destination.yaml

groups:
  - id: destination
    prefix: destination
    type: attribute_group
    brief: These attributes may be used to describe the receiver of a network exchange/packet. 
      These fields are populated from a network event, packet, or other event containing details of a network transaction.
    attributes:
      - id: domain
        type: string
        brief: The domain name of the destination system.
        examples: ['foo.example.com']
        note: This value may be a host name, a fully qualified domain name, or another host naming format. 
      - id: address
        type: string
        brief: 'Peer address, for example IP address or UNIX socket name.'
        examples: ['10.5.3.2']
      - id: port
        type: int
        brief: 'Peer port number'
        examples: [3389, 2888]