mirror of
https://github.com/utoni/nDPId.git
synced 2026-05-05 10:41:35 +00:00
d4633c1192
* The goal was to provide a separate event for extracted feature that are not required and only useful for a few (e.g. someone who wants do ML). * Increased network buffer size to 32kB (8192 * 4). * Switched timestamp precision from ms to us for *ALL* timestamps. Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
166 lines
4.5 KiB
JSON
166 lines
4.5 KiB
JSON
{
|
|
"type": "object",
|
|
"required": [
|
|
"alias",
|
|
"source",
|
|
"thread_id",
|
|
"packet_id",
|
|
"daemon_event_id",
|
|
"daemon_event_name",
|
|
"global_ts_usec"
|
|
],
|
|
"if": {
|
|
"properties": { "daemon_event_name": { "enum": [ "init", "reconnect" ] } }
|
|
},
|
|
"then": {
|
|
"required": [ "max-flows-per-thread", "max-idle-flows-per-thread", "tick-resolution", "reader-thread-count", "flow-scan-interval", "generic-max-idle-time", "icmp-max-idle-time", "udp-max-idle-time", "tcp-max-idle-time", "max-packets-per-flow-to-send", "max-packets-per-flow-to-process" ]
|
|
},
|
|
"if": {
|
|
"properties": { "daemon_event_name": { "enum": [ "status", "shutdown" ] } }
|
|
},
|
|
"then": {
|
|
"required": [ "packets-captured", "packets-processed", "total-skipped-flows", "total-l4-payload-len", "total-not-detected-flows", "total-guessed-flows", "total-detected-flows", "total-detection-updates", "total-updates", "current-active-flows", "total-active-flows", "total-idle-flows", "total-compressions", "total-compression-diff", "current-compression-diff", "total-events-serialized" ]
|
|
},
|
|
"properties": {
|
|
"alias": {
|
|
"type": "string"
|
|
},
|
|
"source": {
|
|
"type": "string"
|
|
},
|
|
"thread_id": {
|
|
"type": "number",
|
|
"minimum": 0,
|
|
"maximum": 31
|
|
},
|
|
"packet_id": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"daemon_event_id": {
|
|
"type": "number",
|
|
"minimum": 0,
|
|
"maximum": 4
|
|
},
|
|
"daemon_event_name": {
|
|
"type": "string",
|
|
"enum": [
|
|
"invalid",
|
|
"init",
|
|
"reconnect",
|
|
"shutdown",
|
|
"status"
|
|
]
|
|
},
|
|
|
|
"max-flows-per-thread": {
|
|
"type": "number"
|
|
},
|
|
"max-idle-flows-per-thread": {
|
|
"type": "number"
|
|
},
|
|
"tick-resolution": {
|
|
"type": "number"
|
|
},
|
|
"reader-thread-count": {
|
|
"type": "number"
|
|
},
|
|
"flow-scan-interval": {
|
|
"type": "number"
|
|
},
|
|
"generic-max-idle-time": {
|
|
"type": "number"
|
|
},
|
|
"icmp-max-idle-time": {
|
|
"type": "number"
|
|
},
|
|
"udp-max-idle-time": {
|
|
"type": "number"
|
|
},
|
|
"tcp-max-idle-time": {
|
|
"type": "number"
|
|
},
|
|
"max-packets-per-flow-to-process": {
|
|
"type": "number"
|
|
},
|
|
"max-packets-per-flow-to-send": {
|
|
"type": "number"
|
|
},
|
|
|
|
"packets-captured": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"packets-processed": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-skipped-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-l4-payload-len": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-not-detected-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-guessed-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-detected-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-detection-updates": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-updates": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"current-active-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-active-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-idle-flows": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-compressions": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-compression-diff": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"current-compression-diff": {
|
|
"type": "number",
|
|
"minimum": 0
|
|
},
|
|
"total-events-serialized": {
|
|
"type": "number",
|
|
"minimum": 1
|
|
},
|
|
"global_ts_usec": {
|
|
"type": "number",
|
|
"if": {
|
|
"properties": { "daemon_event_name": { "enum": [ "init" ] } }
|
|
},
|
|
"then" : true,
|
|
"else" : {
|
|
"minimum": 1000000
|
|
}
|
|
}
|
|
},
|
|
"additionalProperties": false
|
|
}
|