blacklist

Documentation

Index

• type BlacklistedHostname
• type BlacklistedIP
• type ExtraDataResult
• type HostnameAnalysisInput
• type HostnameAnalysisOutput
• type IPAnalysisInput
• type IPAnalysisOutput
• type RitaBLResult

Types

type BlacklistedHostname

type BlacklistedHostname struct {
	Hostname          string   `bson:"hostname"`
	Connections       int      `bson:"conn"`
	UniqueConnections int      `bson:"uconn"`
	TotalBytes        int      `bson:"total_bytes"`
	Lists             []string `bson:"lists"`
	ConnectedHosts    []string `bson:",omitempty"`
}

BlacklistedHostname holds information on a blacklisted hostname and the summary statistics associated with the hosts behind the hostname

type BlacklistedIP

type BlacklistedIP struct {
	IP                string   `bson:"ip"`
	Connections       int      `bson:"conn"`
	UniqueConnections int      `bson:"uconn"`
	TotalBytes        int      `bson:"total_bytes"`
	Lists             []string `bson:"lists"`
	ConnectedHosts    []string `bson:",omitempty"`
}

BlacklistedIP holds information on a blacklisted IP address and the summary statistics on the host

type ExtraDataResult

type ExtraDataResult struct {
	Date    string `bson:"date"`    // Date IP was added to blacklist
	Host    string `bson:"host"`    // IP in question
	Country string `bson:"country"` // Reported country of origin for IP
	ID      int32  `bson:"id"`      // not sure yet, but its there
}

ExtraDataResult contains the structure of the extradata field in each document of the rita-bl ip collection

type HostnameAnalysisInput

type HostnameAnalysisInput struct {
	Host string   `bson:"host"` // hostname
	IPs  []string `bson:"ips"`  // associated ips
}

HostnameAnalysisInput contains the summary statistics of a unique hostname

type HostnameAnalysisOutput

type HostnameAnalysisOutput struct {
	Hostname          string   `bson:"hostname"`
	Connections       int      `bson:"conn"`
	UniqueConnections int      `bson:"uconn"`
	TotalBytes        int      `bson:"total_bytes"`
	AverageBytes      int      `bson:"avg_bytes"`
	Lists             []string `bson:"lists"`
	Targets           []string `bson:"targets"`
	IPs               []string `bson:"ips"` // associated ips
}

HostnameAnalysisOutput contains the summary statistics of a unique connection

type IPAnalysisInput

type IPAnalysisInput struct {
	IP                string   `bson:"ip"` // IP
	Connections       int      `bson:"conn_count"`
	UniqueConnections int      `bson:"uconn_count"`
	TotalBytes        int      `bson:"total_bytes"`
	AverageBytes      int      `bson:"avg_bytes"`
	Targets           []string `bson:"targets"`
}

IPAnalysisInput contains the summary statistics of a unique connection

type IPAnalysisOutput

type IPAnalysisOutput struct {
	IP                string   `bson:"ip"`
	Connections       int      `bson:"conn"`
	UniqueConnections int      `bson:"uconn"`
	TotalBytes        int      `bson:"total_bytes"`
	AverageBytes      int      `bson:"avg_bytes"`
	Lists             []string `bson:"lists"`
	Targets           []string `bson:"targets"`
}

IPAnalysisOutput contains the summary statistics of a unique connection

type RitaBLResult

type RitaBLResult struct {
	ID        bson.ObjectId   `bson:"_id,omitempty"` // Unique Connection ID
	Index     string          `bson:"index"`         // Potentially malicious IP
	List      string          `bson:"list"`          // which blacklist ip was listed on
	ExtraData ExtraDataResult `bson:"extradata"`     // Associated data
}

RitaBLResult contains the summary of a result from the "ip" collection of rita-bl