device_response


Description

This table contains information for all the responses a device has responded along with protocol and scantype it responded to. It is parent table that is partitioned over zone schema. A device can have as many records as received Unique responses for each profiledata type in this table. One device can have zero to many responses. If a device is discovered through multiple scan types and protocols, it will have multiple entries in device_response table. Likewise, if a device is discovered as layer 2 host or as an ARP table entries or interface host or addresses, it might not have any device_response associated with it.

Columns

Column Type Size Nulls Auto Default Children Parents Comments
id serial 10 √ nextval('zone.device_response_id_seq'::regclass)

Unique identifier for device response record
zone_id int4 10 null
zone.id fk_device_response_zone R

Zone Id of a device_response record. It maps to zone.id
collector_id int4 10 null
collector.id fk_device_response_collector R

Collector Id of a device this record belongs to. It maps to system.collector.id
device_id int4 10 null
device.id fk_device_response_device C

Id of a device this record belongs to. It maps to device.id
protocol_id int4 10 null
protocol.id fk_device_response_protocol R

Protocol Id of a device this record belongs to. It maps to zone.protocol.id
scantype_id int4 10 null
scantype.id fk_device_response_scantype R

Scan Type Id of a device this record belongs to. It maps to zone.scantype.id
ports _int4 10 √ null

List of ports (if any) that constituted this response. For example, for cifs response, it will be set to 445, for host response coming from dns, it will be set to 53. This column is only populated for httpDetails, hostDiscovery and cifs. Device->response->ports get normalized in this column. It contains all the list of ports a device has received response from for a given scan type and protocol at any given point in time.
time timestamp 29,6 √ null

Time when a device response was received for given scan type and protocol.

Table contained 0 rows

Indexes

Constraint Name Type Sort Column(s)
pk_device_response Primary key Asc id
idx_device_response_collector_id Performance Asc collector_id
idx_device_response_devid Performance Asc device_id
idx_device_response_devst Performance Asc/Asc scantype_id + device_id
idx_device_response_protocol_id Performance Asc protocol_id
idx_device_response_scantype_id Performance Asc scantype_id
uk_device_response Must be unique Asc/Asc/Asc/Asc/Asc zone_id + device_id + protocol_id + collector_id + scantype_id

Relationships

Close relationships within degrees of separation