Counter

The Counter class summarize multiple occurrences of some event, or conveys counts or rates on various features (e.g., packets, sessions, events). 

digraph Counter {
	graph [bb="0,0,214,113",
		rankdir=LR
	];
	node [label="\N"];
	Counter	 [height=1.5694,
		label=<<table BORDER="0" CELLBORDER="1" CELLSPACING="0"> <tr > <td BGCOLOR="#993016" HREF="/idmef_parser/IODEF/Counter.html" TITLE="The Counter class summarize multiple occurrences of some event, or conveys counts or rates on various features (e.g., packets, sessions, events). ">Counter</td> </tr>" %<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IODEF/Counter.html" TITLE="Specifies the units of the element content.">[ENUM] type (Required) </td></tr>%<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IODEF/Counter.html" TITLE="A means by which to extend the type attribute. See Section 5.1.">[STRING] ext-type (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IODEF/Counter.html" TITLE="If present, the Counter class represents a rate rather than a count over the entire event.  In that case, this attribute specifies the denominator of the rate (where the type attribute specified the nominator).  The possible values of this attribute are defined in Section 3.10.2">[ENUM] duration (Optional) </td></tr>%<tr><td BGCOLOR="#FF5024"  HREF="/idmef_parser/IODEF/Counter.html" TITLE="A means by which to extend the duration attribute.  See Section 5.1.">[STRING] ext-duration (Optional) </td></tr>%</table>>,
		pos="107,56.5",
		shape=plaintext,
		width=2.9722];
}

Attributes

type (Required)

Specifies the units of the element content.
Rank Keyword Description
1 byte Count of bytes.
2 packet Count of packets.
3 flow Count of flow (e.g., NetFlow records).
4 session Count of sessions.
5 alert Count of notifications generated by another system (e.g., IDS or SIM).
6 message Count of messages (e.g., mail messages).
7 event Count of events.
8 host Count of hosts.
9 site Count of site.
10 organization Count of organizations.
11 ext-value An escape value used to extend this attribute. See Section 5.1.

ext-type (Optional)

A means by which to extend the type attribute. See Section 5.1.

duration (Optional)

If present, the Counter class represents a rate rather than a count over the entire event. In that case, this attribute specifies the denominator of the rate (where the type attribute specified the nominator). The possible values of this attribute are defined in Section 3.10.2

ext-duration (Optional)

A means by which to extend the duration attribute. See Section 5.1.

IDMEF

IODEF