Class: TcpExt

The TCP extension specifies a default extension for capturing network traffic properties specific to TCP. Used as the value of the 'tcp-ext' key in a NetworkTraffic object's extensions dictionary.

URI: attack:TcpExt

 classDiagram
    class TcpExt
    click TcpExt href "../TcpExt/"
      CommonSchemaComponent <|-- TcpExt
        click CommonSchemaComponent href "../CommonSchemaComponent/"

      TcpExt : description

      TcpExt : dst_flags_hex

      TcpExt : id

      TcpExt : name

      TcpExt : src_flags_hex

      TcpExt : type

Inheritance

StixEntity
- CommonSchemaComponent
  - TcpExt

Slots

Name	Cardinality and Range	Description	Inheritance
src_flags_hex	0..1 String	Specifies the source TCP flags, as the union of all TCP flags observed betwee...	direct
dst_flags_hex	0..1 String	Specifies the destination TCP flags, as the union of all TCP flags observed b...	direct
id	0..1 StixIdentifier	STIX object identifier	StixEntity
type	0..1 StixTypeName	STIX object type	StixEntity
name	0..1 String	Human-readable name	StixEntity
description	0..1 String	Human-readable description	StixEntity

In Subsets

Observables

Comments

stix_extension_key: tcp-ext stix_parent_type: network-traffic jsonschema_source: https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/network-traffic.json

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/attack

Mappings

Mapping Type	Mapped Value
self	attack:TcpExt
native	attack:TcpExt

LinkML Source

Direct

name: TcpExt
description: The TCP extension specifies a default extension for capturing network
  traffic properties specific to TCP. Used as the value of the 'tcp-ext' key in a
  NetworkTraffic object's extensions dictionary.
comments:
- 'stix_extension_key: tcp-ext stix_parent_type: network-traffic jsonschema_source:
  https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/network-traffic.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
slots:
- src_flags_hex
- dst_flags_hex

Induced

name: TcpExt
description: The TCP extension specifies a default extension for capturing network
  traffic properties specific to TCP. Used as the value of the 'tcp-ext' key in a
  NetworkTraffic object's extensions dictionary.
comments:
- 'stix_extension_key: tcp-ext stix_parent_type: network-traffic jsonschema_source:
  https://github.com/oasis-open/cti-stix2-json-schemas/tree/master/schemas/observables/network-traffic.json'
in_subset:
- observables
from_schema: https://w3id.org/lmodel/attack
is_a: CommonSchemaComponent
attributes:
  src_flags_hex:
    name: src_flags_hex
    description: Specifies the source TCP flags, as the union of all TCP flags observed
      between the start and end of the session.
    comments:
    - 'jsonschema_format: hex'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: src_flags_hex
    owner: TcpExt
    domain_of:
    - TcpExt
    range: string
  dst_flags_hex:
    name: dst_flags_hex
    description: Specifies the destination TCP flags, as the union of all TCP flags
      observed between the start and end of the session.
    comments:
    - 'jsonschema_format: hex'
    from_schema: https://w3id.org/lmodel/attack
    rank: 1000
    alias: dst_flags_hex
    owner: TcpExt
    domain_of:
    - TcpExt
    range: string
  id:
    name: id
    description: STIX object identifier.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:externalReference
    rank: 1000
    alias: id
    owner: TcpExt
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_identifier
  type:
    name: type
    description: STIX object type.
    from_schema: https://w3id.org/lmodel/attack
    related_mappings:
    - unified_cyber_ontology:state
    rank: 1000
    alias: type
    owner: TcpExt
    domain_of:
    - StixEntity
    - Bundle
    - Core
    - CyberObservableCore
    - ExtensionDefinition
    - LanguageContent
    - MarkingDefinition
    - File
    range: stix_type_name
  name:
    name: name
    description: Human-readable name.
    from_schema: https://w3id.org/lmodel/attack
    exact_mappings:
    - unified_cyber_ontology:name
    rank: 1000
    alias: name
    owner: TcpExt
    domain_of:
    - RelatedAsset
    - StixEntity
    - ExtensionDefinition
    - MarkingDefinition
    - AutonomousSystem
    - File
    range: string
  description:
    name: description
    description: Human-readable description.
    from_schema: https://w3id.org/lmodel/attack
    close_mappings:
    - unified_cyber_ontology:description
    rank: 1000
    alias: description
    owner: TcpExt
    domain_of:
    - RelatedAsset
    - MutableElement
    - StixEntity
    - ExtensionDefinition
    - ExternalReference
    range: string