Struct NetworkUsageRecord 

pub struct NetworkUsageRecord {
    pub app_id: i32,
    pub user_id: i32,
    pub timestamp: DateTime<Utc>,
    pub bytes_sent: u64,
    pub bytes_recv: u64,
    pub auto_inc_id: u32,
}

One SRUM network usage record: the bytes a process sent/received in a single ~1-hour measurement interval.

Forensic value: proves exfiltration volumes even after the process is deleted.

Fields

app_id: i32

Integer ID of the application (look up in crate::IdMapEntry).

user_id: i32

Integer ID of the user account (look up in crate::IdMapEntry).

timestamp: DateTime<Utc>

UTC timestamp of the measurement interval start.

bytes_sent: u64

Bytes sent by the process in this interval.

bytes_recv: u64

Bytes received by the process in this interval.

auto_inc_id: u32

ESE page number used as AutoIncId proxy for gap detection. Gaps in this sequence indicate deleted records (anti-forensics). Not serialised to JSON output.

Trait Implementations

impl Clone for NetworkUsageRecord

fn clone(&self) -> NetworkUsageRecord

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for NetworkUsageRecord

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for NetworkUsageRecord

fn deserialize<__D>(__deserializer: __D) -> Result<Self, __D::Error>

where __D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Serialize for NetworkUsageRecord

fn serialize<__S>(&self, __serializer: __S) -> Result<__S::Ok, __S::Error>

where __S: Serializer,

Serialize this value into the given Serde serializer.