srum-core 0.1.0

SRUM (System Resource Usage Monitor) record type definitions
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24

//! Network connectivity record — L2 connection sessions per process.
//!
//! Source table: `{DD6636C4-8929-4683-974E-22C046A43763}` in SRUDB.dat.

use chrono::{DateTime, Utc};
use serde::{Deserialize, Serialize};

/// One SRUM network connectivity record: a process's L2 connection session.
///
/// Forensic value: maps processes to specific network profiles (`WiFi` SSIDs,
/// VPN adapters) and their connection durations.
#[derive(Debug, Clone, Serialize, Deserialize)]
pub struct NetworkConnectivityRecord {
    /// Integer ID of the application (look up in [`crate::IdMapEntry`]).
    pub app_id: i32,
    /// Integer ID of the user account (look up in [`crate::IdMapEntry`]).
    pub user_id: i32,
    /// UTC timestamp of the measurement interval start.
    pub timestamp: DateTime<Utc>,
    /// L2 profile ID — look up in `SruDbIdMapTable` for profile name.
    pub profile_id: i32,
    /// Seconds the connection was active in this interval.
    pub connected_time: u64,
}