Node
The Node class identifies a system, asset, or network and its location.
digraph "Node" { graph [bb="0,0,1434,437.5", rankdir=LR ]; node [label="\N"]; "Node" [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#3daf3d" HREF="/idmef_parser/IODEFv2/Node.html" TITLE="The Node class identifies a system, asset, or network and its location. "><FONT FACE="Nimbus Sans L">Node</FONT></td> </tr>" %<tr><td BGCOLOR="#4cdb4c" HREF="/idmef_parser/IODEFv2/Node.html" TITLE="A free-form text description of the physical location of the node. This description may provide a more detailed description of where at the address specified by the PostalAddress class this node is found (e.g., room number, rack number, or slot number in a chassis)."><FONT FACE="Nimbus Sans L">[ML_STRING] Location (0..*)</FONT></td></tr>%</table>>, pos="97.5,85", shape=plaintext, width=2.7083]; DomainData [height=2.7361, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="The DomainData class describes a domain name and metadata associated with this domain. "><FONT FACE="Nimbus Sans L">DomainData</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="The domain name of a system."><FONT FACE="Nimbus Sans L">[STRING] Name (1..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="A timestamp of when the domain listed in the Name class was resolved."><FONT FACE="Nimbus Sans L">[DATETIME] DateDomainWasChecked (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="A timestamp of when domain listed in the Name class was registered."><FONT FACE="Nimbus Sans L">[DATETIME] RegistrationDate (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="A timestamp of when the domain listed in the Name class is set to expire."><FONT FACE="Nimbus Sans L">[DATETIME] ExpirationDate (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="Additional DNS records associated with this domain."><FONT FACE="Nimbus Sans L">[EXTENSION] RelatedDNS (0..*)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="A means by which to extend the system-status attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] system-status (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="A means by which to extend the domain-status attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] domain-status (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/DomainData.html" TITLE="See Section 3.3.2."><FONT FACE="Nimbus Sans L">[ID] observable-id (0..1)</FONT></td></tr>%</table>>, pos="400,234", shape=plaintext, width=4.0556]; "Node" -> DomainData [label="0..*", lp="224.5,158.5", pos="e,253.85,162.01 148.47,110.11 175.29,123.32 209.76,140.3 244.53,157.42"]; Address [height=0.5, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#3daf3d" HREF="/idmef_parser/IODEFv2/Address.html" TITLE="The Address class represents a hardware (Layer 2), network (Layer 3), or application (Layer 7) address. "><FONT FACE="Nimbus Sans L">Address</FONT></td> </tr>" %</table>>, pos="1030.5,110", shape=plaintext, width=1]; "Node" -> Address [label="0..*", lp="575.5,106.5", pos="e,994.21,109.03 195.15,87.616 393.91,92.942 838.97,104.87 983.9,108.75"]; PostalAddress [height=1.5694, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#52a3cc" HREF="/idmef_parser/IODEFv2/PostalAddress.html" TITLE="The PostalAddress class specifies a postal address and associated annotation. "><FONT FACE="Nimbus Sans L">PostalAddress</FONT></td> </tr>" %<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/PostalAddress.html" TITLE="A postal address."><FONT FACE="Nimbus Sans L">[POSTAL] PAddress (1..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/PostalAddress.html" TITLE="A free-form text description of the address."><FONT FACE="Nimbus Sans L">[ML_STRING] Description (0..*)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/PostalAddress.html" TITLE="Categorizes the type of address described in the PAddress class. These values are maintained in the "PostalAddress-type" IANA registry per Section 10.2."><FONT FACE="Nimbus Sans L">[ENUM] type (0..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/PostalAddress.html" TITLE="A means by which to extend the type attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] ext-type (0..1)</FONT></td></tr>%</table>>, pos="1320,64", shape=plaintext, width=2.9444]; "Node" -> PostalAddress [label="0..1", lp="730,71.5", pos="e,1213.8,64 195.13,74.777 254.33,69.436 331.43,64 400,64 400,64 400,64 1030.5,64 1087.5,64 1150.8,64 1203.7,64"]; Counter [height=0.5, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#cc6a51" HREF="/idmef_parser/IODEFv2/Counter.html" TITLE="The Counter class summarizes multiple occurrences of an event or conveys counts or rates of various features. "><FONT FACE="Nimbus Sans L">Counter</FONT></td> </tr>" %</table>>, pos="400,18", shape=plaintext, width=0.98611]; "Node" -> Counter [label="0..*", lp="224.5,42.5", pos="e,364.28,17.904 146.03,59.903 166.23,50.548 190.24,40.802 213,35 260.07,23.002 315.69,19.212 353.97,18.139"]; Nameservers [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/Nameservers.html" TITLE="The Nameservers class describes the nameservers associated with a given domain. "><FONT FACE="Nimbus Sans L">Nameservers</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/Nameservers.html" TITLE="The domain name of the nameserver."><FONT FACE="Nimbus Sans L">[STRING] Server (1..1)</FONT></td></tr>%</table>>, pos="730,167", shape=plaintext, width=2.2361]; DomainData -> Nameservers [label="0..*", lp="575.5,208.5", pos="e,649.11,183.42 546.18,204.32 577.8,197.9 610.35,191.29 639.1,185.45"]; DomainContacts [height=0.69444, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/DomainContacts.html" TITLE="The DomainContacts class describes the contact information for a given domain provided either by the registrar or through a whois query. "><FONT FACE="Nimbus Sans L">DomainContacts</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/DomainContacts.html" TITLE="A domain name already cited in this document or through previous exchange that contains the identical contact information as the domain name in question. The domain contact information associated with this domain should be used instead of an explicit definition with the Contact class."><FONT FACE="Nimbus Sans L">[STRING] SameDomainContact (0..1)</FONT></td></tr>%</table>>, pos="730,242", shape=plaintext, width=3.4722]; DomainData -> DomainContacts [label="0..1", lp="575.5,245.5", pos="e,604.84,238.97 546.18,237.54 562.24,237.93 578.53,238.33 594.44,238.71"]; Nameservers -> Address [label="1..*", lp="884.5,146.5", pos="e,994.31,116.86 810.53,151.73 866.13,141.18 938.09,127.53 984.29,118.77"]; Contact [height=3.0278, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#52a3cc" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="The Contact class describes contact information for organizations and personnel involved in the incident. This class allows for the naming of the involved party, specifying contact information for them, and identifying their role in the incident. "><FONT FACE="Nimbus Sans L">Contact</FONT></td> </tr>" %<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="The name of the contact. The contact may either be an organization or a person. The type attribute disambiguates the semantics."><FONT FACE="Nimbus Sans L">[ML_STRING] ContactName (0..*)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="The title for the individual named in the ContactName."><FONT FACE="Nimbus Sans L">[ML_STRING] ContactTitle (0..*)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="A free-form text description of the contact."><FONT FACE="Nimbus Sans L">[ML_STRING] Description (0..*)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="The timezone in which the contact resides."><FONT FACE="Nimbus Sans L">[TIMEZONE] Timezone (0..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="A mechanism by which to extend the data model."><FONT FACE="Nimbus Sans L">[EXTENSION] AdditionalData (0..*)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="A means by which to extend the role attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] role (0..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="A means by which to extend the type attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] type (0..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="See Section 3.3.1."><FONT FACE="Nimbus Sans L">[ENUM] restriction (0..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Contact.html" TITLE="A means by which to extend the restriction attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] ext-restriction (0..1)</FONT></td></tr>%</table>>, pos="1030.5,255", shape=plaintext, width=3.2361]; DomainContacts -> Contact [label="1..*", lp="884.5,255.5", pos="e,913.61,249.94 855.26,247.42 871.12,248.1 887.35,248.81 903.23,249.49"]; Contact -> Contact [label="0..*", lp="1030.5,389.5", pos="e,1052.8,364.29 1008.2,364.29 1012.7,375.12 1020.1,382 1030.5,382 1037.7,382 1043.4,378.75 1047.8,373.19"]; RegistryHandle [height=0.5, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#52a3cc" HREF="/idmef_parser/IODEFv2/RegistryHandle.html" TITLE="The RegistryHandle class represents a handle into an Internet registry or community-specific database. "><FONT FACE="Nimbus Sans L">RegistryHandle</FONT></td> </tr>" %</table>>, pos="1320,288", shape=plaintext, width=1.5972]; Contact -> RegistryHandle [label="0..*", lp="1176.5,279.5", pos="e,1262.3,281.42 1147.4,268.33 1182.9,272.38 1220.8,276.69 1252,280.25"]; Contact -> PostalAddress [label="0..*", lp="1176.5,163.5", pos="e,1219.3,120.67 1147.3,168.56 1166.7,154.98 1186.7,141.36 1206,129 1207.5,128.05 1209,127.1 1210.5,126.14"]; Email [height=1.5694, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#52a3cc" HREF="/idmef_parser/IODEFv2/Email.html" TITLE="The Email class specifies an email address and associated annotation. "><FONT FACE="Nimbus Sans L">Email</FONT></td> </tr>" %<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Email.html" TITLE="An email address."><FONT FACE="Nimbus Sans L">[EMAIL] EmailTo (1..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Email.html" TITLE="A free-form text description of the email address."><FONT FACE="Nimbus Sans L">[ML_STRING] Description (0..*)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Email.html" TITLE="Categorizes the type of email address described in the EmailTo class. These values are maintained in the "Email- type" IANA registry per Section 10.2."><FONT FACE="Nimbus Sans L">[ENUM] type (0..1)</FONT></td></tr>%<tr><td BGCOLOR="#66CCFF" HREF="/idmef_parser/IODEFv2/Email.html" TITLE="A means by which to extend the type attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] ext-type (0..1)</FONT></td></tr>%</table>>, pos="1320,195", shape=plaintext, width=2.9444]; Contact -> Email [label="0..*", lp="1176.5,233.5", pos="e,1213.9,217 1147.4,230.77 1166,226.91 1185.3,222.92 1203.9,219.06"]; Telephone [height=1.5694, label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr> <td BGCOLOR="#CECECE" HREF="/idmef_parser/IODEFv2/Telephone.html" TITLE="The Telephone class describes a telephone number and associated annotation. "><FONT FACE="Nimbus Sans L">Telephone</FONT></td> </tr>" %<tr><td HREF="/idmef_parser/IODEFv2/Telephone.html" TITLE="A telephone number."><FONT FACE="Nimbus Sans L">[PHONE] TelephoneNumber (1..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Telephone.html" TITLE="A free-form text description of the phone number."><FONT FACE="Nimbus Sans L">[ML_STRING] Description (0..*)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Telephone.html" TITLE="Categorizes the type of telephone number described in the TelephoneNumber class. These values are maintained in the "Telephone-type" IANA registry per Section 10.2."><FONT FACE="Nimbus Sans L">[ENUM] type (0..1)</FONT></td></tr>%<tr><td HREF="/idmef_parser/IODEFv2/Telephone.html" TITLE="A means by which to extend the type attribute. See Section 5.1.1."><FONT FACE="Nimbus Sans L">[STRING] ext-type (0..1)</FONT></td></tr>%</table>>, pos="1320,381", shape=plaintext, width=3.1667]; Contact -> Telephone [label="0..*", lp="1176.5,328.5", pos="e,1205.9,331.36 1147.4,305.89 1163.6,312.91 1180.2,320.14 1196.4,327.21"]; }
Aggregates
DomainData (0..*)
The domain (DNS) information associated with this node. If an Address is not provided, at least one DomainData MUST be specified. See Section 3.19.
Address (0..*)
The hardware, network, or application address of the node. If a DomainData is not provided, at least one Address MUST be specified. See Section 3.18.1.
PostalAddress (0..1)
The postal address of the node.
Location (0..*)
A free-form text description of the physical location of the node. This description may provide a more detailed description of where at the address specified by the PostalAddress class this node is found (e.g., room number, rack number, or slot number in a chassis).
Counter (0..*)
A counter with which to summarize properties of this host or network. See Section 3.18.3.