Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Stats schema update/20240402/v3 #10893

Closed
wants to merge 2 commits into from
Closed

Stats schema update/20240402/v3 #10893

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
862a4fd
eve/stats: add description for transactions
inashivb Apr 2, 2024
77df797
eve/stats: add description for ips
inashivb Apr 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
72 changes: 72 additions & 0 deletions etc/schema.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4070,111 +4070,150 @@
"type": "object",
"properties": {
"bittorrent-dht": {
"description":
"Number of transactions for BitTorrent DHT protocol",
"type": "integer"
},
"dcerpc_tcp": {
"description": "Number of transactions for DCERPC/TCP protocol",
"type": "integer"
},
"dcerpc_udp": {
"description": "Number of transactions for DCERPC/UDP protocol",
"type": "integer"
},
"dhcp": {
"description": "Number of transactions for DHCP",
"type": "integer"
},
"dnp3": {
"description": "Number of transactions for DNP3",
"type": "integer"
},
"dns_tcp": {
"description": "Number of transactions for DNS/TCP protocol",
"type": "integer"
},
"dns_udp": {
"description": "Number of transactions for DNS/UDP protocol",
"type": "integer"
},
"enip_tcp": {
"description": "Number of transactions for ENIP/TCP",
"type": "integer"
},
"enip_udp": {
"description": "Number of transactions for ENIP/UDP",
"type": "integer"
},
"ftp": {
"description": "Number of transactions for FTP",
"type": "integer"
},
"ftp-data": {
"description": "Number of transactions for FTP data protocol",
"type": "integer"
},
"http": {
"description": "Number of transactions for HTTP",
"type": "integer"
},
"http2": {
"description": "Number of transactions for HTTP/2",
"type": "integer"
},
"ike": {
"description": "Number of transactions for IKE protocol",
"type": "integer"
},
"ikev2": {
"description": "Number of transactions for IKE v2 protocol",
"type": "integer"
},
"imap": {
"description": "Number of transactions for IMAP",
"type": "integer"
},
"krb5_tcp": {
"description":
"Number of transactions for Kerberos v5/TCP protocol",
"type": "integer"
},
"krb5_udp": {
"description":
"Number of transactions for Kerberos v5/UDP protocol",
"type": "integer"
},
"modbus": {
"description": "Number of transactions for Modbus protocol",
"type": "integer"
},
"mqtt": {
"description": "Number of transactions for MQTT protocol",
"type": "integer"
},
"nfs_tcp": {
"description": "Number of transactions for NFS/TCP protocol",
"type": "integer"
},
"nfs_udp": {
"description": "Number of transactions for NFS/UDP protocol",
"type": "integer"
},
"ntp": {
"description": "Number of transactions for NTP",
"type": "integer"
},
"pgsql": {
"description": "Number of transactions for PostgreSQL protocol",
"type": "integer"
},
"quic": {
"description": "Number of transactions for QUIC protocol",
"type": "integer"
},
"rdp": {
"description": "Number of transactions for RDP",
"type": "integer"
},
"rfb": {
"description": "Number of transactions for RFB protocol",
"type": "integer"
},
"sip_udp": {
"description": "Number of transactions for SIP/UDP protocol",
"type": "integer"
},
"sip_tcp": {
"description": "Number of transactions for SIP/TCP protocol",
"type": "integer"
},
"smb": {
"description": "Number of transactions for SMB protocol",
"type": "integer"
},
"smtp": {
"description": "Number of transactions for SMTP",
"type": "integer"
},
"snmp": {
"description": "Number of transactions for SNMP",
"type": "integer"
},
"ssh": {
"description": "Number of transactions for SSH protocol",
"type": "integer"
},
"telnet": {
"description": "Number of transactions for Telnet protocol",
"type": "integer"
},
"tftp": {
"description": "Number of transactions for TFTP",
"type": "integer"
},
"tls": {
"description": "Number of transactions for TLS protocol",
"type": "integer"
},
"websocket": {
Expand All @@ -4190,63 +4229,96 @@
"type": "object",
"properties": {
"accepted": {
"description": "Number of accepted packets",
"type": "integer"
},
"blocked": {
"description": "Number of blocked packets",
"type": "integer"
},
"rejected": {
"description": "Number of rejected packets",
"type": "integer"
},
"replaced": {
"description": "Number of replaced packets",
"type": "integer"
},
"drop_reason": {
"description": "Number of dropped packets, grouped by drop reason",
"type": "object",
"properties": {
"decode_error": {
"description":
"Number of packets dropped due to decoding errors",
"type": "integer"
},
"defrag_error": {
"description":
"Number of packets dropped due to defragmentation errors",
"type": "integer"
},
"defrag_memcap": {
"description":
"Number of packets dropped due to defrag memcap exception policy",
"type": "integer"
},
"flow_memcap": {
"description":
"Number of packets dropped due to flow memcap exception policy",
"type": "integer"
},
"flow_drop": {
"description": "Number of packets dropped due to dropped flows",
"type": "integer"
},
"applayer_error": {
"description":
"Number of packets dropped due to app-layer error exception policy",
"type": "integer"
},
"applayer_memcap": {
"description":
"Number of packets dropped due to applayer memcap",
"type": "integer"
},
"rules": {
"description": "Number of packets dropped due to rule actions",
"type": "integer"
},
"threshold_detection_filter": {
"description":
"Number of packets dropped due to threshold detection filter",
"type": "integer"
},
"stream_error": {
"description":
"Number of packets dropped due to invalid TCP stream",
"type": "integer"
},
"stream_memcap": {
"description":
"Number of packets dropped due to stream memcap exception policy",
"type": "integer"
},
"stream_midstream": {
"description":
"Number of packets dropped due to stream midstream exception policy",
"type": "integer"
},
"stream_reassembly": {
"description":
"Number of packets dropped due to stream reassembly exception policy",
"type": "integer"
},
"nfq_error": {
"description":
"Number of packets dropped due to no NFQ verdict",
"type": "integer"
},
"tunnel_packet_drop": {
"description":
"Number of packets dropped due to inner tunnel packet being dropped",
"type": "integer"
}
},
Expand Down
Loading