Network Interface

network_interface

The Network Interface object describes the type and associated attributes of a physical or virtual network interface.

Attributes

Caption	Name	Type	Description
Hostname	`hostname`	Hostname	Entity:`HOSTNAME` The hostname associated with the network interface.
IP Address	`ip`	IP Address	Entity:`IP_ADDRESS` The IP address associated with the network interface.
MAC Address	`mac`	MAC Address	Entity:`MAC_ADDRESS` The MAC address of the network interface.
Name	`name`	String	The name of the network interface.
Namespace	`namespace`	String	The namespace is useful in merger or acquisition situations. For example, when similar entities exist that you need to keep separate.
Open Ports	`open_ports`	Port Information[]	The list of open ports on a network interface, including port numbers and associated protocol information.
Raw Data	`raw_data`	JSON	Group:`context` The event data as received from the event source.
Record ID	`record_id`	String	Group:`primary` Unique identifier for the object
Subnet Prefix Length	`subnet_prefix`	Integer	The subnet prefix length determines the number of bits used to represent the network part of the IP address. The remaining bits are reserved for identifying individual hosts within that subnet.
Type	`type`	String	The type of network interface.
Type ID	`type_id`	Integer	The network interface type identifier. `0`: Unknown (`UNKNOWN`) `1`: Wired (`WIRED`) `2`: Wireless (`WIRELESS`) `3`: Mobile (`MOBILE`) `4`: Tunnel (`TUNNEL`) `99`: Other (`OTHER`)
Unique ID	`uid`	String	The unique identifier for the network interface.
Unmapped	`unmapped`	Unmapped[]	Data from the source that was not mapped into the schema.

These objects and events reference Network Interface in their attributes:

Network Interface references the following objects and events in its attributes:

This page describes qdm-1.5.1+ocsf-1.6.0

Updated about 1 month ago

Did this page help you?