Host network listeners list

get https://{sandfly-api-host}/v4/hosts/{host_id}/info/listeners

Get network listeners list for host.

Responses

Response body

object

data

array of objects

Network listeners list for this host, current as of the date indicated in the results_date property. Will be an empty array if there are no relevant recon sandfly results for this host.

data

object

process_id

integer

required

PID of the process bound to the listening port.

process_name

string

required

Name of the process bound to the listening port.

process_parent_id

integer

required

Parent process ID.

process_path

string

required

Path of the process binary.

process_user

string

required

Username of the process owner.

network_type

string

required

Network type the listener is bound to.

tcp tcp6 udp udp6 icmp icmp6 raw raw6 sctp

network_listen_port

integer

required

The port number of the listener.

network_listen_address

string

required

The address the process is listening on.

result_id

string

required

Result ID of the result this information came from.

result_sequence_id

int64

required

Result Sequence ID of the result this information came from.

result_status

string

required

alert pass error

containerized

boolean

required

Indicates if this information came from a container.

result_sandfly

string

required

Name of sandfly associated with this result.

results_date

date-time | null

required

If data is present, the date as of which the data is current (e.g. the most recent scan date of the relevant recon sandfly on this host).

source_sandflies

array of strings

required

The list of sandflies that this data is derived from.

source_sandflies*

status

string

required

Status of the data source. 'ok' indicates the sandflies are active and results are present for the host, even if no results are used for this API response after filtering. 'missing_results' means that even though the necessary sandflies are active, there were no results in the database for one or more of the necessary sandflies (if there hasn't been a recent scan of the host, the results may have expired and been deleted). 'sandfly_inactive' means one or more sandflies that provide data for this API call are inactive.

ok missing_results sandfly_inactive

Language

Credentials

Bearer

JWT

URL


xxxxxxxxxx
1
curl --request GET \
2
     --url https://sandfly-api-host/v4/hosts/host_id/info/listeners \
3
     --header 'accept: application/json'

Click Try It! to start a request and see the response here! Or choose an example:

application/json

200Host network listeners list retrieved

400Error with get request.

404Host not found.

defaultUnexpected error