cisco netflow
March 22, 2023 · View on GitHub
Expression
product = "cisco netflow"
Fields
| Field | Core | Detection | Informational |
|---|---|---|---|
| result | ✓ | ||
| flow_end_time | ✓ | ||
| flow_start_time | ✓ | ||
| src_interface | ✓ | ||
| bytes_out | ✓ | ||
| bytes_in | ✓ | ||
| packets_out | ✓ | ||
| tcp_flags | ✓ | ||
| packets_in | ✓ | ||
| dest_host | ✓ | ||
| src_host | ✓ | ||
| packets | ✓ |
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| network-session |