Symantec 10521146 Administration Guide - Page 336

336 SQL reference Using MySQL tables Table B-4 Field Name hdrInfo ident ifID ifName incidentID mappedType module nodeName nodeNum outcome pldEnd pldStt poolID poolName prot pyld MySQL Event Table Type Description Notes text varchar(33) varchar(33) varchar(65) varchar(33) varchar(128) varchar(33) varchar(255) integer integer integer integer varchar(33) varchar(41) varchar(33) text Indicates the TCP/IP header information OR full Base-64 encoded. packet. Indicates the unique identifier for each type of message. Indicates the ID of the interface (interfaceID from the topology table) where this event was detected. Used internally Indicates the name of the interface where this event was detected. For example: hme0 Indicates a unique string identifier that identifies the incident to which this event belongs. Indicates the mapped type of the event/incident corresponding to type Indicates the module name where this event was Used internally generated. Indicates the hostname of the software or appliance node, corresponding to nodeNum Indicates the Network Security node number where the incident originated. Indicates that the event was blocked if integer is 1. Identifies the ending index of the region in payload where the anomaly was detected. Identifies the starting index of the region in payload where the anomaly was detected. Indicates the ID of the interface group where this Used internally event was detected. Indicates the name of the interface group where this event was detected. Indicates the protocol, either IP, TCP, UDP, or ICMP. Indicates the portion of the packet that triggered Base-64 encoded this event.