| topic: | connection |
|---|---|
| format: | {
"src": { // source details
"ip": <ip>,
"mac": <mac>,
"port": <string>, // Layer 4 (tcp/udp) port
"vlan": <string>, // vlan as seen by ELAN agent in the form <device>.<vlan_id>
},
"dst": { // destination details
"ip": <ip>,
"mac": <mac>,
"port": <string>, // Layer 4 (tcp/udp) port
"vlan": <string>, // vlan as seen by ELAN agent in the form <device>.<vlan_id>
},
"start": <UTC ISO8601 date>,
"transport": <string>, // transport protocol: udp, tcp, ...
"protocol": <string> // detected protocol
}
|
Sent when authorization is granted and when it is no longer valid.
| topic: | session/authorization |
|---|---|
| format: | {
"mac": <mac>,
"local_id": <int>, // local tracking id that will be used for updates (on termination of the authorization for example)
"till_disconnect": <bool>, // should authorization end on disconnect
"till": <UTC ISO8601 date>, // expiry time of authorization
"start": <UTC ISO8601 date>, // when it effectively started
"assign_vlan": <int>, // what vlan_id may have been assigned.
"allow_on": <vlan[]: []>, // list of vlans, in the form <device>.<vlan_id> the device is allowed on.
"bridge_to": <vlan[]: []>, // list of vlans, in the form <device>.<vlan_id> the device is allowed to access (assuming it is on an authorized vlan).
"end": <UTC ISO8601 date>, // when it effectively ended
"termination_reason": <string>, // can be 'revoked', 'expired', 'overriden', ...
}
|
If detected at the same time as a vlan or ip event, will not be sent as all information is included in those events.
| topic: | session/mac |
|---|
If detected at the same time as a ip event, will not be sent as all information is included in that events.
| topic: | session/vlan |
|---|
| topic: | session/ip |
|---|
| topic: | snmp |
|---|
| topic: | mac/fingerprint |
|---|
| topic: | mac/hostname |
|---|