SMF 119 fields of the UDP socket close record (subtype 10)

SMF119UD_UCConnID

(Integer)

ConnectionID

UDP connection id

SMF119UD_UCCTime

Close

end

Socket close time

SMF119UD_UCInBytes

(Integer)

InBytes

in

Inbound bytes

SMF119UD_UCInDgrams

(Integer)

In

Inbound datagrams

SMF119UD_UCLIP

(Regular Expression)

LocIP

c6a3

Local IP address (IPv6)

SMF119UD_UCLIP_L

(Regular Expression)

dst

Local IP address (IPv6)

Primarily intended for use with SIEMType(LEEF).

SMF119UD_UCLIP_V4

(Regular Expression)

LocIP

c6a3

Local IP address (IPv6)

Formatted as an IPv4 address or 255.255.255.255.

SMF119UD_UCLPort

(Integer)

LocPort

dpt

Local port

SMF119UD_UCOTime

Open

rt

Socket open time

SMF119UD_UCOutBytes

(Integer)

OutBytes

out

Outbound bytes

SMF119UD_UCOutDgrams

(Integer)

Out

Outbound datagrams

SMF119UD_UCReason

CloseReason

Reasion For Close: X'01' ('Normal Close'); X'02' ('Abnormal Close')

SMF119UD_UCRIP

(Regular Expression)

RemtIP

c6a2

Remote IP address (IPv6) of last datagram received

SMF119UD_UCRIP_L

(Regular Expression)

src

Remote IP address (IPv6) of last datagram received

Primarily intended for use with SIEMType(LEEF).

SMF119UD_UCRIP_V4

(Regular Expression)

RemtIP

c6a2

Remote IP address (IPv6) of last datagram received

Formatted as an IPv4 address or 255.255.255.255.

SMF119UD_UCRName

(EGNX)

ResName

UDP socket resource name

SMF119UD_UCRPort

(Integer)

RemtPort

spt

Remote port of last datagram received

SMF119UD_UCSubTask

SubT

Subtask name

SMF119UD_UCType

SockType

Socket type: X'01' ('Standard'); X'02' ('Enterprise Extender')