation": true
|
||||
},
|
||||
"community-id": {
|
||||
"misp-attribute": "community-id",
|
||||
"ui-priority": 0,
|
||||
"description": "Community id of the represented flow"
|
||||
}
|
||||
},
|
||||
"requiredOneOf": [
|
||||
"first-packet-seen",
|
||||
"ip-src",
|
||||
"ip-dst",
|
||||
"dst-port"
|
||||
"dst-port",
|
||||
"community-id"
|
||||
]
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue