Network Blackbox

Download 53
Last updated Jan 1, 2024

nbb-sessions

Search sessions from Quad Miners Network Blackbox.

nbb-sessions [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss]
profile=PROFILE
The identifier of Network Blackbox connect profile
duration=NUM{mon|w|d|h|m|s}
Scan only recent sessions. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example, 10s means data from 10 seconds earlier.
from=yyyyMMddHHmmss
Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
to=yyyyMMddHHmmss
End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.

Output Fields

FieldTypeNameDescription
profileStringConnect profileThe identifier of Network Blackbox connect profile
device_idIntegerDevice ID
start_timeDateStart timeSession start time
end_timeDateEnd timeSession end time
hashLongHashSession identifier
src_ipIP addressSource IP
src_portIntegerSource port
dst_ipIP addressDestination IP
dst_portIntegerDestination port
protocolStringProtocol
src_countryStringSource country
dst_countryStringDestination country
http_methodStringHTTP method
urlStringURL
streamIntegerStream count
sent_bytesLongSent bytes
rcvd_bytesLongReceived bytes
sent_pktsLongSent packets
rcvd_pktsLongReceived packets
app_categoryStringApp category
app1StringApp1
app2StringApp2
is_sessionBoolIs session