Options NetworkSocketObj:SocketOptionsType 0..1 The Options property specifies any particular options used by the socket. Protocol NetworkSocketObj:ProtocolType 0..1 The Protocol property specifies the type of IP layer protocol used by the socket. Remote_Address SocketAddressObj: SocketAddressObjectType 0..1 The Remote_Address property specifies the IP address and port for the socket on the remote machine. Type NetworkSocketObj:SocketType 0..1 The Type property specifies the type of socket being characterized. Socket_Descriptor cyboxCommon: NonNegativeIntegerObjectPropertyType 0..1 The Socket_Descriptor property specifies the socket file descriptor value associated with the socket. Negative values are not allowed. SocketOptionsType Class The SocketOptionsType class specifies any particular options used by the socket. If an option is supported only by specific address families or socket class, that's indicated in parentheses. The property table of the SocketOptionsType class is given in Table 32. Table . Properties of the SocketOptionsType class Name Type Multiplicity Description IP_MULTICAST_IF cyboxCommon: StringObjectPropertyType 0..1 The IP_MULTICAST_IF property is used to set the interface over outgoing multicast datagrams should be sent (AF_INET / SOCK_DGRAM or SOCK_RAW).
SO_LINGER cyboxCommon: UnsignedIntegerObjectPropertyType 0..1 The SO_LINGER property specifies if the system attempts delivery of or discards any buffered data when a close() is issued. SO_DONTLINGER basicDataTypes:Boolean 0..1 The SO_DONTLINGER property is the complement of SO_LINGER. SO_OOBINLINE basicDataTypes:Boolean 0..1 The SO_OOBINLINE property indicates whether out-of-band data is received inline with normal data (AF_INET or AF_INET6). SO_RCVBUF cyboxCommon: UnsignedIntegerObjectPropertyType 0..1 The SO_RCVBUF property specifies the size of the receive buffer. SO_GROUP_PRIORITY cyboxCommon: UnsignedIntegerObjectPropertyType 0..1 The SO_GROUP_PRIORITY property is used to set the relative priority for the socket in its group (Windows only). SO_REUSEADDR basicDataTypes:Boolean 0..1 The SO_REUSEADDR property indicates if the local socket address can be reused (AF_INET or AF_INET6 / SOCK_DGRAM or SOCK_RAW). SO_DEBUG basicDataTypes:Boolean 0..1 The SO_DEBUG property indicates if low-level debugging is active. SO_RCVTIMEO cyboxCommon: UnsignedIntegerObjectPropertyType 0..1 The SO_RCVTIMEO property specifies the receive timeout value. SO_SNDBUF cyboxCommon: UnsignedIntegerObjectPropertyType 0..1 The SO_SNDBUF property specifies the size of the send buffer.
IPPROTO_ICMP Indicates the ICMP protocol. IPPROTO_IGMP Indicates the IGMP protocol. BTHPROTO_RFCOMM Indicates the Bluetooth protocol. IPPROTO_TCP Indicates the TCP protocol. IPPROTO_UDP Indicates the UDP protocol. IPPROTO_ICMPV6 Indicates the ICMP v6 protocol. IPPROTO_RM Indicates the Reliable Multicasting protocol.
Acknowledgments The following individuals have participated in the creation of this specification and are gratefully acknowledged: Aetna David Crawford AIT Austrian Institute of Technology Roman Fiedler Florian Skopik Australia and New Zealand Banking Group (ANZ Bank) Dean Thompson Blue Coat Systems, Inc. Owen Johnson Bret Jordan Century Link Cory Kennedy CIRCL Alexandre Dulaunoy Andras Iklody Raphaël Vinot Citrix Systems Joey Peloquin Dell Will Urbanski Jeff Williams DTCC Dan Brown Gordon Hundley Chris Koutras EMC Robert Griffin Jeff Odom Ravi Sharda Financial Services Information Sharing and Analysis Center (FS-ISAC) David Eilken Ricard Fortinet Inc. Chow Airbus Group SAS Joerg Eschweiler Marcos Orallo Anomali Ryan Clough Wei Huang Hugh Njemanze Katie Pelusi Aaron Shelmire Trost Bank of America Alexander Foley Center for Internet Security (CIS) Sarah Kelley Point Software Technologies Ron Davidson Cisco Systems Syam Appala Ted Bedwell David McGrew Pavan Reddy Omar Santos Jyoti Verma Cyber Threat Intelligence Network, Inc. (CTIN) Doug DePeppe Jane Ginn Ben Othman DHS Office of Cybersecurity and Communications (CS&C) Richard Struse Marlon Taylor EclecticIQ Marko Dragoljevic Joep Gommers Sergey Polzunov
Charles Schmidt Emmanuelle Vargas-Gonzalez John Wunder National Council of (NCI) Scott Algeier Denise Anderson Josh Poster NEC Corporation Takahiro Kakumaru American Energy Standards Board David Darnell Object Management Group Cory Casanave Palo Alto Networks Vishaal Hariprasad Queralt, Inc. John Tolbert Resilient Systems, Inc. Ted Julian Securonix Igor Baikalov Siemens AG Grobauer Soltra John Anderson Aishwarya Asok Kumar Peter Ayasse Jeff Beekman Michael Butt Cynthia Camacho Aharon Chernin Mark Clancy Cotton Trey Darley Mark Davidson Paul Dion Daniel Dye Robert Hutto Raymond Keckler Ali Khan Chris Kiehl James Cabral National Security Agency Mike Boyle Jessica Fitzgerald-McKay New Context Services, Inc. John-Mark Gurney Christian Hunt James Moler Daniel Riedel Andrew Storms OASIS James Bryce Clark Robin Cover Chet Ensign Open Identity Exchange Don Thibeau PhishMe Inc. Josh Larkins Raytheon Company-SAS Daniel Wyschogrod Retail Cyber Intelligence Sharing Center Brian Engle Semper Fortis Solutions Joseph Brand Splunk Inc. Cedric LeRoux Luger Kathy Wang Greg Reaume Alan Steer Threat Intelligence Pty Ltd Tyron Miller Andrew van der Stock ThreatConnect, Inc. Wade Cole Andrew Pendergast Ben Schmoker Jason Spies TruSTAR Technology
Clayton Long Michael Pepin Natalie Suarez David Waters Benjamin Yates Symantec Corp. Curtis Kostrosky The Boeing Company Crystal Hayes ThreatQuotient, Inc. Ryan Trost U.S. Bank Mark Angel Brad Butts Fay Mona Magathan Yevgen Sautin US Department of Defense (DoD) James Bohling Eoghan Gary Katz Jeffrey Mates VeriSign Robert Coderre Kyle Maxwell Eric Osterweil Chris Roblee United Kingdom Cabinet Office Iain Brown Adam Cooper Mike McLellan O’Brien James Penman Howard Staple Chris Taylor Laurie Thomson Alastair Treharne Julian White Bethany Yates US Department of Homeland Security Evette Maynard-Noel Justin Stekervetz ViaSat, Inc. Lee Chieffalo Wilson Figueroa Andrew May Yaana Technologies, LLC Anthony Rutkowski The authors would also like to thank the larger CybOX Community for its input and help in reviewing this document.