MISP
/
misp-objects
mirror of https://github.com/MISP/misp-objects
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [netflow] attribute community-id added in netflow object template 

Ref: https://github.com/corelight/community-id-spec

Ref: 020e67c154
pull/195/head
Alexandre Dulaunoy 2019-07-13 10:02:15 +02:00
parent 919f6638e1
commit d504979f10
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
objects/netflow/definition.json
View File

@ -3,7 +3,7 @@
"uuid": "bf148c58-3e7e-414e-8de8-5d96379ca77e", "uuid": "bf148c58-3e7e-414e-8de8-5d96379ca77e",
"meta-category": "network", "meta-category": "network",
"description": "Netflow object describes an network object based on the Netflowv5/v9 minimal definition", "description": "Netflow object describes an network object based on the Netflowv5/v9 minimal definition",
"version": 1, "version": 2,
"attributes": { "attributes": {
"ip-dst": { "ip-dst": {
"misp-attribute": "ip-dst", "misp-attribute": "ip-dst",
@ -70,6 +70,7 @@
"protocol": { "protocol": {
"misp-attribute": "text", "misp-attribute": "text",
"ui-priority": 0, "ui-priority": 0,
"disable_correlation": true,
"values_list": [ "values_list": [
"TCP", "TCP",
"UDP", "UDP",
@ -133,18 +134,26 @@
"first-packet-seen": { "first-packet-seen": {
"misp-attribute": "datetime", "misp-attribute": "datetime",
"ui-priority": 1, "ui-priority": 1,
"description": "First packet seen in this flow" "description": "First packet seen in this flow",
"disable_correlation": true
}, },
"last-packet-seen": { "last-packet-seen": {
"misp-attribute": "datetime", "misp-attribute": "datetime",
"ui-priority": 0, "ui-priority": 0,
"description": "Last packet seen in this flow" "description": "Last packet seen in this flow",
"disable_correlation": true
},
"community-id": {
"misp-attribute": "community-id",
"ui-priority": 0,
"description": "Community id of the represented flow"
} }
}, },
"requiredOneOf": [ "requiredOneOf": [
"first-packet-seen", "first-packet-seen",
"ip-src", "ip-src",
"ip-dst", "ip-dst",
"dst-port" "dst-port",
"community-id"
] ]
} }