add sankey ip ethernet layer
This commit is contained in:
@@ -28,6 +28,23 @@ class ProtocolEvidence(BaseModel):
|
||||
drop_count: int = Field(0, description="Packets with verdict=drop for this protocol.")
|
||||
reject_count: int = Field(0, description="Packets with verdict=reject for this protocol.")
|
||||
unknown_count: int = Field(0, description="Packets with verdict pending/unknown or without a verdict.")
|
||||
ethernet_protocol: Optional[str] = Field(None, description="Dominant Ethernet protocol associated with this protocol evidence.")
|
||||
ip_protocol: Optional[str] = Field(None, description="Dominant IP protocol associated with this protocol evidence.")
|
||||
layer_paths: List["ProtocolLayerPathEvidence"] = Field(
|
||||
default_factory=list,
|
||||
description="Optional Ethernet/IP breakdown contributing to this protocol evidence.",
|
||||
)
|
||||
|
||||
|
||||
class ProtocolLayerPathEvidence(BaseModel):
|
||||
ethernet_protocol: Optional[str] = Field(None, description="Ethernet protocol label for this path, if known.")
|
||||
ip_protocol: Optional[str] = Field(None, description="IP protocol label for this path, if known.")
|
||||
packet_count: int = Field(..., description="Packet observations supporting this path.")
|
||||
last_seen: datetime = Field(..., description="Most recent packet timestamp supporting this path.")
|
||||
accept_count: int = Field(0, description="Packets with verdict=accept for this path.")
|
||||
drop_count: int = Field(0, description="Packets with verdict=drop for this path.")
|
||||
reject_count: int = Field(0, description="Packets with verdict=reject for this path.")
|
||||
unknown_count: int = Field(0, description="Packets with verdict pending/unknown or without a verdict.")
|
||||
|
||||
|
||||
class InterfaceHostProtocolEvidence(InterfaceHostEvidence):
|
||||
|
||||
Reference in New Issue
Block a user