mirror of
https://github.com/librenms/librenms.git
synced 2024-09-22 10:58:42 +00:00
9d00b0c12c
* Run CI on ubuntu 20.04 * wip * wip * wip * Update all test data * remove slashes * wip * wip * wip * wip * wip * wip * iwp * wip * wip * wip * wip * wip * wip * wip Co-authored-by: Tony Murray <murraytony@gmail.com>
1284 lines
42 KiB
JSON
1284 lines
42 KiB
JSON
{
|
|
"applications": {
|
|
"discovery": {
|
|
"applications": [
|
|
{
|
|
"app_type": "suricata",
|
|
"app_state": "UNKNOWN",
|
|
"discovered": 1,
|
|
"app_state_prev": null,
|
|
"app_status": "",
|
|
"app_instance": "",
|
|
"data": null
|
|
}
|
|
]
|
|
},
|
|
"poller": {
|
|
"applications": [
|
|
{
|
|
"app_type": "suricata",
|
|
"app_state": "OK",
|
|
"discovered": 1,
|
|
"app_state_prev": "UNKNOWN",
|
|
"app_status": "",
|
|
"app_instance": "",
|
|
"data": "{\"instances\":[\"ids\"]}"
|
|
}
|
|
],
|
|
"application_metrics": [
|
|
{
|
|
"metric": ".total_af_dcerpc_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_dcerpc_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_dhcp",
|
|
"value": 52,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_dns_tcp",
|
|
"value": 1901,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_dns_udp",
|
|
"value": 556315,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_failed_tcp",
|
|
"value": 4260,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_failed_udp",
|
|
"value": 8121,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_ftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_ftp_data",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_http",
|
|
"value": 30855,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_ikev2",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_imap",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_krb5_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_krb5_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_mqtt",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_nfs_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_nfs_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_ntp",
|
|
"value": 1682,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_rdp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_rfb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_sip",
|
|
"value": 1,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_smb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_smtp",
|
|
"value": 1408,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_snmp",
|
|
"value": 14203,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_ssh",
|
|
"value": 37,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_tftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_af_tls",
|
|
"value": 126907,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_alert",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_dcerpc_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_dcerpc_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_dhcp",
|
|
"value": 2571,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_dns_tcp",
|
|
"value": 3806,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_dns_udp",
|
|
"value": 1207694,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_ftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_ftp_data",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_http",
|
|
"value": 31784,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_ikev2",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_imap",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_krb5_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_krb5_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_mqtt",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_nfs_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_nfs_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_ntp",
|
|
"value": 2409,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_rdp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_rfb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_sip",
|
|
"value": 4137,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_smb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_smtp",
|
|
"value": 2108,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_snmp",
|
|
"value": 433976,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_ssh",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_tftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_at_tls",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_bytes",
|
|
"value": 7587094274,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_avg_pkt_size",
|
|
"value": 513,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_chdlc",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_ethernet",
|
|
"value": 14772989,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_geneve",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_ieee8021ah",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_invalid",
|
|
"value": 4,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_ipv4",
|
|
"value": 14616928,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_ipv4_in_ipv6",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_ipv6",
|
|
"value": 428,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_max_pkt_size",
|
|
"value": 1514,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_mpls",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_mx_mac_addrs_d",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_mx_mac_addrs_s",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_packets",
|
|
"value": 14772989,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_ppp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_pppoe",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_raw",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_sctp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_sll",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_tcp",
|
|
"value": 9921619,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_teredo",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_too_many_layer",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_udp",
|
|
"value": 4120492,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_vlan",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_vlan_qinq",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_vntag",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dec_vxlan",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_drop_delta",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_drop_percent",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_dropped",
|
|
"value": 12750,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_error_delta",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_error_percent",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_errors",
|
|
"value": 1,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_f_icmpv4",
|
|
"value": 3667,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_f_icmpv6",
|
|
"value": 371,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_f_memuse",
|
|
"value": 8567872,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_f_tcp",
|
|
"value": 287482,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_f_udp",
|
|
"value": 580374,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_ftp_memuse",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_http_memuse",
|
|
"value": 155770,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_ifdrop_delta",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_ifdrop_percent",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_ifdropped",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_packet_delta",
|
|
"value": 55223,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_packets",
|
|
"value": 14785697,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_tcp_memuse",
|
|
"value": 2425072,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_tcp_reass_memuse",
|
|
"value": 16676636,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": ".total_uptime",
|
|
"value": 104890,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "alert",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_dcerpc_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_dcerpc_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_dhcp",
|
|
"value": 52,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_dns_tcp",
|
|
"value": 1901,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_dns_udp",
|
|
"value": 556315,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_failed_tcp",
|
|
"value": 4260,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_failed_udp",
|
|
"value": 8121,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_ftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_ftp_data",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_http",
|
|
"value": 30855,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_ikev2",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_imap",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_krb5_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_krb5_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_mqtt",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_nfs_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_nfs_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_ntp",
|
|
"value": 1682,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_rdp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_rfb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_sip",
|
|
"value": 1,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_smb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_smtp",
|
|
"value": 1408,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_snmp",
|
|
"value": 14203,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_ssh",
|
|
"value": 37,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_tftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_af_tls",
|
|
"value": 126907,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_alert",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_dcerpc_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_dcerpc_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_dhcp",
|
|
"value": 2571,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_dns_tcp",
|
|
"value": 3806,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_dns_udp",
|
|
"value": 1207694,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_ftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_ftp_data",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_http",
|
|
"value": 31784,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_ikev2",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_imap",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_krb5_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_krb5_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_mqtt",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_nfs_tcp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_nfs_udp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_ntp",
|
|
"value": 2409,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_rdp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_rfb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_sip",
|
|
"value": 4137,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_smb",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_smtp",
|
|
"value": 2108,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_snmp",
|
|
"value": 433976,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_ssh",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_tftp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_at_tls",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_bytes",
|
|
"value": 7587094274,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_avg_pkt_size",
|
|
"value": 513,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_chdlc",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_ethernet",
|
|
"value": 14772989,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_geneve",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_ieee8021ah",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_invalid",
|
|
"value": 4,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_ipv4",
|
|
"value": 14616928,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_ipv4_in_ipv6",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_ipv6",
|
|
"value": 428,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_max_pkt_size",
|
|
"value": 1514,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_mpls",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_mx_mac_addrs_d",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_mx_mac_addrs_s",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_packets",
|
|
"value": 14772989,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_ppp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_pppoe",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_raw",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_sctp",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_sll",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_tcp",
|
|
"value": 9921619,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_teredo",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_too_many_layer",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_udp",
|
|
"value": 4120492,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_vlan",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_vlan_qinq",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_vntag",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dec_vxlan",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_drop_delta",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_drop_percent",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_dropped",
|
|
"value": 12750,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_error_delta",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_error_percent",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_errors",
|
|
"value": 1,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_f_icmpv4",
|
|
"value": 3667,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_f_icmpv6",
|
|
"value": 371,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_f_memuse",
|
|
"value": 8567872,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_f_tcp",
|
|
"value": 287482,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_f_udp",
|
|
"value": 580374,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_ftp_memuse",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_http_memuse",
|
|
"value": 155770,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_ifdrop_delta",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_ifdrop_percent",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_ifdropped",
|
|
"value": 0,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_packet_delta",
|
|
"value": 55223,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_packets",
|
|
"value": 14785697,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_tcp_memuse",
|
|
"value": 2425072,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_tcp_reass_memuse",
|
|
"value": 16676636,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
},
|
|
{
|
|
"metric": "ids_uptime",
|
|
"value": 104890,
|
|
"value_prev": null,
|
|
"app_type": "suricata"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"os": {
|
|
"discovery": {
|
|
"devices": [
|
|
{
|
|
"sysName": "<private>",
|
|
"sysObjectID": ".1.3.6.1.4.1.8072.3.2.10",
|
|
"sysDescr": "Linux server 3.10.0-693.5.2.el7.x86_64 #1 SMP Fri Oct 20 20:32:50 UTC 2017 x86_64",
|
|
"sysContact": "<private>",
|
|
"version": "3.10.0-693.5.2.el7.x86_64",
|
|
"hardware": "Generic x86 64-bit",
|
|
"features": null,
|
|
"location": "<private>",
|
|
"os": "linux",
|
|
"type": "server",
|
|
"serial": null,
|
|
"icon": "linux.svg"
|
|
}
|
|
]
|
|
},
|
|
"poller": "matches discovery"
|
|
}
|
|
}
|