{
    "id":"/axapi/v3/ddos/event-filter/{filter-name}/l4-type/{protocol}",
    "type":"object",
    "node-type":"list",
    "title":"l4-type",
    "partition-visibility":"shared",
    "description":"DDOS L4 type event",
    "properties":{
        "protocol":{
            "type":"string",
            "format":"enum",
            "partition-visibility":"shared",
            "description":"'tcp': tcp; 'udp': udp; ",
            "enum":[
                "tcp",
                "udp"
            ],
            "optional":false
        },
        "tcp-auth":{
            "type":"object",
            "properties":{
                "tcp-auth-init":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Packet that inits syn-auth/action-on-ack"
                },
                "tcp-auth-pass":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Packet that passes syn-auth/action-on-ack"
                },
                "tcp-auth-fail":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Packet that fails syn-auth/action-on-ack"
                }
            }
        },
        "retrans-syn-cfg":{
            "type":"object",
            "properties":{
                "retrans-syn":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"TCP SYN retransmission"
                },
                "retrans-syn-exceed":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"TCP SYN retransmission exceed"
                }
            }
        },
        "out-of-seq":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"TCP out-of-seq pkts",
            "optional":true
        },
        "zero-window":{
            "type":"number",
            "format":"flag",
            "default":0,
            "partition-visibility":"shared",
            "description":"TCP zero window pkts",
            "optional":true
        },
        "udp-auth":{
            "type":"object",
            "properties":{
                "udp-auth-init":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Packet that inits spoof-detect"
                },
                "udp-auth-pass":{
                    "type":"number",
                    "format":"flag",
                    "default":0,
                    "partition-visibility":"shared",
                    "description":"Packet that passes spoof-detect"
                }
            }
        },
        "uuid":{
            "type":"string",
            "format":"string",
            "minLength":1,
            "maxLength":64,
            "partition-visibility":"shared",
            "modify-not-allowed":1,
            "description":"uuid of the object",
            "optional":true
        },
        "user-tag":{
            "type":"string",
            "format":"string-rlx",
            "minLength":1,
            "maxLength":127,
            "partition-visibility":"shared",
            "description":"Customized tag",
            "optional":true
        }
    },
    "object-keys":[
        "protocol"
    ],
    "required":[
        "protocol"
    ]
}