Enum: NetworkConnectionQueryStateIdEnum

The state of the socket.

URI: ocsf:NetworkConnectionQueryStateIdEnum

Permissible Values

Value	Meaning	Description
UNKNOWN	None	The socket state is unknown
ESTABLISHED	None	The socket has an established connection between a local application and a
SYN_SENT	None	The socket is actively trying to establish a connection to a remote peer
SYN_RECV	None	The socket has passively received a connection request from a remote peer
FIN_WAIT1	None	The socket connection has been closed by the local application, the remote pe...
FIN_WAIT2	None	The socket connection has been closed by the local application, the remote pe...
TIME_WAIT	None	The socket connection has been closed by the local application, the remote pe...
CLOSED	None	The socket is not in use
CLOSE_WAIT	None	The socket connection has been closed by the remote peer, and the system is
LAST_ACK	None	The socket connection has been closed by the remote peer, the local applicati...
LISTEN	None	The socket is listening for incoming connections
CLOSING	None	The socket connection has been closed by the local application and the remote
OTHER	None	The state is not mapped

Slots

Name	Description
state_id	The state of the socket

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

LinkML Source

name: NetworkConnectionQueryStateIdEnum
description: The state of the socket.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The socket state is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  ESTABLISHED:
    text: ESTABLISHED
    description: 'The socket has an established connection between a local application
      and a

      remote peer.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: ESTABLISHED
  SYN_SENT:
    text: SYN_SENT
    description: The socket is actively trying to establish a connection to a remote
      peer.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: SYN_SENT
  SYN_RECV:
    text: SYN_RECV
    description: The socket has passively received a connection request from a remote
      peer.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: SYN_RECV
  FIN_WAIT1:
    text: FIN_WAIT1
    description: 'The socket connection has been closed by the local application,
      the remote peer

      has not yet acknowledged the close, and the system is waiting for it to close

      its half of the connection.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: FIN_WAIT1
  FIN_WAIT2:
    text: FIN_WAIT2
    description: 'The socket connection has been closed by the local application,
      the remote peer

      has acknowledged the close, and the system is waiting for it to close its half

      of the connection.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: FIN_WAIT2
  TIME_WAIT:
    text: TIME_WAIT
    description: 'The socket connection has been closed by the local application,
      the remote peer

      has closed its half of the connection, and the system is waiting to be sure

      that the remote peer received the last acknowledgement.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: TIME_WAIT
  CLOSED:
    text: CLOSED
    description: The socket is not in use.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: CLOSED
  CLOSE_WAIT:
    text: CLOSE_WAIT
    description: 'The socket connection has been closed by the remote peer, and the
      system is

      waiting for the local application to close its half of the connection.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '8'
      caption:
        tag: caption
        value: CLOSE_WAIT
  LAST_ACK:
    text: LAST_ACK
    description: 'The socket connection has been closed by the remote peer, the local
      application

      has closed its half of the connection, and the system is waiting for the remote

      peer to acknowledge the close.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '9'
      caption:
        tag: caption
        value: LAST_ACK
  LISTEN:
    text: LISTEN
    description: The socket is listening for incoming connections.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '10'
      caption:
        tag: caption
        value: LISTEN
  CLOSING:
    text: CLOSING
    description: 'The socket connection has been closed by the local application and
      the remote

      peer simultaneously, and the remote peer has not yet acknowledged the close

      attempt of the local application.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '11'
      caption:
        tag: caption
        value: CLOSING
  OTHER:
    text: OTHER
    description: 'The state is not mapped. See the <code>state</code> attribute, which
      contains a

      data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other