Package rst.monitoring

Not documented

Messages

• ProcessAnomaly

clearer: should be made invisible via css

Message ProcessAnomaly

class rst.monitoring.ProcessAnomaly

Monitoring-relevant cues about a system process.

Code author: Johannes Wienke <jwienke@techfak.uni-bielefeld.de>

Todo

this message requires serious abstraction once the

functionality of all cue providers is understood. Do not move it to stable!

A message to describe a detected anomaly inside a system-level process.

Code author: Johannes Wienke <jwienke@techfak.uni-bielefeld.de>

Todo

this message requires serious abstraction once the

functionality of all cue providers is understood. Do not move it to stable!

pid

Type:UINT32

PID of the program.

name

Type:OCTET-VECTOR

Name of the program (argv[0]).

host_name

Type:OCTET-VECTOR

Name of the host the program is running on.

reasons

Type:array of ASCII-STRING

A use-case-dependent list of reasons for the detection of this anomaly.

Download this file

message ProcessAnomaly {

    /**
     * PID of the program.
     */
    required uint32 pid = 1000;

    /**
     * Name of the program (argv[0]).
     */
    optional bytes name = 1001;

    /**
     * Name of the host the program is running on.
     */
    optional bytes host_name = 1002;

    /**
     * A use-case-dependent list of reasons for the detection of this anomaly.
     */
    repeated string reasons = 1;

}