Skip to content

Add connect nodes to the activity tree - #523

Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
masterfrom
momar/add-connect-to-activity-tree
Sep 23, 2026
Merged

gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit into
masterfrom
momar/add-connect-to-activity-tree

Conversation

@mftoure

@mftoure mftoure commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

What does this PR do?

Adds a ConnectNode protobuf message to the CWS activity dump schema (activity_dump.proto), with fields for port, IP, protocol, matched rules, and node base. The new message is added as a repeated ConnectNode connect field on SocketNode, enabling serialization of outbound connection events in security profile activity trees.

Comment on lines +314 to +321
message ConnectNode {
repeated MatchedRule matched_rules = 3;
NodeBase node_base = 4;

uint32 port = 1;
string ip = 2;
uint32 protocol = 5;
}

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

as this one is the same as the BindNode, what about like deprecating the bind node and use the same object for both?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants