34 lines
1.5 KiB
SQL
34 lines
1.5 KiB
SQL
-- portspoof_concentrator schema
|
|
|
|
CREATE TABLE IF NOT EXISTS nodes (
|
|
id INT UNSIGNED NOT NULL AUTO_INCREMENT,
|
|
name VARCHAR(100) NOT NULL,
|
|
api_url VARCHAR(255) NOT NULL COMMENT 'e.g. https://192.168.1.10:8080',
|
|
username VARCHAR(100) NOT NULL DEFAULT 'admin',
|
|
password VARCHAR(255) NOT NULL,
|
|
verify_ssl TINYINT(1) NOT NULL DEFAULT 0,
|
|
enabled TINYINT(1) NOT NULL DEFAULT 1,
|
|
last_fetched_at DATETIME NULL,
|
|
last_event_at DATETIME(6) NULL COMMENT 'timestamp of the newest ingested event from this node',
|
|
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
PRIMARY KEY (id),
|
|
UNIQUE KEY uq_api_url (api_url)
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|
|
|
|
CREATE TABLE IF NOT EXISTS connections (
|
|
id BIGINT UNSIGNED NOT NULL AUTO_INCREMENT,
|
|
node_id INT UNSIGNED NOT NULL,
|
|
occurred_at DATETIME(6) NOT NULL COMMENT 'timestamp from portspoof_py',
|
|
src_ip VARCHAR(45) NOT NULL,
|
|
src_port SMALLINT UNSIGNED NOT NULL,
|
|
dst_port SMALLINT UNSIGNED NOT NULL,
|
|
banner_hex TEXT NULL,
|
|
banner_len INT UNSIGNED NOT NULL DEFAULT 0,
|
|
created_at DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
|
|
PRIMARY KEY (id),
|
|
KEY idx_node_occurred (node_id, occurred_at),
|
|
KEY idx_src_ip (src_ip),
|
|
KEY idx_dst_port (dst_port),
|
|
CONSTRAINT fk_conn_node FOREIGN KEY (node_id) REFERENCES nodes (id) ON DELETE CASCADE
|
|
) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4;
|