ProcessInboundConnection

ProcessInboundConnectionView

class grapl_analyzerlib.nodes.process_inbound_network_connection.ProcessInboundConnectionView(dgraph_client: pydgraph.client.DgraphClient, node_key: str, uid: str, node_type: str, created_timestamp: Optional[int] = None, terminated_timestamp: Optional[int] = None, last_seen_timestamp: Optional[int] = None, port: Optional[int] = None, ip_address: Optional[str] = None, protocol: Optional[str] = None, bound_port: Optional[List[grapl_analyzerlib.nodes.ip_port_node.IpPortView]] = None, bound_by: Optional[List[grapl_analyzerlib.nodes.process_node.ProcessView]] = None)

Predicate	Type	Description
node_key	string	A unique identifier for this node
created_timestamp	int	Time the process inbound network connection was created (in millis-since-epoch).
terminated_timestamp	int	Time the process inbound network connection was terminated (in millis-since-epoch).
last_seen_timestamp	int	Time the process inbound network connection was last seen (in millis-since-epoch)
port	int	Port of the inbound process network connection.
ip_address	str	IP Address of the inbound process network connection.
protocol	int	Network protocol of the inbound process network connection.
bound_port	List[IpPort]	todo: documentation
bound_by	List[Process]	todo: documentation

get_created_timestamp() → Optional[int]

get_ip_address() → Optional[str]

get_last_seen_timestamp() → Optional[int]

get_node_type() → str

get_port() → Optional[int]

get_protocol() → Optional[str]

get_terminated_timestamp() → Optional[int]

ProcessInboundConnectionQuery

class grapl_analyzerlib.nodes.process_inbound_network_connection.ProcessInboundConnectionQuery(*args, **kwds)

with_bound_by(bound_by_query: Optional[IProcessQuery] = None) → NQ

with_bound_port(bound_port_query: Optional[IIpPortQuery] = None) → NQ

with_created_timestamp(eq: Optional[IntCmp] = None, gt: Optional[IntCmp] = None, lt: Optional[IntCmp] = None) → NQ

with_ip_address(eq: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, contains: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, ends_with: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, starts_with: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, regexp: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, distance: Optional[Tuple[Union[str, Not[str], List[str], List[Union[str, Not[str]]]], int]] = None) → NQ

with_last_seen_timestamp(eq: Optional[IntCmp] = None, gt: Optional[IntCmp] = None, lt: Optional[IntCmp] = None) → NQ

with_port(eq: Optional[IntCmp] = None, gt: Optional[IntCmp] = None, lt: Optional[IntCmp] = None) → NQ

with_protocol(eq: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, contains: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, ends_with: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, starts_with: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, regexp: Optional[Union[str, Not[str], List[str], List[Union[str, Not[str]]]]] = None, distance: Optional[Tuple[Union[str, Not[str], List[str], List[Union[str, Not[str]]]], int]] = None) → NQ

with_terminated_timestamp(eq: Optional[IntCmp] = None, gt: Optional[IntCmp] = None, lt: Optional[IntCmp] = None) → NQ