340
edits
Incidents: Difference between revisions
→Available attributes
| Line 398: | Line 398: | ||
* '''used_size''': The percentage of the ring buffer that needs to be filled. | * '''used_size''': The percentage of the ring buffer that needs to be filled. | ||
* '''used_tls_version''': The TLS version (SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 or TLS 1.3) | * '''used_tls_version''': The TLS version (SSL 3.0, TLS 1.0, TLS 1.1, TLS 1.2 or TLS 1.3) | ||
* '''version''': | |||
** ''SMB: SMB version negotiation'': The SMB version SMB1 or SMB2/3 | |||
* '''window_below_mss''': Whether the smallest announced TCP window was below the TCP MSS value. An additional offset is available, to check whether window was smaller than MSS + x bytes. | * '''window_below_mss''': Whether the smallest announced TCP window was below the TCP MSS value. An additional offset is available, to check whether window was smaller than MSS + x bytes. | ||
* '''zero_window_packets''': The number of packets with a TCP window of 0 for both directions of the flow. | * '''zero_window_packets''': The number of packets with a TCP window of 0 for both directions of the flow. | ||