Kaspersky CyberTrace Service in ReplyBack mode
August 22, 2024
ID 180189
In some cases, it is necessary for Kaspersky CyberTrace Service to send responsive events back to the event source to the same socket from which the original events are received (ReplyBack mode).
To shift Kaspersky CyberTrace Service to ReplyBack mode:
Send X-KF-ReplyBack
as the first message after a TCP connection with Kaspersky CyberTrace Service is established.
During the current TCP session every responsive event will be sent back to the same socket from which the original event was received. The setting specified in the OutputSettings > ConnectionString
element of the configuration file will be ignored.
You can configure Kaspersky CyberTrace Service to send an informational event indicating that event checking has finished.
To enable sending finishing events, perform one of the following actions:
- Set the
enable
attribute of theOutputSettings > FinishedEventFormat
element of the Kaspersky CyberTrace Service configuration file totrue
. - Send
X-KF-SendFinishedEventX-KF-ReplyBack
as the first message after a TCP connection with Kaspersky CyberTrace Service is established.In this case, the
enable
attribute of theOutputSettings > FinishedEventFormat
element in the Kaspersky CyberTrace Service configuration file will be ignored.
To instruct Kaspersky CyberTrace Service that it must shift to ReplyBack mode and send finishing events:
Send X-KF-SendFinishedEventX-KF-ReplyBack
as the first message after a TCP connection with Kaspersky CyberTrace Service is established.
By default, in ReplyBack mode, Kaspersky CyberTrace does not save the statistics of the detection events received during the current connection.
To save the statistics of the detection events in ReplyBack mode:
- If you want Kaspersky CyberTrace Service to send finishing events, send
X-KF-SendFinishedEventX-KF-ReplyBackX-KF-SaveStatistic
as the first message after a TCP connection with Kaspersky CyberTrace Service is established. - If you do not want Kaspersky CyberTrace Service to send finishing events, send
X-KF-ReplyBackX-KF-SaveStatistic
as the first message after a TCP connection with Kaspersky CyberTrace Service is established.