Enum: TcpStateIdEnum

The state of the TCP socket for the network connection.

URI: ocsf:TcpStateIdEnum

Permissible Values

Value	Meaning	Description
UNKNOWN	None	The socket state is unknown
ESTABLISHED	None	The socket has an established connection between a local application and a
SYN_SENT	None	The socket is actively trying to establish a connection to a remote peer
SYN_RECEIVED	None	The socket has passively received a connection request from a remote peer
FIN_WAIT_1	None	The socket connection has been closed by the local application, the remote pe...
FIN_WAIT_2	None	The socket connection has been closed by the local application, the remote pe...
TIME_WAIT	None	The socket connection has been closed by the local application, the remote pe...
CLOSED	None	The socket is not in use
CLOSE_WAIT	None	The socket connection has been closed by the remote peer, and the system is
LAST_ACK	None	The socket connection has been closed by the remote peer, the local applicati...
LISTEN	None	The socket is listening for incoming connections
CLOSING	None	The socket connection has been closed by the local application and the remote

Slots

Name	Description
tcp_state_id	The state of the TCP socket for the network connection

Identifier and Mapping Information

Schema Source

• from schema: https://w3id.org/lmodel/ocsf

LinkML Source

name: TcpStateIdEnum
description: The state of the TCP socket for the network connection.
from_schema: https://w3id.org/lmodel/ocsf
rank: 1000
permissible_values:
  UNKNOWN:
    text: UNKNOWN
    description: The socket state is unknown.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '0'
      caption:
        tag: caption
        value: Unknown
  ESTABLISHED:
    text: ESTABLISHED
    description: 'The socket has an established connection between a local application
      and a

      remote peer.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '1'
      caption:
        tag: caption
        value: ESTABLISHED
  SYN_SENT:
    text: SYN_SENT
    description: The socket is actively trying to establish a connection to a remote
      peer.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '2'
      caption:
        tag: caption
        value: SYN-SENT
  SYN_RECEIVED:
    text: SYN_RECEIVED
    description: The socket has passively received a connection request from a remote
      peer.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '3'
      caption:
        tag: caption
        value: SYN-RECEIVED
  FIN_WAIT_1:
    text: FIN_WAIT_1
    description: 'The socket connection has been closed by the local application,
      the remote peer

      has not yet acknowledged the close, and the system is waiting for it to close

      its half of the connection.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '4'
      caption:
        tag: caption
        value: FIN-WAIT-1
  FIN_WAIT_2:
    text: FIN_WAIT_2
    description: 'The socket connection has been closed by the local application,
      the remote peer

      has acknowledged the close, and the system is waiting for it to close its half

      of the connection.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '5'
      caption:
        tag: caption
        value: FIN-WAIT-2
  TIME_WAIT:
    text: TIME_WAIT
    description: 'The socket connection has been closed by the local application,
      the remote peer

      has closed its half of the connection, and the system is waiting to be sure

      that the remote peer received the last acknowledgement.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '6'
      caption:
        tag: caption
        value: TIME-WAIT
  CLOSED:
    text: CLOSED
    description: The socket is not in use.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '7'
      caption:
        tag: caption
        value: CLOSED
  CLOSE_WAIT:
    text: CLOSE_WAIT
    description: 'The socket connection has been closed by the remote peer, and the
      system is

      waiting for the local application to close its half of the connection.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '8'
      caption:
        tag: caption
        value: CLOSE-WAIT
  LAST_ACK:
    text: LAST_ACK
    description: 'The socket connection has been closed by the remote peer, the local
      application

      has closed its half of the connection, and the system is waiting for the remote

      peer to acknowledge the close.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '9'
      caption:
        tag: caption
        value: LAST-ACK
  LISTEN:
    text: LISTEN
    description: The socket is listening for incoming connections.
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '10'
      caption:
        tag: caption
        value: LISTEN
  CLOSING:
    text: CLOSING
    description: 'The socket connection has been closed by the local application and
      the remote

      peer simultaneously, and the remote peer has not yet acknowledged the close

      attempt of the local application.'
    annotations:
      ocsf_uid:
        tag: ocsf_uid
        value: '11'
      caption:
        tag: caption
        value: CLOSING