urls Table

The following table describes the schema of the urls_* SQL tables.

Field Type Description

id

unsigned 32-bit integer

This id references an id in the corresponding parent flows_* table. There can be multiple url records referencing the same flowthe network traffic between network objects id, so this field is not unique.

url

string

The URL (host) extracted from the HTTP header of the parent flow.

packets_in

unsigned 64-bit integer

The number of inbound (WANWide Area Network -> LANLocal area network) packets recorded for this URL over the sample period.

bytes_in

unsigned 64-bit integer

The number of inbound (WAN -> LAN) bytes recorded for this URL over the sample period.

packets_out

unsigned 64-bit integer

The number of outbound (LAN -> WAN) packets recorded for this URL over the sample period.

bytes_out

unsigned 64-bit integer

The number of outbound (LAN -> WAN) bytes recorded for this URL over the sample period.

max_tput_in

unsigned 64-bit integer

The maximum inbound (WAN -> LAN) throughput observed for this URL during the sample period.

max_tput_out

unsigned 64-bit integer

The maximum outbound (LAN -> WAN) throughput observed for this URL during the sample period.

intervals_in

unsigned 16-bit integer

The number of 10 second intervals there was inbound (WAN -> LAN) traffic observed for this URL during the sample period.

intervals_out

unsigned 16-bit integer

The number of 10 second intervals there was outbound (LAN -> WAN) traffic observed for this URL during the sample period.

NOTE

IDs are only consistent across the same sample periods. For example, IDs in the urls_hourly table only reference IDs in the flows_hourly table.