Skip to content

Enum: SshActivityActivityIdEnum

SshActivity activity_id values.

URI: ocsf:SshActivityActivityIdEnum

Permissible Values

Value Meaning Description
OPEN None A new network connection was opened
CLOSE None The network connection was closed
RESET None The network connection was abnormally terminated or closed by a middle device
FAIL None The network connection failed
REFUSE None The network connection was refused
TRAFFIC None Network traffic report
LISTEN None A network endpoint began listening for new network connections
UNKNOWN None The event activity is unknown
OTHER None The event activity is not mapped

Slots

Name Description
activity_id

Identifier and Mapping Information

Schema Source

LinkML Source

name: SshActivityActivityIdEnum
description: SshActivity activity_id values.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  OPEN:
    text: OPEN
    description: A new network connection was opened.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: Open
  CLOSE:
    text: CLOSE
    description: The network connection was closed.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: Close
  RESET:
    text: RESET
    description: 'The network connection was abnormally terminated or closed by a
      middle device

      like firewalls.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: Reset
  FAIL:
    text: FAIL
    description: 'The network connection failed. For example a connection timeout
      or no route to

      host.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: Fail
  REFUSE:
    text: REFUSE
    description: 'The network connection was refused. For example an attempt to connect
      to a

      server port which is not open.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: Refuse
  TRAFFIC:
    text: TRAFFIC
    description: Network traffic report.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: Traffic
  LISTEN:
    text: LISTEN
    description: A network endpoint began listening for new network connections.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: Listen
  UNKNOWN:
    text: UNKNOWN
    description: The event activity is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  OTHER:
    text: OTHER
    description: 'The event activity is not mapped. See the <code>activity_name</code>
      attribute,

      which contains a data source specific value.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '99'
      caption:
        tag: caption
        value: Other