Symantec 10521146 - Network Security 7120, Administration Manual

Page: 336 / 392

336 SQL reference
Using MySQL tables
hdrInfo text Indicates the TCP/IP header information OR full
packet. Base-64 encoded.
ident varchar(33) Indicates the unique identifier for each type of
message.
ifID varchar(33) Indicates the ID of the interface (
interfaceID
from the topology table) where this event was
detected.
Used internally
ifName varchar(65) Indicates the name of the interface where this
event was detected. For example:
hme0
incidentID varchar(33) Indicates a unique string identifier that identifies
the incident to which this event belongs.
mappedType varchar(128) Indicates the mapped type of the event/incident
corresponding to
type
module varchar(33) Indicates the module name where this event was
generated. Used internally
nodeName varchar(255) Indicates the hostname of the software or
appliance node, corresponding to
nodeNum
nodeNum integer Indicates the Network Security node number
where the incident originated.
outcome integer Indicates that the event was blocked if integer is
1.
pldEnd integer Identifies the ending index of the region in
payload where the anomaly was detected.
pldStt integer Identifies the starting index of the region in
payload where the anomaly was detected.
poolID varchar(33) Indicates the ID of the interface group where this
event was detected. Used internally
poolName varchar(41) Indicates the name of the interface group where
this event was detected.
prot varchar(33) Indicates the protocol, either
IP
,
TCP
,
UDP
, or
ICMP
.
pyld text Indicates the portion of the packet that triggered
this event. Base-64 encoded
Table B-4 MySQL Event Table
Field Name Type Description Notes