Symantec 10521146 Administration Guide - Page 330

330 SQL reference Using Oracle tables Table B-2 Field Name flowcookie fmly guiTxt hdrInfo ident ifID ifName incidentID mappedType module nodeName nodeNum outcome pldEnd pldStt Oracle Event Table Type Description Notes varchar(1025) varchar(33) varchar(65) varchar(2727) varchar(33) varchar(33) varchar(33) varchar(33) varchar(128) varchar(33) varchar(255) integer integer integer integer Indicates the flowcookie. Indicates the event family. For class=sniffer events, this is integrity or availability. For class=generic events, this is fnotice or notice Deprecated. Indicates the TCP/IP header information OR full Base-64 encoded. packet. Indicates the unique identifier for each type of message. Indicates the ID of the interface (interfaceID from topology table) where this event was detected. Used internally Indicates the name of the interface where this event was detected. For example: hme0 Indicates a unique string identifier that identifies the incident to which this event belongs. Indicates the mapped type of the event/incident corresponding to type Indicates the module name where this event was Used internally generated. Indicates the hostname of the software or appliance node, corresponding to nodeNum. Indicates the Network Security node number where the incident originated. Indicates that the event was blocked if integer is 1. Identifies the ending index of the region in payload where the anomaly was detected. Identifies the starting index of the region in payload where the anomaly was detected.