You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The descriptions below detail the fields available for `magic_ids_detections`.
12
+
13
+
{{<table-wrap>}}
14
+
15
+
| Field | Value | Type |
16
+
| -- | -- | -- |
17
+
| Action | What action was taken on the packet. Possible values are <em>pass</em> \| <em>block</em>. | string |
18
+
| ColoCity | The city where the detection occurred. | string |
19
+
| ColoCode | The IATA airport code corresponding to where the detection occurred. | string |
20
+
| DestinationIP | The destination IP of the packet which triggered the detection. | string |
21
+
| DestinationPort | The destination port of the packet which triggered the detection. It is set to 0 if the protocol field is set to <em>any</em>. | int |
22
+
| Protocol | The layer 4 protocol of the packet which triggered the detection. Possible values are <em>tcp</em> \| <em>udp</em> \| <em>any</em>. Variant <em>any</em> means a detection occurred at a lower layer (such as IP). | string |
23
+
| SignatureID | The signature ID of the detection. | int |
24
+
| SignatureMessage | The signature message of the detection. Describes what the packet is attempting to do. | string |
25
+
| SignatureRevision | The signature revision of the detection. | int |
26
+
| SourceIP | The source IP of packet which triggered the detection. | string |
27
+
| SourcePort | The source port of the packet which triggered the detection. It is set to 0 if the protocol field is set to <em>any</em>. | int |
28
+
| Timestamp | A timestamp of when the detection occurred. | int or string |
0 commit comments