Class: StixTcpExtension
The TCP extension specifies a default extension for capturing network traffic properties specific to TCP.
classDiagram
class StixTcpExtension
click StixTcpExtension href "../StixTcpExtension/"
StixTcpExtension : dst_flags_hex
StixTcpExtension : src_flags_hex
| Name | Cardinality and Range | Description | Inheritance |
|---|---|---|---|
| src_flags_hex | 0..1 StixHex |
Specifies the source TCP flags, as the union of all TCP flags observed betwee… | direct |
| dst_flags_hex | 0..1 StixHex |
Specifies the destination TCP flags, as the union of all TCP flags observed b… | direct |
Expressions & Logic
Any Of
Section titled “Any Of”The class must satisfy at least one of:
- AnonymousClassExpression({ ‘slot_conditions’: {‘src_flags_hex’: SlotDefinition({‘name’: ‘src_flags_hex’, ‘required’: True})} })
- AnonymousClassExpression({ ‘slot_conditions’: {‘dst_flags_hex’: SlotDefinition({‘name’: ‘dst_flags_hex’, ‘required’: True})} })
Identifier and Mapping Information
Section titled “Identifier and Mapping Information”Annotations
Section titled “Annotations”| property | value |
|---|---|
| stix_extension_name | tcp-ext |
Schema Source
Section titled “Schema Source”- from schema: https://w3id.org/lmodel/attack
Mappings
Section titled “Mappings”| Mapping Type | Mapped Value |
|---|---|
| self | attack:StixTcpExtension |
| native | attack:StixTcpExtension |
| close | uco-observable:TCPConnectionFacet |
LinkML Source
Section titled “LinkML Source”Direct
Section titled “Direct”name: StixTcpExtensionannotations: stix_extension_name: tag: stix_extension_name value: tcp-extdescription: The TCP extension specifies a default extension for capturing network traffic properties specific to TCP.from_schema: https://w3id.org/lmodel/attackclose_mappings:- uco-observable:TCPConnectionFacetslots:- src_flags_hex- dst_flags_hexany_of:- slot_conditions: src_flags_hex: name: src_flags_hex required: true- slot_conditions: dst_flags_hex: name: dst_flags_hex required: trueInduced
Section titled “Induced”name: StixTcpExtensionannotations: stix_extension_name: tag: stix_extension_name value: tcp-extdescription: The TCP extension specifies a default extension for capturing network traffic properties specific to TCP.from_schema: https://w3id.org/lmodel/attackclose_mappings:- uco-observable:TCPConnectionFacetattributes: src_flags_hex: name: src_flags_hex description: Specifies the source TCP flags, as the union of all TCP flags observed between the start of the traffic (as defined by the start property) and the end of the traffic (as defined by the end property). from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:src_flags_hex owner: StixTcpExtension domain_of: - StixTcpExtension range: stix_hex dst_flags_hex: name: dst_flags_hex description: Specifies the destination TCP flags, as the union of all TCP flags observed between the start of the traffic (as defined by the start property) and the end of the traffic (as defined by the end property). from_schema: https://w3id.org/lmodel/attack rank: 1000 slot_uri: stix:dst_flags_hex owner: StixTcpExtension domain_of: - StixTcpExtension range: stix_hexany_of:- slot_conditions: src_flags_hex: name: src_flags_hex required: true- slot_conditions: dst_flags_hex: name: dst_flags_hex required: true