`salo.events.zeek.conn`

Module Contents

Classes

Mixin to provide __str__, __repr__, and __pretty__ methods. See #884 for more details.

Attributes

`CONN_STATES`
`HISTORIES`
`SERVICES`

salo.events.zeek.conn.CONN_STATES = ['S0', 'S1', 'S2', 'S3', 'SF', 'REJ', 'RSTO', 'RSTR', 'RSTOS0', 'RSTRH', 'SH', 'SHR', 'OTH']

salo.events.zeek.conn.HISTORIES = ['D', 'Dd', 'S', 'ShADTadtFf', 'ShADTadtFfR', 'ShADTadtFfRR', 'ShADTadtR', 'ShADTadtTFf',...

salo.events.zeek.conn.SERVICES

class salo.events.zeek.conn.ConnModel(__pydantic_self__, **data: Any)[source]

Bases: salo.events.zeek.base.ZeekModel

Mixin to provide __str__, __repr__, and __pretty__ methods. See #884 for more details.

__pretty__ is used by [devtools](https://python-devtools.helpmanual.io/) to provide human readable representations of objects.

_refs :List[str] = ['https://docs.zeek.org/en/master/scripts/base/protocols/conn/main.zeek.html#type-Conn::Info',...

proto :str

service :str

duration :Optional[float]

orig_bytes :int

resp_bytes :int

conn_state :Optional[str]

local_orig :Optional[bool]

local_resp :Optional[bool]

missed_bytes :int

history :Optional[str]

orig_pkts :int

orig_ip_bytes :int

resp_pkts :int

resp_ip_bytes :int

tunnel_parents :Optional[str]

orig_l2_addr :Optional[str]

resp_l2_addr :Optional[str]

vlan :Optional[int]

inner_vlan :Optional[int]

speculative_service :Optional[str]

set_duration(cls, v)[source]

set_conn_state(cls, v)[source]

set_history(cls, v)[source]

ports_protocols(cls, values)[source]