Class

org.cert.netsa.io.silk

RWRec

Related Doc: package silk

Permalink

case class RWRec(startTime: Instant, elapsed: Duration, sPort: Port, dPort: Port, protocol: Protocol, flowType: FlowType, sensor: Sensor, flags: TCPFlags, initFlags: TCPFlags, restFlags: TCPFlags, tcpState: TCPState, application: Port, memo: Short, input: SNMPInterface, output: SNMPInterface, packets: Long, bytes: Long, sIP: IPAddress, dIP: IPAddress, nhIP: IPAddress) extends Product with Serializable

A SiLK flow record.

Note that in addition to the fields of the case class, some derived fields are also provided. (See below.)

startTime

The instant that the first packet in this flow was observed.

elapsed

The duration between the instants the first and last packets in this flow were observed.

sPort

The source port of this flow, or zero if this flow is neither a TCP nor a UDP flow.

dPort

The destination port of this flow, or zero if this flow is neither a TCP nor a UDP flow.

protocol

The IP protocol of this flow.

flowType

The SiLK flow type (class and type) of this flow, or FlowType(0) if unknown.

sensor

The SiLK sensor that observed this flow, or Sensor(0) if unknown.

flags

The union of all TCP flags observed in this flow, or TCPFlags(0) if this flow is not a TCP flow.

initFlags

The flags observed in the initial packet of this TCP flow, or TCPFlags(0) if this flow is not a TCP flow or if extended flags are not available.

restFlags

The union of all TCP flags observed after the initial packet of this flow, or TCPFlags(0) if this flow is not a TCP flow or if extended flags are not available.

tcpState

Flags relating to the observed status of this flow, including whether extended TCP flags are available. See TCPState for more details.

application

The detected application of this flow, expressed as the common port number for that application, or Port(0) if no application was detected.

memo

A Short value stored as a memo on this flow, or zero if no such memo has been set.

input

The input SNMP routing interface for this flow, or SNMPInterface(0) if routing information is not available.

output

The output SNMP routing interface for this flow, or SNMPInterface(0) if routing information is not available.

packets

The number of IP packets observed in this flow.

bytes

The number of bytes in packets observed in this flow.

sIP

The source IP address of packets in this flow.

dIP

The destination IP address of packets in this flow.

nhIP

The next-hop IP address of packets in this flow, or IPAddress("0.0.0.0") or IPAddress("::") if routing information is not available.

Linear Supertypes
Serializable, Serializable, Product, Equals, AnyRef, Any
Ordering
  1. Grouped
  2. Alphabetic
  3. By Inheritance
Inherited
  1. RWRec
  2. Serializable
  3. Serializable
  4. Product
  5. Equals
  6. AnyRef
  7. Any
  1. Hide All
  2. Show All
Visibility
  1. Public
  2. All

Instance Constructors

  1. new RWRec(startTime: Instant, elapsed: Duration, sPort: Port, dPort: Port, protocol: Protocol, flowType: FlowType, sensor: Sensor, flags: TCPFlags, initFlags: TCPFlags, restFlags: TCPFlags, tcpState: TCPState, application: Port, memo: Short, input: SNMPInterface, output: SNMPInterface, packets: Long, bytes: Long, sIP: IPAddress, dIP: IPAddress, nhIP: IPAddress)

    Permalink

    startTime

    The instant that the first packet in this flow was observed.

    elapsed

    The duration between the instants the first and last packets in this flow were observed.

    sPort

    The source port of this flow, or zero if this flow is neither a TCP nor a UDP flow.

    dPort

    The destination port of this flow, or zero if this flow is neither a TCP nor a UDP flow.

    protocol

    The IP protocol of this flow.

    flowType

    The SiLK flow type (class and type) of this flow, or FlowType(0) if unknown.

    sensor

    The SiLK sensor that observed this flow, or Sensor(0) if unknown.

    flags

    The union of all TCP flags observed in this flow, or TCPFlags(0) if this flow is not a TCP flow.

    initFlags

    The flags observed in the initial packet of this TCP flow, or TCPFlags(0) if this flow is not a TCP flow or if extended flags are not available.

    restFlags

    The union of all TCP flags observed after the initial packet of this flow, or TCPFlags(0) if this flow is not a TCP flow or if extended flags are not available.

    tcpState

    Flags relating to the observed status of this flow, including whether extended TCP flags are available. See TCPState for more details.

    application

    The detected application of this flow, expressed as the common port number for that application, or Port(0) if no application was detected.

    memo

    A Short value stored as a memo on this flow, or zero if no such memo has been set.

    input

    The input SNMP routing interface for this flow, or SNMPInterface(0) if routing information is not available.

    output

    The output SNMP routing interface for this flow, or SNMPInterface(0) if routing information is not available.

    packets

    The number of IP packets observed in this flow.

    bytes

    The number of bytes in packets observed in this flow.

    sIP

    The source IP address of packets in this flow.

    dIP

    The destination IP address of packets in this flow.

    nhIP

    The next-hop IP address of packets in this flow, or IPAddress("0.0.0.0") or IPAddress("::") if routing information is not available.

Value Members

  1. final def !=(arg0: Any): Boolean

    Permalink
    Definition Classes
    AnyRef → Any
  2. final def ##(): Int

    Permalink
    Definition Classes
    AnyRef → Any
  3. final def ==(arg0: Any): Boolean

    Permalink
    Definition Classes
    AnyRef → Any
  4. val application: Port

    Permalink

    The detected application of this flow, expressed as the common port number for that application, or Port(0) if no application was detected.

  5. final def asInstanceOf[T0]: T0

    Permalink
    Definition Classes
    Any
  6. val bytes: Long

    Permalink

    The number of bytes in packets observed in this flow.

  7. def clone(): AnyRef

    Permalink
    Attributes
    protected[java.lang]
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  8. val dIP: IPAddress

    Permalink

    The destination IP address of packets in this flow.

  9. val dPort: Port

    Permalink

    The destination port of this flow, or zero if this flow is neither a TCP nor a UDP flow.

  10. val elapsed: Duration

    Permalink

    The duration between the instants the first and last packets in this flow were observed.

  11. def endTime: Instant

    Permalink

    The instant that the last packet in this flow was observed.

  12. final def eq(arg0: AnyRef): Boolean

    Permalink
    Definition Classes
    AnyRef
  13. def finalize(): Unit

    Permalink
    Attributes
    protected[java.lang]
    Definition Classes
    AnyRef
    Annotations
    @throws( classOf[java.lang.Throwable] )
  14. val flags: TCPFlags

    Permalink

    The union of all TCP flags observed in this flow, or TCPFlags(0) if this flow is not a TCP flow.

  15. val flowType: FlowType

    Permalink

    The SiLK flow type (class and type) of this flow, or FlowType(0) if unknown.

  16. final def getClass(): Class[_]

    Permalink
    Definition Classes
    AnyRef → Any
  17. def icmpCode: ICMPCode

    Permalink

    The code of this ICMP flow, or garbage if this is a TCP or UDP flow, or ICMPType(0) if this is not an ICMP, TCP, or UDP flow.

  18. def icmpType: ICMPType

    Permalink

    The type of this ICMP flow, or garbage if this is a TCP or UDP flow, or ICMPType(0) if this is not an ICMP, TCP, or UDP flow.

  19. val initFlags: TCPFlags

    Permalink

    The flags observed in the initial packet of this TCP flow, or TCPFlags(0) if this flow is not a TCP flow or if extended flags are not available.

  20. val input: SNMPInterface

    Permalink

    The input SNMP routing interface for this flow, or SNMPInterface(0) if routing information is not available.

  21. def isIPv6: Boolean

    Permalink

    True if this flow's addresses are IPv6 addresses.

  22. final def isInstanceOf[T0]: Boolean

    Permalink
    Definition Classes
    Any
  23. val memo: Short

    Permalink

    A Short value stored as a memo on this flow, or zero if no such memo has been set.

  24. final def ne(arg0: AnyRef): Boolean

    Permalink
    Definition Classes
    AnyRef
  25. val nhIP: IPAddress

    Permalink

    The next-hop IP address of packets in this flow, or IPAddress("0.0.0.0") or IPAddress("::") if routing information is not available.

  26. final def notify(): Unit

    Permalink
    Definition Classes
    AnyRef
  27. final def notifyAll(): Unit

    Permalink
    Definition Classes
    AnyRef
  28. val output: SNMPInterface

    Permalink

    The output SNMP routing interface for this flow, or SNMPInterface(0) if routing information is not available.

  29. val packets: Long

    Permalink

    The number of IP packets observed in this flow.

  30. val protocol: Protocol

    Permalink

    The IP protocol of this flow.

  31. val restFlags: TCPFlags

    Permalink

    The union of all TCP flags observed after the initial packet of this flow, or TCPFlags(0) if this flow is not a TCP flow or if extended flags are not available.

  32. val sIP: IPAddress

    Permalink

    The source IP address of packets in this flow.

  33. val sPort: Port

    Permalink

    The source port of this flow, or zero if this flow is neither a TCP nor a UDP flow.

  34. val sensor: Sensor

    Permalink

    The SiLK sensor that observed this flow, or Sensor(0) if unknown.

  35. val startTime: Instant

    Permalink

    The instant that the first packet in this flow was observed.

  36. final def synchronized[T0](arg0: ⇒ T0): T0

    Permalink
    Definition Classes
    AnyRef
  37. val tcpState: TCPState

    Permalink

    Flags relating to the observed status of this flow, including whether extended TCP flags are available.

    Flags relating to the observed status of this flow, including whether extended TCP flags are available. See TCPState for more details.

  38. final def wait(): Unit

    Permalink
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  39. final def wait(arg0: Long, arg1: Int): Unit

    Permalink
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )
  40. final def wait(arg0: Long): Unit

    Permalink
    Definition Classes
    AnyRef
    Annotations
    @throws( ... )

Inherited from Serializable

Inherited from Serializable

Inherited from Product

Inherited from Equals

Inherited from AnyRef

Inherited from Any

Derived Members

Ungrouped