Question:
When I save the connection log to a csv file and open the csv file, the connection type and action are number coded. How do I know the meaning of the number?
Answer:
Here is the connection type codes:
0 - UNKNOWN
1 - SAMBA
2 - FTP
3 - HTTP
4 - NFS
5 - AFP
6 - TELNET
7 - SSH
8 - ISCSI
The action codes:
0 - UNKNOWN
1 - DEL
2 - READ
3 - WRITE
4 - OPEN
5 - MKDIR
6 - NFSMOUNT_SUCC
7 - NFSMOUNT_FAIL
8 - RENAME
9 - LOGIN_FAIL
10 - LOGIN_SUCC
11 - LOGOUT
12 - NFSUMOUNT
13 - COPY
14 - MOVE
15 - ADD
Comments