Magic IDS Detections
The descriptions below detail the fields available for magic_ids_detections.
Action
Section titled “Action”Type: string
What action was taken on the packet. Possible values are pass | block.
ColoCity
Section titled “ColoCity”Type: string
The city where the detection occurred.
ColoCode
Section titled “ColoCode”Type: string
The IATA airport code corresponding to where the detection occurred.
DestinationIP
Section titled “DestinationIP”Type: string
The destination IP of the packet which triggered the detection.
DestinationPort
Section titled “DestinationPort”Type: int
The destination port of the packet which triggered the detection. It is set to 0 if the protocol field is set to any.
Protocol
Section titled “Protocol”Type: string
The layer 4 protocol of the packet which triggered the detection. Possible values are tcp | udp | any. Variant any means a detection occurred at a lower layer (such as IP).
SignatureID
Section titled “SignatureID”Type: int
The signature ID of the detection.
SignatureMessage
Section titled “SignatureMessage”Type: string
The signature message of the detection. Describes what the packet is attempting to do.
SignatureRevision
Section titled “SignatureRevision”Type: int
The signature revision of the detection.
SourceIP
Section titled “SourceIP”Type: string
The source IP of packet which triggered the detection.
SourcePort
Section titled “SourcePort”Type: int
The source port of the packet which triggered the detection. It is set to 0 if the protocol field is set to any.
Timestamp
Section titled “Timestamp”Type: int or string
A timestamp of when the detection occurred.
Was this helpful?
- Resources
- API
- New to Cloudflare?
- Products
- Sponsorships
- Open Source
- Support
- Help Center
- System Status
- Compliance
- GDPR
- Company
- cloudflare.com
- Our team
- Careers
- 2025 Cloudflare, Inc.
- Privacy Policy
- Terms of Use
- Report Security Issues
- Trademark