Modifier and Type | Class and Description |
---|---|
class |
PcapActivity
A PcapActivity may be interpreted as a Network Layer 1 activity type, because all common PCAP-Files contain
individual Pcap-entries which are wrapped by this class in order to provide PCAP-specific metadata per entry.
|
Modifier and Type | Class and Description |
---|---|
class |
DroolsBaseActivity
This class serves as the base class for custom class extension inside the Drools rules files, i.e.
|
Modifier and Type | Class and Description |
---|---|
class |
ArpActivity
An encapsulation of an
ArpPacket including IP information if available. |
Modifier and Type | Class and Description |
---|---|
class |
DhcpActivity
An encapsulation of a
DhcpMessage . |
Modifier and Type | Class and Description |
---|---|
class |
DnsActivity
An encapsulation of a decoded
Message . |
Modifier and Type | Class and Description |
---|---|
class |
EthernetActivity
This class encapsulates an
Ethernet object, which should provide a vast amount
of metadata including the content buffer itself. |
Modifier and Type | Class and Description |
---|---|
class |
FtpActivity
TODO: this class represent a partial ftp activity, it must be reassembled by Drools rules based on the tcp socket addresses to represent a FTPSession
|
Modifier and Type | Class and Description |
---|---|
class |
HttpActivity
A high level aggregation of a
HttpRequestActivity
and a HttpResponseActivity . |
class |
HttpImageActivity
Represents a deduction that was performed by rule-based reasoning that resulted in the fact that the encountered
a
HttpActivity -headers contained image-related
metadata. |
class |
HttpRequestActivity
Encapsulates a
HttpRequest , that was decoded by the Kraken library. |
class |
HttpResponseActivity
Encapsulates a
HttpResponse , that was decoded by the Kraken library. |
Modifier and Type | Class and Description |
---|---|
class |
Icmpv4Activity
Encapsulates an
IcmpPacket . |
class |
Icmpv6Activity
IPv6 specific class similar to
Icmpv4Activity ,
but encapsulates an Icmpv6Packet instead. |
class |
PingActivity
Represents the derived fact, that both an Echo request and a related Echo reply were encountered.
|
Modifier and Type | Class and Description |
---|---|
class |
IpActivity
This class represents the abstraction of
Ipv4Activity
and Ipv6Activity . |
class |
Ipv4Activity
Encapsulates all available/decoded IPv4 packet fields and provides a compatible JNetPcap
Ip4 object. |
class |
Ipv6Activity
Encapsulates certain IPv6 packet fields, and provides a compatible JNetPcap representation
(
Ip6 ) of the packet. |
Modifier and Type | Class and Description |
---|---|
class |
MsnActivity
Encapsulates MSN chat messages.
|
Modifier and Type | Class and Description |
---|---|
class |
NetbiosActivity
Encapsulates
NetBiosDatagramPacket s. |
Modifier and Type | Class and Description |
---|---|
class |
Pop3Activity
TODO: this class represents a partial Pop3-Activity, i.e.
|
Modifier and Type | Class and Description |
---|---|
class |
SmtpActivity
Represents an abstraction for
SmtpCommandActivity ,
SmtpReplyActivity and
SmtpSendActivity that may be used by Drools rules
in order to determine that some SMTP related traffic occurred for a given PcapActivity . |
class |
SmtpCommandActivity
Encapsulates the SMTP command and parameter values.
|
class |
SmtpReplyActivity
Encapsulates the SMTP reply code number and the SMTP message.
|
class |
SmtpSendActivity
Encapsulates the
MimeHeader and the SmtpData for
SMTP. |
Modifier and Type | Class and Description |
---|---|
class |
Snmpv1Activity
Encapsulates a
Pdu object including source and destination
L3/L4 addresses. |
class |
Snmpv2Activity
Created by stefan on 3/19/14.
|
Modifier and Type | Class and Description |
---|---|
class |
TcpActivity
Encapsulates a vast amount of TCP flags/options/values and derived information, however, some fields have not yet
been implemented by the Kraken TCP-Decoder and/or the JNetPcap-decoder.
|
Modifier and Type | Class and Description |
---|---|
class |
TelnetActivity
TODO: partial types -> drools reassembly
|
Modifier and Type | Class and Description |
---|---|
class |
TlsActivity
Encapsulates various
TcpActivity objects
that are specific to SSL/TLS streams, e.g. |
Modifier and Type | Class and Description |
---|---|
class |
UdpActivity
Encapsulates various UDP packet specific values (decoded by Kraken) and
provides a JNetPcap representation of the same UDP data.
|
Copyright © 2013–2015 Institute of networks and security. All rights reserved.