XCI requests for the GBUdb engine generally take the form of a single line of text terminated with a new line character. The response from an XCI GBUdb request is also generally a single line of text ending with a new line. The fictitious example below is split into separate lines to show its struture and to avoid wrapping. The XCI response to a GBUdb request will always take the same format:

<snf>
  <xci>
    <gbudb>
      <result 
        ip='12.34.56.78' type='ugly' 
        p='1.0' c='0.071429' b='2' g='0' 
        range='caution' code='40'/>
    </gbudb>
  </xci>
</snf> 

The response provides the full detail of the GBUdb record after the request is completed. If the request is a test and the record did not yet exist then the result will show the default new entry data -- all counts zero and the type flag set to ugly.

The above example indicates the following:

The ip='12.34.56.78' attribute indicates that the IP for this record is 12.34.56.78.

The type='ugly' attribute indicates that the flag for this IP is ugly.

The p='1.0' attribute indicates that the probability figure for this IP is 1.0.

The c='0.071429' attribute indicates that the confidence figure for this IP is 0.071429.

The b='2' attribute indicates that the bad count for this IP is 2 (two bad events on record).

The g='0' attribute indicates that the good count for this IP is 0 (zero good events on record).

The range='caution' attribute indicates that the statistics for this IP place it in the caution range.

The code='40' attribute indicates that the result code associated with this range is 40.