Connect

class TH.Connection(logged_user: Optional[str], muid: Optional[str], datetime: pandas._libs.tslibs.timestamps.Timestamp, date: pandas._libs.tslibs.timestamps.Timestamp, filename: Optional[str], md5: Optional[str], remote_ip: Optional[int], remote_port: Optional[int], local_ip: Optional[str], local_port: Optional[str], protocol: Optional[str], direction: Optional[str], ipv4_status: Optional[str], pid: Optional[int], client_id: Optional[str], period: Optional[TH.Core.period.TimePeriod] = None)

Bases: Generic[TH.Core.THCollection.T]

Warning

This object is not intended to be created, but obtained through queries provided by upper level objects

Class representing a stablished connection
A connection can be instantiated by providing the following information:
  • muid: Machine unique identification code

  • logged_user: User that performs the connection

  • datetime: Date and time for the connection

  • date: Date for the connection

  • filename: File name that request the connection

  • md5: File hash (md5) that request the connection

  • remote_ip: The remote IP for this connection

  • remote_port: The remote port for this connection

  • local_ip: The local IP for this connection

  • local_port: The local port for this connection

  • direction: The connection direction

  • ipv4_status: The status for this connection

  • pid: This pid for the process that request the connection

  • period: The analysis period

  • client_id: The client identification code

get_ip_local()Any
Returns

Local IP address as an instance of IP

get_ip_remote()Any
Returns

Remote IP address as an instance of IP

get_machine()Any
Returns

The machine, as an instance of Machine affected by this connection

get_process()Any
Returns

The process, as an instance of Process affected by this connection

get_user()Any
Returns

The user, as an instance of User affected by this connection

property date
Returns

connection date and time

property direction
Returns

Incoming/Outgoing

property port_local
Returns

Local connection port number

property port_remote
Returns

Remote connection port number

property protocol
Returns

Communication protocol

property status
Returns

Connection status