schemas/samples/CybOX_Network_Connection_HTTP_Instance.xml at master · CybOXProject/schemas · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
<?xml version="1.0" encoding="UTF-8"?>
<cybox:Observables xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns:cybox="http://docs.oasis-open.org/cti/ns/cybox/core-2"
    xmlns:cyboxCommon="http://docs.oasis-open.org/cti/ns/cybox/common-2"
    xmlns:AddressObj="http://docs.oasis-open.org/cti/ns/cybox/objects/address-2"
    xmlns:PortObj="http://docs.oasis-open.org/cti/ns/cybox/objects/port-2"
    xmlns:SocketAddressObj="http://docs.oasis-open.org/cti/ns/cybox/objects/socket-address-1"
    xmlns:NetworkConnectionObj="http://docs.oasis-open.org/cti/ns/cybox/objects/network-connection-2"
    xmlns:HTTPSessionObj="http://docs.oasis-open.org/cti/ns/cybox/objects/http-session-2"
    xmlns:example="http://example.com/"
    xsi:schemaLocation="
    http://docs.oasis-open.org/cti/ns/cybox/core-2 ../core.xsd
    http://docs.oasis-open.org/cti/ns/cybox/objects/network-connection-2 ../objects/Network_Connection_Object.xsd"
    cybox_major_version="2" cybox_minor_version="1" cybox_update_version="1">
    <cybox:Observable id="example:Observable-1b427720-98d7-4735-b125-754c7e08f285">
        <cybox:Description>
            This Observable specifies an example instance of a Network Connection Object with an HTTP Session.
        </cybox:Description>
        <cybox:Object id="example:Object-d1fdd983-530b-489f-9ab8-ed3cb5212c35">
            <cybox:Properties xsi:type="NetworkConnectionObj:NetworkConnectionObjectType">
                <NetworkConnectionObj:Layer3_Protocol datatype="string">IPv4</NetworkConnectionObj:Layer3_Protocol>
                <NetworkConnectionObj:Layer4_Protocol datatype="string">TCP</NetworkConnectionObj:Layer4_Protocol>
                <NetworkConnectionObj:Layer7_Protocol datatype="string">HTTP</NetworkConnectionObj:Layer7_Protocol>
                <NetworkConnectionObj:Source_Socket_Address>
                    <SocketAddressObj:IP_Address>
                        <AddressObj:Address_Value>192.168.1.15</AddressObj:Address_Value>
                    </SocketAddressObj:IP_Address>
                    <SocketAddressObj:Port>
                        <PortObj:Port_Value>5525</PortObj:Port_Value>
                    </SocketAddressObj:Port>
                </NetworkConnectionObj:Source_Socket_Address>
                <NetworkConnectionObj:Destination_Socket_Address>
                    <SocketAddressObj:IP_Address>
                        <AddressObj:Address_Value>198.49.123.10</AddressObj:Address_Value>
                    </SocketAddressObj:IP_Address>
                    <SocketAddressObj:Port>
                        <PortObj:Port_Value>80</PortObj:Port_Value>
                    </SocketAddressObj:Port>
                </NetworkConnectionObj:Destination_Socket_Address>
                <NetworkConnectionObj:Layer7_Connections>
                    <NetworkConnectionObj:HTTP_Session>
                        <HTTPSessionObj:HTTP_Request_Response>
                            <HTTPSessionObj:HTTP_Client_Request>
                                <HTTPSessionObj:HTTP_Request_Line>
                                    <HTTPSessionObj:HTTP_Method datatype="string">GET</HTTPSessionObj:HTTP_Method>
                                    <HTTPSessionObj:Version>HTTP/1.1</HTTPSessionObj:Version>
                                </HTTPSessionObj:HTTP_Request_Line>
                                <HTTPSessionObj:HTTP_Request_Header>
                                    <HTTPSessionObj:Parsed_Header>
                                        <HTTPSessionObj:Accept_Encoding>gzip</HTTPSessionObj:Accept_Encoding>
                                        <HTTPSessionObj:Connection>close</HTTPSessionObj:Connection>
                                    </HTTPSessionObj:Parsed_Header>
                                </HTTPSessionObj:HTTP_Request_Header>
                            </HTTPSessionObj:HTTP_Client_Request>
                            <HTTPSessionObj:HTTP_Server_Response>
                                <HTTPSessionObj:HTTP_Status_Line>
                                    <HTTPSessionObj:Version>HTTP/1.1</HTTPSessionObj:Version>
                                    <HTTPSessionObj:Status_Code>200</HTTPSessionObj:Status_Code>
                                    <HTTPSessionObj:Reason_Phrase>OK</HTTPSessionObj:Reason_Phrase>
                                </HTTPSessionObj:HTTP_Status_Line>
                                <HTTPSessionObj:HTTP_Response_Header>
                                    <HTTPSessionObj:Parsed_Header>
                                        <HTTPSessionObj:Server>Apache</HTTPSessionObj:Server>
                                        <HTTPSessionObj:Transfer_Encoding>chunked</HTTPSessionObj:Transfer_Encoding>
                                    </HTTPSessionObj:Parsed_Header>
                                </HTTPSessionObj:HTTP_Response_Header>
                            </HTTPSessionObj:HTTP_Server_Response>
                        </HTTPSessionObj:HTTP_Request_Response>
                    </NetworkConnectionObj:HTTP_Session>
                </NetworkConnectionObj:Layer7_Connections>
            </cybox:Properties>
        </cybox:Object>
    </cybox:Observable>
</cybox:Observables>