Heads up! These docs are for STIX 1.1.1, which is not the latest version (1.2). View the latest!

NetworkSocketObjectTypeNetwork Socket Object Schema

The NetworkSocketObjectType is intended to characterize network sockets.


Field Name Type Description
@object_referenceoptional QName

The object_reference field specifies a unique ID reference to an Object defined elsewhere. This construct allows for the re-use of the defined Properties of one Object within another, without the need to embed the full Object in the location from which it is being referenced. Thus, this ID reference is intended to resolve to the Properties of the Object that it points to.

Custom_Properties0..1 CustomPropertiesType

The Custom_Properties construct is optional and enables the specification of a set of custom Object Properties that may not be defined in existing Properties schemas.

@is_blockingoptional boolean

The is_blocking field specifies whether or not the socket is in blocking mode.

@is_listeningoptional boolean

The is_listening field specifies whether or not the socket is in listening mode.

Address_Family0..1 AddressFamilyType

The Address_Family field specifies the address family (AF_*) that the socket is configured for.

Domain0..1 DomainFamilyType

The Domain field specifies the communication domain (PF_*) of the socket.

Local_Address0..1 SocketAddressObjectType

The Local_Address field specifies the IP address and port for the socket on the local machine.

Options0..1 SocketOptionsType

The Options field specifies any particular options used by the socket.

Protocol0..1 ProtocolType

The Protocol field specifies the type of IP layer protocol used by the socket.

Remote_Address0..1 SocketAddressObjectType

The Remote_Address field specifies the IP address and port for the socket on the remote machine.

Type0..1 SocketType

The Type field specifies the type of socket being characterized.

Socket_Descriptor0..1 NonNegativeIntegerObjectPropertyType

The Socket_Descriptor field specifies the socket file descriptor value associated with the socket. Negative values are not allowed.