This commit is contained in:
@@ -22,7 +22,7 @@ class PacketDBModel(BaseModel):
|
||||
"skb_mark": 123456,
|
||||
"ingress_if": "eth0",
|
||||
"egress_if": "eth1",
|
||||
"capture_iface": "mitmcap0",
|
||||
"capture_iface": None,
|
||||
"src_mac": "aa:bb:cc:dd:ee:ff",
|
||||
"dst_mac": "11:22:33:44:55:66",
|
||||
"eth_type_raw": 2048,
|
||||
@@ -36,7 +36,7 @@ class PacketDBModel(BaseModel):
|
||||
"vlan_id": None,
|
||||
"length": 128,
|
||||
"raw_present": True,
|
||||
"capture_sources": ["af_packet", "telemetry"],
|
||||
"capture_sources": ["tc_ingress_raw", "telemetry"],
|
||||
"raw_b64": "BASE64...",
|
||||
"app_protocol": "HTTP",
|
||||
"app_master_protocol": "HTTP",
|
||||
@@ -46,8 +46,8 @@ class PacketDBModel(BaseModel):
|
||||
"app_is_encrypted": False,
|
||||
"app_risk_score": 0,
|
||||
"dpi_metadata": {"method": "GET"},
|
||||
"capture_metadata": {"header_magic": "MTCP", "header_version": 1},
|
||||
"telemetry_metadata": {"event_type": "egress", "iface": "eth1"},
|
||||
"capture_metadata": {"capture_mode": "tc_ingress", "packet_id": "123456"},
|
||||
"telemetry_metadata": {"event_type": "egress", "iface": "eth1", "packet_id": "123456"},
|
||||
"verdict": "accept",
|
||||
"verdict_reason": "egress-observed",
|
||||
"verdict_confidence": "high",
|
||||
@@ -89,7 +89,7 @@ class PacketDBModel(BaseModel):
|
||||
app_is_encrypted: Optional[bool] = Field(None, description="Whether detected protocol appears encrypted.")
|
||||
app_risk_score: Optional[int] = Field(None, description="Count/score of detected nDPI risks.")
|
||||
dpi_metadata: Optional[dict] = Field(None, description="Raw DPI metadata from nDPI.")
|
||||
capture_metadata: Optional[dict] = Field(None, description="Capture-side metadata from the mirrored packet shim.")
|
||||
capture_metadata: Optional[dict] = Field(None, description="Raw-capture metadata from the bridge tc ingress exporter.")
|
||||
telemetry_metadata: Optional[dict] = Field(None, description="Kernel telemetry details from eBPF collector.")
|
||||
verdict: Optional[str] = None
|
||||
verdict_reason: Optional[str] = None
|
||||
|
||||
Reference in New Issue
Block a user