connection event NXQL (classic)

A connection is a TCP connection or a UDP packet. Several identical TCP connections or UDP packets are merged when in close succession.

NameTypeOperating systemsProperties

cardinality

integer

Windows | macOS

Number of underlying connections, consolidated over time

destination_ip_address

ip_address

Windows | macOS

IP address of the connection destination

device_ip_address

ip_address

Windows | macOS

IP address of the connection source

duration

millisecond

Windows | macOS

The time between the start of the first connection and the end of the last underlying connection.

end_time

datetime

Windows | macOS

Connection end time, corresponding to the moment when the last underlying connection was closed.

id

identifier

Windows | macOS

Unique connection identifier

incoming_bitrate

bps

Windows | macOS

NU

Average incoming bitrate of all underlying connections, consolidated over time

incoming_traffic

byte

Windows | macOS

Incoming traffic

network_interface_iana_code

string

Windows | macOS

(beta) Indicates the network interface IANA code.

network_interface_index

integer

Windows | macOS

(beta) Indicates the network interface index.

network_interface_type

enum

Windows | macOS

(beta) Indicates the network interface type. Possible values are:

  • wifi

  • ethernet

  • mobile

  • other

  • unknown: the Collector is not supporting interface type.

network_response_time

microsecond

Windows | macOS

TCP connection establishment time

outgoing_bitrate

bps

Windows | macOS

NU

Average outgoing bitrate of all underlying connections, consolidated over time

outgoing_traffic

byte

Windows | macOS

Outgoing traffic

start_time

datetime

Windows | macOS

Connection start time

status

enum

Windows | macOS

Status of the connection (established, rejected, no service, no host, closed)

type

enum

Windows | macOS

Type of the connection (tcp, udp)

Last updated