The third type of event is the observed event. This type of event involves three entities where the agent and event source are the same entity. However this entity is not the source or destination of the event.
An example of this type of event is a Network IDS or firewall observing a connection between two network entities.
|
Source |
Destination |
Event Source |
Agent |
|---|---|---|---|
|
Host A |
Host B |
Host C |
Host C |
|
Copyright © 2013 CA.
All rights reserved.
|
|