Runs the given keyword with the given arguments, if ``condition`` is true. '${loginType}' == 'api' ApiLoginAndAddLocalIP aa ELSE IF '${loginType}' == 'cli' CliLogin ELSE UiLoginAndAaddLocalIP bb aa Logs the given message with the given level. ApiLoginAndAddLocalIP${tempparm} ApiLoginAndAddLocalIPaa http *Sends a GET request to the endpoint.* /v1/user/encryptpwd?password=${password} assertions *Asserts the field as JSON object.* response body assertions *Asserts the field as JSON integer.* $.code 200 assertions *Asserts the field as JSON string.* $.data.encryptpwd ${pwd} ${pwd} = ['Gg1Etyh7fs1y/v/K2XOJDg=='] Returns the value specified with an ``index`` from ``list``. ${pwd} 0 ${pwdstr} ${pwdstr} = Gg1Etyh7fs1y/v/K2XOJDg== Logs the given message with the given level. ${pwdstr} Gg1Etyh7fs1y/v/K2XOJDg== Makes a variable available globally in all tests and suites. ${encodePassword} ${pwdstr} ${encodePassword} = Gg1Etyh7fs1y/v/K2XOJDg== Logs the given message with the given level. ${encodePassword} Gg1Etyh7fs1y/v/K2XOJDg== http *Sends a POST request to the endpoint.* /v1/user/login?username=${username}&password=${encodePassword}&authMode=${authmode} assertions *Asserts the field as JSON object.* response body assertions *Asserts the field as JSON integer.* $.code 200 assertions *Asserts the field as JSON integer.* $.code ${rescode} ${rescode} = [200] Logs the given message with the given level. ${rescode} [200] assertions *Asserts the field as JSON string.* $.data.token ${tokenGlobal} ${tokenGlobal} = ['3bb6ef1b-f163-496e-a194-ceece638d10e&981&'] Returns the value specified with an ``index`` from ``list``. ${tokenGlobal} 0 ${tokenStr} ${tokenStr} = 3bb6ef1b-f163-496e-a194-ceece638d10e&981& Logs the given message with the given level. ${tokenStr} 3bb6ef1b-f163-496e-a194-ceece638d10e&981& Makes a variable available globally in all tests and suites. ${token} ${tokenStr} ${token} = 3bb6ef1b-f163-496e-a194-ceece638d10e&981& Logs the given message with the given level. ${token} 3bb6ef1b-f163-496e-a194-ceece638d10e&981& Makes a variable available globally in all tests and suites. ${headers} {"Contest-Type":"application/json","Authorization":"${token}"} ${headers} = {"Contest-Type":"application/json","Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&"} Runs the given keyword with the given arguments, if ``condition`` is true. ${addTestClentIPFlag}==1 AddLocalIPObject Logs the given message with the given level. to_AddLocalIPObject to_AddLocalIPObject Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","objectSubType":"endpoint","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"autotestLocalIPObject_${testClentIP}","objectDesc":"LocalIPObject_${testClentIP}自动化测试机IP","subObjectIds":[],"addItemList":[{"addrType":4,"protocol":0,"direction":0,"isSession":"endpoint","clientIp1":"${testClentIP}","clientIp2":"${testClentIP}","clientIpFormat":"range","clientPortFormat":"range","clientPort1":0,"clientPort2":0,"serverIpFormat":"range","serverIp1":"","serverIp2":"","serverPortFormat":"range","serverPort1":0,"serverPort2":0}],"updateItemList":[],"deleteItemIds":[]}} ${localIP} ${localIP} = {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","objectSubType":"endpoint","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"autotestLocalIPObject_192.168.50.43","objectDesc"... ${localIP} ${rescodeip} ${objidip} /v1/policy/object body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.231005 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'clientIp2': '192.168.50.43', 'clientIpFormat': 'range', 'serverIpFormat': 'range', 'isSession': 'endpoin... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "objectList": [ { "addItemList": [ { "clientIp2": "192.168.50.43", "clientIpFormat": "range", "serverIpFormat": "range", "isSession": "endpoint", "serverPortFormat": "range", "protocol": 0, "serverIp2": "", "clientPortFormat": "range", "clientPort1": 0, "clientPort2": 0, "serverIp1": "", "serverPort2": 0, "clientIp1": "192.168.50.43", "serverPort1": 0, "addrType": 4, "direction": 0 } ], "deleteItemIds": [], "isExclusion": 0, "isInitialize": 0, "isValid": 1, "objectDesc": "LocalIPObject_192.168.50.43自动化测试机IP", "objectId": 470, "objectName": "autotestLocalIPObject_192.168.50.43", "objectSubType": "endpoint", "objectType": "ip", "opTime": "2020-04-01 12:20:35", "opUser": 981, "subObjectIds": [], "updateItemList": [] } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'clientIp2': '192.168.50.43', 'clientIpFormat': 'range', 'serverIpFormat': 'range', 'isSession': 'endpoint', 'serverPortFormat': 'range', 'proto... ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'clientIp2': '192.168.50.43', 'clientIpFormat': 'range', 'serverIpFormat': 'range', 'isSession': 'endpoint', 'serverPortFormat': 'range', 'proto... Returns the given values which can then be assigned to a variables. ${response['data']['objectList'][0]['objectId']} ${objectId} ${objectId} = 470 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescodeReturn} ${rescodeReturn} = 200 ${rescodeip} = 200 ${objidip} = 470 Logs the given message with the given level. ${rescodeip} 200 Logs the given message with the given level. LocalIP：${objidip} LocalIP：470 Makes a variable available globally in all tests and suites. ${testClentID} ${objidip} ${testClentID} = 470 Logs the given message with the given level. ApiLoginAndAddLocalIP ApiLoginAndAddLocalIP {"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn","objectSubType":"","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00001_FQDN_icbc","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["$www.icbc.com.cn"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[]}} ${rescodeip} ${object_FQDN_Id} /v1/policy/object body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.16222999999999999 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$www.icbc.com.cn'], 'isHexbin': 0}], 'deleteItemIds': [], 'isE... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "objectList": [ { "addItemList": [ { "itemId": "", "keywordArray": [ "$www.icbc.com.cn" ], "isHexbin": 0 } ], "deleteItemIds": [], "isExclusion": 0, "isInitialize": 0, "isValid": 1, "objectDesc": "", "objectId": 471, "objectName": "SecurityPolicy-Allow-Http-00001_FQDN_icbc", "objectSubType": "", "objectType": "fqdn", "opTime": "2020-04-01 12:20:35", "opUser": 981, "subObjectIds": [], "updateItemList": [] } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$www.icbc.com.cn'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'ob... ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$www.icbc.com.cn'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'ob... Returns the given values which can then be assigned to a variables. ${response['data']['objectList'][0]['objectId']} ${objectId} ${objectId} = 471 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescodeReturn} ${rescodeReturn} = 200 ${rescodeip} = 200 ${object_FQDN_Id} = 471 Logs the given message with the given level. ${object_FQDN_Id} 471 Returns the given values which can then be assigned to a variables. ${object_FQDN_Id} ${objectids} ${objectids} = 471 Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po... Runs the given keyword with the given arguments, if ``condition`` is true. '${addTestClentIPFlag}'=='1' set variable {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po... Logs the given message with the given level. ${addPolicyStr} {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":470,"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":471,"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${rescode} ${policyId1} /v1/policy/compile body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.225723 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 58.0, 'evalu... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "policyList": [ { "action": "deny", "appObjectIdArray": [ 2 ], "doLog": 1, "evaluationLayer": "session_layer", "evaluationOrder": 58.0, "evaluationStage": 1, "isValid": 1, "newSrcIpObjName": "autotestLocalIPObject_192.168.50.43", "opTime": "2020-04-01 12:20:36", "opUser": 981, "policyDesc": "autotest", "policyId": 74, "policyName": "SecurityPolicy-Allow-Http-00001_Deny", "policyType": "tsg_security", "protocol": "HTTP", "referenceObject": [], "scheduleId": [], "userRegion": { "protocol": "HTTP", "method": "drop" }, "userTags": "" } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 58.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp... ${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 58.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp... Returns the given values which can then be assigned to a variables. ${response['data']['policyList'][0]['policyId']} ${policyId} ${policyId} = 74 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescode} ${rescode} = 200 ${rescode} = 200 ${policyId1} = 74 Logs the given message with the given level. ${policyId1} 74 Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId1}]} ${policyIds} ${policyIds} = {"policyType":"tsg_security","policyIds":[74]} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy... Runs the given keyword with the given arguments, if ``condition`` is true. '${addTestClentIPFlag}'=='1' set variable {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy... ${addPolicyStr} ${rescode} ${policyId2} /v1/policy/compile body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.246545 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 59.0, 'eval... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "policyList": [ { "action": "allow", "appObjectIdArray": [ 2 ], "doLog": 1, "evaluationLayer": "session_layer", "evaluationOrder": 59.0, "evaluationStage": 1, "isValid": 1, "newSrcIpObjName": "autotestLocalIPObject_192.168.50.43", "opTime": "2020-04-01 12:20:36", "opUser": 981, "policyDesc": "autotest", "policyId": 75, "policyName": "SecurityPolicy-Allow-Http-00001", "policyType": "tsg_security", "protocol": "HTTP", "referenceObject": [], "scheduleId": [], "userRegion": { "protocol": "HTTP" }, "userTags": "" } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 59.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI... ${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 59.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI... Returns the given values which can then be assigned to a variables. ${response['data']['policyList'][0]['policyId']} ${policyId} ${policyId} = 75 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescode} ${rescode} = 200 ${rescode} = 200 ${policyId2} = 75 Logs the given message with the given level. ${policyId2} 75 Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId2}]} ${policyIds2} ${policyIds2} = {"policyType":"tsg_security","policyIds":[75]} Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId1}]} ${policyIds1} ${policyIds1} = {"policyType":"tsg_security","policyIds":[74]} Returns a list containing given items. ${policyIds1} ${policyIds2} ${policyIds} ${policyIds} = ['{"policyType":"tsg_security","policyIds":[74]}', '{"policyType":"tsg_security","policyIds":[75]}'] Returns the given time in the requested format. ${starttime} ${starttime} = 2020-04-01 12:20:37 Pauses the test executed for the given time. ${policyVerificationSleepSeconds}s Slept 20 seconds Runs the given command in the system and returns the output. curl -I \ -m \ 10 \ -o \ /dev/null \ -s \ -w \ \ \%{http_code} \ \ http://www.icbc.com.cn ${commandreturn} Running command 'curl -I -m 10 -o /dev/null -s -w %{http_code} http://www.icbc.com.cn 2>&1'. ${commandreturn} = 200 Fails if ``container`` does not contain ``item`` one or more times. ${commandreturn} 200 Pauses the test executed for the given time. ${policyLogVerificationSleepSeconds}s Slept 50 seconds Returns the given time in the requested format. ${endtime} ${endtime} = 2020-04-01 12:21:50 Converts the given item to a Unicode string. ${policyId2} ${s} ${s} = 75 security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host icbc ${logType} ${startTime} ${endTime} ${client_ip} ${policy_id} ${logCondition} settings *Sets new request headers or updates the existing.* {"Content-Type":"application/x-www-form-urlencoded","Authorization":"${token}"} http *Sends a GET request to the endpoint.* /v1/log/schema?logType=${logname} &{LogSchemaResponse} &{LogSchemaResponse} = { seconds=0.184733 | status=200 | body={'code': 200, 'data': {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'co... Logs the given message with the given level. ${logname} security_event_log I/O *Outputs JSON Schema to terminal or a file.* response body { "type": "object", "properties": { "code": { "type": "integer", "default": 200 }, "data": { "type": "object", "properties": { "doc": { "type": "object", "properties": { "schema_query": { "type": "object", "properties": { "dimensions": { "type": "array", "items": { "type": "string" }, "default": [ "common_server_ip", "common_client_ip", "common_policy_id", "common_action", "common_sled_ip", "common_server_location", "common_subscriber_id", "http_domain" ] }, "metrics": { "type": "array", "items": { "type": "string" }, "default": [ "common_server_ip", "common_client_ip", "common_subscriber_id", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num" ] }, "filters": { "type": "array", "items": { "type": "string" }, "default": [ "common_policy_id", "common_action", "common_address_type", "common_server_ip", "common_client_ip", "common_server_port", "common_server_location", "common_subscriber_id", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "http_domain", "http_content_type", "ssl_sni", "ssl_pinningst", "ssl_intercept_state" ] } }, "required": [ "dimensions", "filters", "metrics" ] }, "schema_type": { "type": "object", "properties": { "BASE": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "HTTP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "http_url", "http_host", "http_domain", "http_request_line", "http_response_line", "http_request_header", "http_response_header", "http_request_body", "http_response_body", "http_request_body_key", "http_response_body_key", "http_proxy_flag", "http_sequence", "http_snapshot", "http_cookie", "http_referer", "http_user_agent", "http_content_length", "http_content_type", "http_set_cookie", "http_version", "http_response_lantency_ms", "http_session_duration_ms" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "http_url", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "MAIL": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "mail_protocol_type", "mail_account", "mail_from_cmd", "mail_to_cmd", "mail_from", "mail_to", "mail_cc", "mail_bcc", "mail_subject", "mail_subject_charset", "mail_content", "mail_content_charset", "mail_attachment_name", "mail_attachment_name_charset", "mail_attachment_content", "mail_eml_file", "mail_snapshot" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "mail_from", "mail_to", "mail_subject" ] } }, "required": [ "columns", "default_columns" ] }, "DNS": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "dns_message_id", "dns_qr", "dns_opcode", "dns_aa", "dns_tc", "dns_rd", "dns_ra", "dns_rcode", "dns_qdcount", "dns_ancount", "dns_nscount", "dns_arcount", "dns_qname", "dns_qtype", "dns_qclass", "dns_cname", "dns_sub", "dns_rr" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_client_ip", "dns_qr", "dns_qname", "dns_qtype" ] } }, "required": [ "columns", "default_columns" ] }, "SSL": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "ssl_sni", "ssl_san", "ssl_cn", "ssl_pinningst", "ssl_intercept_state", "ssl_server_side_latency", "ssl_client_side_latency", "ssl_server_side_version", "ssl_client_side_version", "ssl_cert_verify", "ssl_error", "ssl_con_latency_ms" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "ssl_sni", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "FTP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "ftp_account", "ftp_url", "ftp_content" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "ftp_url", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "BGP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "bgp_type", "bgp_as_num", "bgp_route" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "bgp_type", "bgp_as_num", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "VOIP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "voip_calling_account", "voip_called_account", "voip_calling_number", "voip_called_number" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "voip_calling_account", "voip_called_account", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] } }, "required": [ "BASE", "BGP", "DNS", "FTP", "HTTP", "MAIL", "SSL", "VOIP" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_server_ip", "common_server_port", "common_schema_type" ] } }, "required": [ "default_columns", "schema_query", "schema_type" ] }, "fields": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string" }, "type": { "type": "string" }, "doc": { "type": "object", "properties": { "allow_query": { "type": "string" }, "constraints": { "type": "object", "properties": { "type": { "type": "string" } }, "required": [ "type" ] }, "format": { "type": "object", "properties": { "functions": { "type": "string" }, "appendTo": { "type": "string" }, "param": { "type": "string" } }, "required": [ "functions" ] }, "data": { "type": "array", "items": { "type": "object", "properties": { "code": { "type": "string" }, "value": { "type": "string" } }, "required": [ "code", "value" ] } }, "visibility": { "type": "string" } } }, "label": { "type": "string" } }, "required": [ "label", "name", "type" ] }, "default": [ { "name": "common_recv_time", "type": "int", "doc": { "allow_query": "true", "constraints": { "type": "timestamp" }, "format": { "functions": "current_timestamp" } }, "label": "Receive Time" }, { "name": "common_log_id", "type": "long", "doc": { "allow_query": "true", "format": { "functions": "snowflake_id" } }, "label": "Log ID" }, { "name": "common_policy_id", "type": "int", "doc": { "allow_query": "true" }, "label": "Policy ID" }, { "name": "common_subscriber_id", "type": "string", "doc": { "allow_query": "true" }, "label": "Subscriber ID" }, { "name": "common_client_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" }, "format": { "functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id" } }, "label": "Client IP" }, { "name": "common_client_port", "type": "int", "label": "Client Port" }, { "name": "common_l4_protocol", "type": "string", "label": "L4 Protocol" }, { "name": "common_address_type", "type": "int", "doc": { "data": [ { "code": "4", "value": "ipv4" }, { "code": "6", "value": "ipv6" } ] }, "label": "Address Type" }, { "name": "common_server_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" }, "format": { "functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn" } }, "label": "Server IP" }, { "name": "common_server_port", "type": "int", "doc": { "allow_query": "true" }, "label": "Server Port" }, { "name": "common_action", "type": "int", "doc": { "allow_query": "true", "data": [ { "code": "0", "value": "None" }, { "code": "1", "value": "Monitor" }, { "code": "2", "value": "Intercept" }, { "code": "16", "value": "Deny" }, { "code": "48", "value": "Manipulation" }, { "code": "128", "value": "Allow" } ] }, "label": "Action" }, { "name": "common_direction", "type": "int", "doc": { "data": [ { "code": "0", "value": "outbound" }, { "code": "1", "value": "inbound" } ] }, "label": "Direction" }, { "name": "common_entrance_id", "type": "int", "doc": { "visibility": "disabled" }, "label": "Entrance ID" }, { "name": "common_sled_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" } }, "label": "Sled IP" }, { "name": "common_client_location", "type": "string", "label": "Client Location" }, { "name": "common_client_asn", "type": "string", "label": "Client ASN" }, { "name": "common_server_location", "type": "string", "label": "Server Location" }, { "name": "common_server_asn", "type": "string", "label": "Server ASN" }, { "name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent" }, { "name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received" }, { "name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent" }, { "name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received" }, { "name": "common_service", "type": "int", "doc": { "visibility": "disabled" }, "label": "Service" }, { "name": "common_schema_type", "type": "string", "doc": { "data": [ { "code": "BASE", "value": "BASE" }, { "code": "HTTP", "value": "HTTP" }, { "code": "MAIL", "value": "MAIL" }, { "code": "DNS", "value": "DNS" }, { "code": "SSL", "value": "SSL" }, { "code": "FTP", "value": "FTP" }, { "code": "BGP", "value": "BGP" }, { "code": "VOIP", "value": "VOIP" }, { "code": "RADIUS", "value": "RADIUS" } ], "allow_query": "true" }, "label": "Schema Type" }, { "name": "common_user_tags", "type": "string", "doc": { "visibility": "disabled" }, "label": "User Tags" }, { "name": "common_sub_action", "type": "string", "doc": { "visibility": "hidden" }, "label": "Sub Action" }, { "name": "common_user_region", "type": "string", "doc": { "visibility": "hidden" }, "label": "User Region" }, { "name": "common_device_id", "type": "string", "doc": { "visibility": "disabled" }, "label": "Device ID" }, { "name": "common_link_id", "type": "int", "doc": { "visibility": "disabled" }, "label": "Link ID" }, { "name": "common_isp", "type": "string", "doc": { "visibility": "disabled" }, "label": "ISP" }, { "name": "common_encapsulation", "type": "int", "doc": { "data": [ { "code": "0", "value": "Ethernet" }, { "code": "8", "value": "PPP" }, { "code": "12", "value": "CiscoHDLC" } ] }, "label": "Encapsulation" }, { "name": "common_app_label", "type": "string", "doc": { "visibility": "disabled" }, "label": "Application Label" }, { "name": "common_app_id", "type": "int", "doc": { "data": [ { "code": "0", "value": "NOT SPECIFIED" }, { "code": "100001", "value": "Skype" }, { "code": "100101", "value": "Instagram" }, { "code": "100201", "value": "Youtube" }, { "code": "100301", "value": "Facebook" }, { "code": "100401", "value": "What‘s App" }, { "code": "100501", "value": "Periscope" }, { "code": "100601", "value": "Viber" }, { "code": "100701", "value": "Twitter" }, { "code": "100801", "value": "Vkontakte" }, { "code": "100901", "value": "Telegram" }, { "code": "101001", "value": "Odnoklassniki" }, { "code": "101101", "value": "Mail agent" }, { "code": "101201", "value": "FaceTime" }, { "code": "101301", "value": "Snapchat" }, { "code": "101401", "value": "Google" }, { "code": "101501", "value": "Yandex" }, { "code": "101601", "value": "Yandex Browser Turbo" }, { "code": "101701", "value": "Opera" }, { "code": "101702", "value": "Opera Turbo" }, { "code": "101703", "value": "Opera mini" }, { "code": "101801", "value": "AppStore" }, { "code": "101901", "value": "PlayMarket" }, { "code": "102001", "value": "Drugvokrug social networking" }, { "code": "102101", "value": "Badoo social networking" }, { "code": "102201", "value": "WeChat" }, { "code": "102301", "value": "Zello" }, { "code": "102401", "value": "Freegate" }, { "code": "102501", "value": "Psiphon" }, { "code": "102601", "value": "TOR" }, { "code": "102602", "value": "Tor browser" }, { "code": "102603", "value": "Tor mode" }, { "code": "102701", "value": "Orbot" }, { "code": "102801", "value": "Tunnel Bear VPN" }, { "code": "102901", "value": "HotSpot Shield VPN" }, { "code": "103001", "value": "VPN Master" }, { "code": "103101", "value": "Hola VPN" }, { "code": "103201", "value": "HideMyAss VPN" }, { "code": "103301", "value": "Zenmate VPN" }, { "code": "103401", "value": "SignalPrivateMessenger" }, { "code": "200001", "value": "RFA" }, { "code": "200002", "value": "VOA" }, { "code": "200003", "value": "lantern" }, { "code": "200004", "value": "Line" }, { "code": "200005", "value": "voxer" }, { "code": "200006", "value": "ZeroNet" }, { "code": "200007", "value": "Zalo" }, { "code": "200008", "value": "free_browser" }, { "code": "200009", "value": "Diaspora" }, { "code": "200010", "value": "browsec" }, { "code": "200011", "value": "Chrome_plugin_chuguo" }, { "code": "200012", "value": "GoGo_SocksHttp" }, { "code": "200013", "value": "ultrasurf_chrome" }, { "code": "200014", "value": "pinterest" }, { "code": "200015", "value": "Swisscom" }, { "code": "200016", "value": "Threema" }, { "code": "200017", "value": "Circuit_iOS" }, { "code": "200018", "value": "Chrome_plugin_FastsTunnel" }, { "code": "200019", "value": "OoVoo" }, { "code": "200020", "value": "Vine" }, { "code": "200021", "value": "Keek" }, { "code": "200022", "value": "Hi" }, { "code": "200023", "value": "HeyTell" }, { "code": "200024", "value": "HikeMessenger" }, { "code": "200025", "value": "Nonoh" }, { "code": "200026", "value": "Path" }, { "code": "200027", "value": "Kik" }, { "code": "200028", "value": "BBM" }, { "code": "200029", "value": "Talkray" }, { "code": "200030", "value": "HelloTalk" }, { "code": "200031", "value": "Skout" }, { "code": "200032", "value": "MeetMe" }, { "code": "200033", "value": "Nextdoor" }, { "code": "200034", "value": "Shots" }, { "code": "200035", "value": "Zoosk" }, { "code": "200036", "value": "TextPlus" }, { "code": "200037", "value": "Maaii" }, { "code": "200038", "value": "Ustream" }, { "code": "200039", "value": "Yikyak" }, { "code": "200040", "value": "chatsecure" }, { "code": "200041", "value": "freecalls" }, { "code": "200042", "value": "SignalPrivateMessenger" }, { "code": "200043", "value": "USGOV_CIA" }, { "code": "200044", "value": "USGOV_FBI" }, { "code": "200045", "value": "USGOV_DHS" }, { "code": "200046", "value": "shenxun_Secure_Call_android" }, { "code": "200047", "value": "shenxun_Secure_Call_web" }, { "code": "200048", "value": "UProxy" }, { "code": "200049", "value": "soma" }, { "code": "200050", "value": "PlayerUnknown's_Battlegrounds" }, { "code": "200051", "value": "STEAM" }, { "code": "200052", "value": "dalai_lama" }, { "code": "200053", "value": "Steam_forum" }, { "code": "200054", "value": "Microsoft Online Certificate" }, { "code": "200055", "value": "sogou_spider" }, { "code": "200056", "value": "baidu_mobie" }, { "code": "200057", "value": "Apple Push Service" }, { "code": "200058", "value": "IQIYI" }, { "code": "200059", "value": "baidu_spider" }, { "code": "200060", "value": "Weibo" }, { "code": "200061", "value": "Apple captive service" }, { "code": "200062", "value": "Microsoft wns" }, { "code": "200063", "value": "360_safe_pc" }, { "code": "200064", "value": "Sogou Public Service" }, { "code": "200065", "value": "Lenovo app_POST service" }, { "code": "200066", "value": "Apple securityd service" }, { "code": "200067", "value": "Weather pass" }, { "code": "200068", "value": "Apple Service Pack" }, { "code": "200069", "value": "Fast pressure" }, { "code": "200070", "value": "SemrushBot" }, { "code": "200071", "value": "Adrefs_spider" }, { "code": "200072", "value": "AndroidDownloadManager" }, { "code": "200073", "value": "XenderTop" }, { "code": "200074", "value": "microsoft_update" }, { "code": "200075", "value": "Youku" }, { "code": "200076", "value": "Google_spider" }, { "code": "200077", "value": "Microsoft User Experience and Telemetry Components" }, { "code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT" }, { "code": "200079", "value": "Microsoft ncsi" }, { "code": "200080", "value": "Microsoft Privacy Collection Service" }, { "code": "200081", "value": "uTorrent" }, { "code": "200082", "value": "Edge" }, { "code": "200083", "value": "Lenovo Music Store" }, { "code": "200084", "value": "LieBao" }, { "code": "200085", "value": "majesti_spider" }, { "code": "200086", "value": "DotBot" }, { "code": "200087", "value": "Millet Update" }, { "code": "200088", "value": "Today’s headlines" }, { "code": "200089", "value": "Microsoft live" }, { "code": "200090", "value": "Microsoft OneNote" }, { "code": "200091", "value": "Bing_spider" }, { "code": "200092", "value": "Apple location service" }, { "code": "200093", "value": "Kuaishou" }, { "code": "200094", "value": "LeTV video" }, { "code": "200095", "value": "QQ" }, { "code": "200096", "value": "Wps" }, { "code": "200097", "value": "kugou music" }, { "code": "200098", "value": "kuwo music" }, { "code": "200099", "value": "360_common_service" }, { "code": "200100", "value": "Camera360" }, { "code": "200101", "value": "Outlook" }, { "code": "200102", "value": "zhihu" }, { "code": "200103", "value": "Tencent video" }, { "code": "200104", "value": "funshion" }, { "code": "200105", "value": "QQ shared service" }, { "code": "200106", "value": "Microsoft wdcp service" }, { "code": "200107", "value": "Microsoft Media_center_pc" }, { "code": "200108", "value": "360 phone helper" }, { "code": "200109", "value": "Kingsoft Public Service" }, { "code": "200110", "value": "Ios_wifi connection" }, { "code": "200111", "value": "Teamviewer" }, { "code": "200112", "value": "Baidu cloud disk" }, { "code": "200113", "value": "Tencent News" }, { "code": "200114", "value": "Baidu map" }, { "code": "200115", "value": "Panda TV" }, { "code": "200116", "value": "Thunder" }, { "code": "200117", "value": "NetEase cloud music" }, { "code": "200118", "value": "QQ music" }, { "code": "200119", "value": "Itools" }, { "code": "200120", "value": "Jingdong Finance" }, { "code": "200121", "value": "PycURL" }, { "code": "200122", "value": "Yahoo_Spider" }, { "code": "200123", "value": "Himalayan FM" }, { "code": "200124", "value": "Youdao_dict" }, { "code": "200125", "value": "Microsoft_spynet" }, { "code": "200126", "value": "proximicBot" }, { "code": "200127", "value": "Foxit_reader" }, { "code": "200128", "value": "Sohu Video" }, { "code": "200129", "value": "BlueStacks" }, { "code": "200130", "value": "Beauty group" }, { "code": "200131", "value": "Kmplayer" }, { "code": "200132", "value": "TaoBao" }, { "code": "200133", "value": "Exabot" }, { "code": "200134", "value": "Ubuntu_apt_get" }, { "code": "200135", "value": "Oriental Fortune" }, { "code": "200136", "value": "JikeSpider" }, { "code": "200137", "value": "Itunesstored" }, { "code": "200138", "value": "GAD map" }, { "code": "200139", "value": "ifeng News" }, { "code": "200140", "value": "BoardReaderBot" }, { "code": "200141", "value": "AmazonBot" }, { "code": "200142", "value": "Alipay" }, { "code": "200143", "value": "Alipay security controls" }, { "code": "200144", "value": "360 security guards (antivirus)" }, { "code": "200145", "value": "360 logon service" }, { "code": "200146", "value": "BLP_bbot" }, { "code": "200147", "value": "Keep" }, { "code": "200148", "value": "WiFi universal key" }, { "code": "200149", "value": "Baidu Music" }, { "code": "200150", "value": "Vip.com" }, { "code": "200151", "value": "JD.COM" }, { "code": "200152", "value": "sina" }, { "code": "200153", "value": "youdao Public service" }, { "code": "200154", "value": "Jinshan public service" }, { "code": "200155", "value": "Baidu guard" }, { "code": "200156", "value": "Apple system update service" }, { "code": "200157", "value": "momo" }, { "code": "200158", "value": "CNZZ statistics" }, { "code": "200159", "value": "Microsoft one_drive service" }, { "code": "200160", "value": "WindowsStore" }, { "code": "200161", "value": "duba" }, { "code": "200162", "value": "Baidu HD" }, { "code": "200163", "value": "qunar" }, { "code": "200164", "value": "qianxunyingshi" }, { "code": "200165", "value": "KuaiyanKanShuSpider" }, { "code": "200166", "value": "Mail.RU_Bot_Robot" }, { "code": "200167", "value": "MpCommunication" }, { "code": "200168", "value": "Weather forecast" }, { "code": "200169", "value": "Ltx71_spider" }, { "code": "200170", "value": "Ia_archiver" }, { "code": "200171", "value": "Ali Wangwang" }, { "code": "200172", "value": "UC home page (information)" }, { "code": "200173", "value": "Yeti" }, { "code": "200174", "value": "Rtorrent" }, { "code": "200175", "value": "QQPim" }, { "code": "200176", "value": "NetEase News" }, { "code": "200177", "value": "sina sports" }, { "code": "200178", "value": "Exchange of foreign exchange" }, { "code": "200179", "value": "BlueStacks update" }, { "code": "200180", "value": "youdao" }, { "code": "200181", "value": "QQ computer housekeeper" }, { "code": "200182", "value": "UltraEdit" }, { "code": "200183", "value": "EasouSpider" }, { "code": "200184", "value": "QQ Zone" }, { "code": "200185", "value": "Foxmail" }, { "code": "200186", "value": "Pingdom.com" }, { "code": "200187", "value": "Sina Finance" }, { "code": "200188", "value": "QQ one key login" }, { "code": "200189", "value": "Norton" }, { "code": "200190", "value": "Baidu waimai" }, { "code": "200191", "value": "YaCy" }, { "code": "200192", "value": "Haitong e Haitong" }, { "code": "200193", "value": "AdsBot-Google" }, { "code": "200194", "value": "Guangfa Yijin" }, { "code": "200195", "value": "Ali security program" }, { "code": "200196", "value": "Cliqzbot" }, { "code": "200197", "value": "Mobike" }, { "code": "200198", "value": "Kingsoft PowerWord" }, { "code": "200199", "value": "meishij" }, { "code": "200200", "value": "CCB mobile bank" }, { "code": "200201", "value": "Mega SkyDrive" }, { "code": "200202", "value": "douyu" }, { "code": "200203", "value": "Flamingo_SearchEngine" }, { "code": "200204", "value": "Lenovo shop" }, { "code": "200205", "value": "Uc news" }, { "code": "200206", "value": "Volcano small video" }, { "code": "200207", "value": "Meitu Xiu Xiu" }, { "code": "200208", "value": "Kaspersky" }, { "code": "200209", "value": "AcFun" }, { "code": "200210", "value": "Slackbot" }, { "code": "200211", "value": "Snowball" }, { "code": "200212", "value": "SafeDNSBot" }, { "code": "200213", "value": "Great wisdom" }, { "code": "200214", "value": "Mailbox of NetEase" }, { "code": "200215", "value": "peasecod" }, { "code": "200216", "value": "Gold ten data" }, { "code": "200217", "value": "Linkdexbot" }, { "code": "200218", "value": "Sina blog" }, { "code": "200219", "value": "Ginger" }, { "code": "200220", "value": "Microsoft activation verification" }, { "code": "200221", "value": "Facebot" }, { "code": "200222", "value": "Dangdang" }, { "code": "200223", "value": "QQ cyclone" }, { "code": "200224", "value": "Wp_feedbot" }, { "code": "200225", "value": "ICBC" }, { "code": "200226", "value": "Public service" }, { "code": "200227", "value": "Magpie-crawler" }, { "code": "200228", "value": "xianyu" }, { "code": "200229", "value": "GetIntentBot" }, { "code": "200230", "value": "Papers" }, { "code": "200231", "value": "NewsGator" }, { "code": "200232", "value": "RankFlexBot" }, { "code": "200233", "value": "rogerbot" }, { "code": "200234", "value": "SurdotlyBot" }, { "code": "200235", "value": "CheckMarkNetworkBot" }, { "code": "200236", "value": "pyspider" }, { "code": "200237", "value": "spbot" }, { "code": "200238", "value": "Huaxia Bank" }, { "code": "200239", "value": "glory of king" }, { "code": "200240", "value": "msnbot-Products" }, { "code": "200241", "value": "archive.org" }, { "code": "200242", "value": "applebot" }, { "code": "200243", "value": "alicall" }, { "code": "200244", "value": "Superfeedrbot" }, { "code": "200245", "value": "QQ mailbox" }, { "code": "200246", "value": "coccocbot-webBot" }, { "code": "200247", "value": "dingtalk" }, { "code": "200248", "value": "Dragonbot" }, { "code": "200249", "value": "Mediatoolkitbot" }, { "code": "200250", "value": "bitcomet" }, { "code": "200251", "value": "filetopia" }, { "code": "200252", "value": "flashget" }, { "code": "200253", "value": "oracle" }, { "code": "200254", "value": "yyvoice" }, { "code": "200255", "value": "imesh" }, { "code": "200256", "value": "citrix" }, { "code": "200257", "value": "corba" }, { "code": "200258", "value": "dameware" }, { "code": "200259", "value": "pcanywhere" }, { "code": "200260", "value": "qq_rdp" }, { "code": "200261", "value": "poco" }, { "code": "200262", "value": "qqdownload" }, { "code": "200263", "value": "applejuice" }, { "code": "200264", "value": "stealthnet" }, { "code": "200265", "value": "winmx" }, { "code": "200266", "value": "emule" }, { "code": "200267", "value": "emule_decrypt" }, { "code": "200268", "value": "qvod" }, { "code": "200269", "value": "mysql" }, { "code": "200270", "value": "icecast" }, { "code": "200271", "value": "mms" }, { "code": "200272", "value": "pplive" }, { "code": "200273", "value": "ppstream" }, { "code": "200274", "value": "sopcast" }, { "code": "200275", "value": "tvants" }, { "code": "200276", "value": "sohutv" }, { "code": "200277", "value": "iku" }, { "code": "200278", "value": "qqlive" }, { "code": "200279", "value": "rsync" }, { "code": "200280", "value": "xunyou_speedup" }, { "code": "200281", "value": "msn" }, { "code": "200282", "value": "popo" }, { "code": "200283", "value": "sinauc" }, { "code": "200284", "value": "qqbattle" }, { "code": "200285", "value": "quake" }, { "code": "200286", "value": "xbox" }, { "code": "200287", "value": "wow" }, { "code": "200288", "value": "lol" }, { "code": "200289", "value": "PostgreSQL" }, { "code": "200290", "value": "TDS" }, { "code": "200291", "value": "VMware" }, { "code": "200292", "value": "Kontiki" }, { "code": "200293", "value": "OpenFT" }, { "code": "200294", "value": "Gnutella" }, { "code": "200295", "value": "eDonkey" }, { "code": "200296", "value": "AVI" }, { "code": "200297", "value": "RealMedia" }, { "code": "200298", "value": "Windowsmedia" }, { "code": "200299", "value": "MOVE" }, { "code": "200300", "value": "Feidian" }, { "code": "200301", "value": "Zattoo" }, { "code": "200302", "value": "SHOUTCast" }, { "code": "200303", "value": "TVUplayer" }, { "code": "200304", "value": "VeohTV" }, { "code": "200305", "value": "Soulseek" }, { "code": "200306", "value": "GaduGadu" }, { "code": "200307", "value": "Oscar" }, { "code": "200308", "value": "Yahoo" }, { "code": "200309", "value": "Battlefield" }, { "code": "200310", "value": "Halflife2" }, { "code": "200311", "value": "World of Warcraft" }, { "code": "200312", "value": "USENET" }, { "code": "200313", "value": "AFP" }, { "code": "200314", "value": "Truphone" }, { "code": "200315", "value": "Armagetron" }, { "code": "200316", "value": "CrossFire" }, { "code": "200317", "value": "Dofus" }, { "code": "200318", "value": "Fiesta" }, { "code": "200319", "value": "Florensia" }, { "code": "200320", "value": "Guildwars" }, { "code": "200321", "value": "HTTP Application Activesync" }, { "code": "200322", "value": "MapleStory" }, { "code": "200323", "value": "msSQL" }, { "code": "200324", "value": "WARCRAFT3" }, { "code": "200325", "value": "World of Kung Fu" }, { "code": "200326", "value": "MEEBO" }, { "code": "200327", "value": "DropBox" }, { "code": "200328", "value": "HTTP Proxy" }, { "code": "200329", "value": "Netflix" }, { "code": "200330", "value": "CitrixOnline/GotoMeeting" }, { "code": "200331", "value": "Webex" }, { "code": "200332", "value": "Apple iCloud" }, { "code": "200333", "value": "Apple iTunes" }, { "code": "200334", "value": "WindowsUpdate" }, { "code": "200335", "value": "Tuenti" }, { "code": "200336", "value": "LotusNotes" }, { "code": "200337", "value": "RemoteScan" }, { "code": "200338", "value": "Spotify" }, { "code": "200339", "value": "CiscoVPN" }, { "code": "200340", "value": "TeamSpeak" }, { "code": "200341", "value": "UbuntuONE" }, { "code": "200342", "value": "CNN" }, { "code": "200343", "value": "Wikipedia" }, { "code": "200344", "value": "Collectd" }, { "code": "200345", "value": "Redis" }, { "code": "200346", "value": "ZeroMQ" }, { "code": "200347", "value": "Stracraft" }, { "code": "200348", "value": "Simet" }, { "code": "200349", "value": "OpenSignal" }, { "code": "200350", "value": "99Taxi" }, { "code": "200351", "value": "GloboTV" }, { "code": "200352", "value": "Deezer" }, { "code": "200353", "value": "Microsoft cloud services" }, { "code": "200354", "value": "Twitch" }, { "code": "200355", "value": "KakaoTalk Voice and Chat" }, { "code": "200357", "value": "360.cn" }, { "code": "200358", "value": "360Safeguard_P2P" }, { "code": "200359", "value": "4D" }, { "code": "200360", "value": "acercloud" }, { "code": "200361", "value": "acestream" }, { "code": "200362", "value": "airdroid" }, { "code": "200363", "value": "airmedia" }, { "code": "200364", "value": "akamai" }, { "code": "200365", "value": "akamai_transfer" }, { "code": "200366", "value": "amanda" }, { "code": "200367", "value": "amp" }, { "code": "200368", "value": "Appear.in" }, { "code": "200369", "value": "ares" }, { "code": "200370", "value": "ARKSurvivalEvolved" }, { "code": "200371", "value": "ARMA3Server" }, { "code": "200372", "value": "ARMA2Server" }, { "code": "200373", "value": "AvastSecureDNS" }, { "code": "200374", "value": "azureus" }, { "code": "200375", "value": "backweb" }, { "code": "200376", "value": "BadBaidu" }, { "code": "200377", "value": "baofeng" }, { "code": "200378", "value": "bitext" }, { "code": "200379", "value": "BlackDesertOnline" }, { "code": "200380", "value": "Blizzard" }, { "code": "200381", "value": "bmdp" }, { "code": "200382", "value": "bncs" }, { "code": "200383", "value": "btdht" }, { "code": "200384", "value": "btsync" }, { "code": "200385", "value": "cacaoweb" }, { "code": "200386", "value": "chatango" }, { "code": "200387", "value": "chivalry" }, { "code": "200388", "value": "cirn" }, { "code": "200389", "value": "cisco_sslvpn" }, { "code": "200390", "value": "clash_of_clans" }, { "code": "200391", "value": "Clubbox" }, { "code": "200392", "value": "cod" }, { "code": "200393", "value": "cod_waw" }, { "code": "200394", "value": "combatarms" }, { "code": "200395", "value": "combatarms_p2p" }, { "code": "200396", "value": "ConquerOnline" }, { "code": "200397", "value": "Counterstrike1.6" }, { "code": "200398", "value": "Checkpoint_RDP" }, { "code": "200399", "value": "crashplan" }, { "code": "200400", "value": "crossout" }, { "code": "200401", "value": "cryptic" }, { "code": "200402", "value": "cvs" }, { "code": "200403", "value": "dash" }, { "code": "200404", "value": "dc" }, { "code": "200405", "value": "db2" }, { "code": "200406", "value": "dell_backup" }, { "code": "200407", "value": "Demonware" }, { "code": "200408", "value": "destiny" }, { "code": "200409", "value": "diablo2" }, { "code": "200410", "value": "isakmp" }, { "code": "200411", "value": "jedi" }, { "code": "200412", "value": "jedi_academy" }, { "code": "200413", "value": "jx3online" }, { "code": "200414", "value": "kankan" }, { "code": "200415", "value": "kaseya" }, { "code": "200416", "value": "kazaa" }, { "code": "200417", "value": "kuaibo" }, { "code": "200418", "value": "lifeforge" }, { "code": "200419", "value": "linkproof" }, { "code": "200420", "value": "litecoin" }, { "code": "200421", "value": "maxicloud" }, { "code": "200422", "value": "merakicloud" }, { "code": "200423", "value": "minecraft" }, { "code": "200424", "value": "mongo" }, { "code": "200425", "value": "msoffice_mac" }, { "code": "200426", "value": "munin" }, { "code": "200427", "value": "mzinga" }, { "code": "200428", "value": "n2ping" }, { "code": "200429", "value": "ncsoft" }, { "code": "200430", "value": "netcat_cctv" }, { "code": "200431", "value": "neverwinter" }, { "code": "200432", "value": "newerth" }, { "code": "200433", "value": "nintendo" }, { "code": "200434", "value": "nntps" }, { "code": "200435", "value": "noction" }, { "code": "200436", "value": "noe" }, { "code": "200437", "value": "norton_backup" }, { "code": "200438", "value": "omegle" }, { "code": "200439", "value": "opaserv" }, { "code": "200440", "value": "orbit" }, { "code": "200441", "value": "ourworld" }, { "code": "200442", "value": "overwatch" }, { "code": "200443", "value": "diablo3" }, { "code": "200444", "value": "dianping" }, { "code": "200445", "value": "dianshijia" }, { "code": "200446", "value": "discord" }, { "code": "200447", "value": "dogecoin" }, { "code": "200448", "value": "dota2" }, { "code": "200449", "value": "douyu_chat" }, { "code": "200450", "value": "doyo" }, { "code": "200451", "value": "driveshare" }, { "code": "200452", "value": "dtls" }, { "code": "200453", "value": "dueling_network" }, { "code": "200454", "value": "dvrns" }, { "code": "200455", "value": "dxp" }, { "code": "200456", "value": "ea_games" }, { "code": "200457", "value": "epson" }, { "code": "200458", "value": "eso" }, { "code": "200459", "value": "etrust" }, { "code": "200460", "value": "fasp" }, { "code": "200461", "value": "finalfantasy_xiv" }, { "code": "200462", "value": "flash" }, { "code": "200463", "value": "fliggy" }, { "code": "200464", "value": "fortinet" }, { "code": "200465", "value": "foscam" }, { "code": "200466", "value": "freechal" }, { "code": "200467", "value": "fring" }, { "code": "200468", "value": "fuckcoin" }, { "code": "200469", "value": "gamespy" }, { "code": "200470", "value": "gangsofspace" }, { "code": "200471", "value": "garena" }, { "code": "200472", "value": "gearsofwar" }, { "code": "200473", "value": "giop" }, { "code": "200474", "value": "git" }, { "code": "200475", "value": "glupteba" }, { "code": "200476", "value": "gnutella2" }, { "code": "200477", "value": "gokuchat" }, { "code": "200478", "value": "google_hangouts" }, { "code": "200479", "value": "gotomeeting" }, { "code": "200480", "value": "gprs_tunnel" }, { "code": "200481", "value": "graal_online_era" }, { "code": "200482", "value": "gsm" }, { "code": "200483", "value": "h1z1" }, { "code": "200484", "value": "halo_online" }, { "code": "200485", "value": "hamachi" }, { "code": "200486", "value": "harveys" }, { "code": "200487", "value": "hearthstone" }, { "code": "200488", "value": "heroes_generals" }, { "code": "200489", "value": "hots" }, { "code": "200490", "value": "icp" }, { "code": "200491", "value": "icq" }, { "code": "200492", "value": "id" }, { "code": "200493", "value": "idrive_sync" }, { "code": "200494", "value": "ipmsg" }, { "code": "200495", "value": "ipop" }, { "code": "200496", "value": "ipsharkk" }, { "code": "200497", "value": "palringo" }, { "code": "200498", "value": "paltalk" }, { "code": "200499", "value": "pando" }, { "code": "200500", "value": "panipani" }, { "code": "200501", "value": "pdbox" }, { "code": "200502", "value": "planetside2" }, { "code": "200503", "value": "portmap_rpc" }, { "code": "200504", "value": "ps4_remoteplay" }, { "code": "200505", "value": "psn" }, { "code": "200506", "value": "psn_store" }, { "code": "200507", "value": "punkbuster" }, { "code": "200508", "value": "pyzor" }, { "code": "200509", "value": "qcloud_ilvb" }, { "code": "200510", "value": "qqpcmgr" }, { "code": "200511", "value": "ramsey_dash" }, { "code": "200512", "value": "razor" }, { "code": "200513", "value": "rbls" }, { "code": "200514", "value": "realvnc" }, { "code": "200515", "value": "relay" }, { "code": "200516", "value": "revolver_nblbt" }, { "code": "200517", "value": "rising_storm" }, { "code": "200518", "value": "roblox" }, { "code": "200519", "value": "robocraft" }, { "code": "200520", "value": "rpc_scan" }, { "code": "200521", "value": "runescape" }, { "code": "200522", "value": "sanandreas" }, { "code": "200523", "value": "saprouter" }, { "code": "200524", "value": "secondlife" }, { "code": "200525", "value": "serialnumberd" }, { "code": "200526", "value": "silkroadonline" }, { "code": "200527", "value": "smite" }, { "code": "200528", "value": "snapvpn" }, { "code": "200529", "value": "spamfighter" }, { "code": "200530", "value": "speedin" }, { "code": "200531", "value": "speedtest" }, { "code": "200532", "value": "spotify_broadcast" }, { "code": "200533", "value": "sqlexp" }, { "code": "200534", "value": "starcitizen" }, { "code": "200535", "value": "starcraft" }, { "code": "200536", "value": "starleaf" }, { "code": "200537", "value": "steam_friends" }, { "code": "200538", "value": "storm_worm" }, { "code": "200539", "value": "stratum" }, { "code": "200540", "value": "supl" }, { "code": "200541", "value": "svn" }, { "code": "200542", "value": "talesrunner" }, { "code": "200543", "value": "tankix" }, { "code": "200544", "value": "telecomkey" }, { "code": "200545", "value": "telnet_exploit" }, { "code": "200546", "value": "tencent_games" }, { "code": "200547", "value": "tenfivecoin" }, { "code": "200548", "value": "tensafe" }, { "code": "200549", "value": "tera" }, { "code": "200550", "value": "tetrisonline" }, { "code": "200551", "value": "thq" }, { "code": "200552", "value": "tip" }, { "code": "200553", "value": "torchlight2" }, { "code": "200554", "value": "traceroute" }, { "code": "200555", "value": "trackmania" }, { "code": "200556", "value": "tremulous" }, { "code": "200557", "value": "trion" }, { "code": "200558", "value": "trojan_zeroaccess" }, { "code": "200559", "value": "twitcasting" }, { "code": "200560", "value": "twitch_irc" }, { "code": "200561", "value": "ubisoft_games" }, { "code": "200562", "value": "umeye" }, { "code": "200563", "value": "vainglory" }, { "code": "200564", "value": "ventrilo" }, { "code": "200565", "value": "vivox" }, { "code": "200566", "value": "vodlocker" }, { "code": "200567", "value": "vpnrobot" }, { "code": "200568", "value": "vpn_unlimited" }, { "code": "200569", "value": "vxworks_exploit" }, { "code": "200570", "value": "warthunder" }, { "code": "200571", "value": "weblogic" }, { "code": "200572", "value": "web_junk" }, { "code": "200573", "value": "weiqi" }, { "code": "200574", "value": "win_message" }, { "code": "200575", "value": "wizard101" }, { "code": "200576", "value": "wns" }, { "code": "200577", "value": "wolf_et" }, { "code": "200578", "value": "worm_22105" }, { "code": "200579", "value": "wuala" }, { "code": "200580", "value": "xfire_p2p" }, { "code": "200581", "value": "xiami" }, { "code": "200582", "value": "xunlei" }, { "code": "200583", "value": "xunlei_accel" }, { "code": "200584", "value": "xunlei_jsq" }, { "code": "200585", "value": "xunyou" }, { "code": "200586", "value": "xymon" }, { "code": "200587", "value": "yahoo_error" }, { "code": "200588", "value": "yahoo_games" }, { "code": "200589", "value": "yahoo_webcam" }, { "code": "200590", "value": "zabbix" }, { "code": "200591", "value": "zeroaccess" }, { "code": "200592", "value": "zoom" }, { "code": "200593", "value": "zynga" }, { "code": "200594", "value": "ICMP_Flood" }, { "code": "200595", "value": "IPFRAG_Flood" }, { "code": "200596", "value": "SYN_Flood" }, { "code": "200597", "value": "ACK_Flood" }, { "code": "200598", "value": "RST_Flood" }, { "code": "200599", "value": "DNS_Flood" }, { "code": "200600", "value": "NTP_Flood" }, { "code": "200601", "value": "UDP_Flood" }, { "code": "200602", "value": "HTTP_Flood" }, { "code": "200603", "value": "SSDP_Flood" }, { "code": "200604", "value": "baiduP2P" }, { "code": "200605", "value": "CSGlobalOffensive" }, { "code": "200606", "value": "AllSeeingEye" }, { "code": "200607", "value": "Bittorrent_Extension" }, { "code": "200608", "value": "BitTorrentSync" }, { "code": "200609", "value": "Call_of_Duty" }, { "code": "200612", "value": "CitrixICA" }, { "code": "200613", "value": "Citrix_Jedi" }, { "code": "200614", "value": "ClashOfClans" }, { "code": "200615", "value": "Canon_BJNP" }, { "code": "200617", "value": "DoyoP2P" }, { "code": "200618", "value": "FortiClientSSLVPN" }, { "code": "200619", "value": "GTA_SanAndreas_Multiplayer" }, { "code": "200620", "value": "HalfLife" }, { "code": "200621", "value": "IBM-DB2" }, { "code": "200622", "value": "Flash_Player" }, { "code": "200623", "value": "Kugou" }, { "code": "200624", "value": "LeagueOfLegends" }, { "code": "200625", "value": "GluptebaBackdoor" }, { "code": "200626", "value": "MedalOfHonor" }, { "code": "200628", "value": "MultiTheftAuto" }, { "code": "200631", "value": "NetcoreScan" }, { "code": "200632", "value": "NeverwinterNights" }, { "code": "200633", "value": "NoctionIRP" }, { "code": "200634", "value": "JavaObjectSerialised" }, { "code": "200635", "value": "RealPlayer" }, { "code": "200636", "value": "TeamFortress2" }, { "code": "200637", "value": "TheCrew" }, { "code": "200638", "value": "TurboVPN" }, { "code": "200639", "value": "MSN_Voice" }, { "code": "200640", "value": "MaplestoryChina" }, { "code": "200641", "value": "Message4U" }, { "code": "200642", "value": "MongoDB" }, { "code": "200643", "value": "NDTThroughput" }, { "code": "200644", "value": "NET-MFP" }, { "code": "200645", "value": "WindowsMessenger" }, { "code": "200646", "value": "WolfensteinEnemyTerritory" }, { "code": "200647", "value": "XboxLive" }, { "code": "200649", "value": "RBL" }, { "code": "200650", "value": "RPC_Exploit" }, { "code": "200651", "value": "Rejection" }, { "code": "200655", "value": "Silverplatter_DXP" }, { "code": "200659", "value": "TencentWNS" }, { "code": "200660", "value": "TrionGames" }, { "code": "200661", "value": "Trojan.Win32.Generic!SB" }, { "code": "200666", "value": "WorldOfWarcraft" }, { "code": "200667", "value": "YY" }, { "code": "200669", "value": "nopayload" }, { "code": "200670", "value": "No_FirstPkt" }, { "code": "200671", "value": "Invalid" } ], "visibility": "disabled" }, "label": "Application ID" }, { "name": "common_protocol_id", "type": "int", "doc": { "data": [ { "code": "0", "value": "NOT SPECIFIED" }, { "code": "10000", "value": "NOT SPECIFIED" }, { "code": "10001", "value": "TCP" }, { "code": "10002", "value": "UDP" }, { "code": "10003", "value": "DNS" }, { "code": "10004", "value": "FTP" }, { "code": "10005", "value": "FTPS" }, { "code": "10006", "value": "GRE" }, { "code": "10007", "value": "HTTP" }, { "code": "10008", "value": "HTTPS" }, { "code": "10009", "value": "ICMP" }, { "code": "10010", "value": "IKE" }, { "code": "10011", "value": "IMAP" }, { "code": "10012", "value": "IMAPS" }, { "code": "10013", "value": "IPSEC" }, { "code": "10014", "value": "XMPP" }, { "code": "10015", "value": "L2TP" }, { "code": "10016", "value": "NTP" }, { "code": "10017", "value": "POP3" }, { "code": "10018", "value": "POP3 SSL" }, { "code": "10019", "value": "PPTP" }, { "code": "10020", "value": "Quic" }, { "code": "10021", "value": "SIP" }, { "code": "10022", "value": "smb" }, { "code": "10023", "value": "SMTP" }, { "code": "10024", "value": "SMTPS" }, { "code": "10025", "value": "SPDY" }, { "code": "10028", "value": "SSH" }, { "code": "10029", "value": "SSL" }, { "code": "10030", "value": "SOCKS" }, { "code": "10031", "value": "BITTORRENT" }, { "code": "10032", "value": "RTSP" }, { "code": "10033", "value": "TELNET" }, { "code": "10034", "value": "UTP" }, { "code": "10035", "value": "FASTTRACK" }, { "code": "10036", "value": "SKINNY" }, { "code": "10037", "value": "IAX" }, { "code": "10038", "value": "MGCP" }, { "code": "10039", "value": "RTCP" }, { "code": "10040", "value": "RTP" }, { "code": "10041", "value": "VNC" }, { "code": "10042", "value": "XDMCP" }, { "code": "10043", "value": "RDP" }, { "code": "10044", "value": "AIMINI" }, { "code": "10045", "value": "IPP" }, { "code": "10046", "value": "NFS" }, { "code": "10047", "value": "TFTP" }, { "code": "10048", "value": "BGP" }, { "code": "10049", "value": "DHCP" }, { "code": "10050", "value": "DHCPV6" }, { "code": "10051", "value": "FINGER" }, { "code": "10052", "value": "KERBEROS" }, { "code": "10053", "value": "LDAP" }, { "code": "10054", "value": "MDNS" }, { "code": "10055", "value": "NNTP" }, { "code": "10056", "value": "SNMP" }, { "code": "10057", "value": "SSDP" }, { "code": "10058", "value": "SYSLOG" }, { "code": "10059", "value": "WHOIS" }, { "code": "10060", "value": "RADIUS" }, { "code": "10061", "value": "OPENVPN" }, { "code": "10062", "value": "STUN" }, { "code": "10063", "value": "TEREDO" }, { "code": "10064", "value": "GTP" }, { "code": "10065", "value": "RTMP" }, { "code": "10066", "value": "chargen_tcp_udp" }, { "code": "10067", "value": "llmnr_udp" }, { "code": "10068", "value": "nbns_udp" }, { "code": "10069", "value": "NETBIOS" }, { "code": "10070", "value": "DirectDownloadLink" }, { "code": "10071", "value": "I23V5" }, { "code": "10072", "value": "DirectConnect" }, { "code": "10073", "value": "OFF" }, { "code": "10074", "value": "OGG" }, { "code": "10075", "value": "MPEG" }, { "code": "10076", "value": "IRC" }, { "code": "10077", "value": "Jabber" }, { "code": "10078", "value": "VRRP" }, { "code": "10079", "value": "IGMP" }, { "code": "10080", "value": "EGP" }, { "code": "10081", "value": "SCTP" }, { "code": "10082", "value": "OSPF" }, { "code": "10083", "value": "IP in IP" }, { "code": "10084", "value": "ICMPv6" }, { "code": "10085", "value": "DCE RPC" }, { "code": "10086", "value": "NetFlow_IPFIX" }, { "code": "10087", "value": "sFlow" }, { "code": "10088", "value": "HTTP Connect (SSL over HTTP)" }, { "code": "10089", "value": "SAP" }, { "code": "10090", "value": "UPnP" }, { "code": "10091", "value": "H323" }, { "code": "10092", "value": "Megaco" }, { "code": "10094", "value": "bacnet" }, { "code": "10096", "value": "bjnp" }, { "code": "10097", "value": "cgp" }, { "code": "10098", "value": "dahua" }, { "code": "10099", "value": "dcc" }, { "code": "10100", "value": "kademlia" }, { "code": "10101", "value": "lansync" }, { "code": "10102", "value": "ldap_ad" }, { "code": "10103", "value": "llp2p" }, { "code": "10104", "value": "mfnp" }, { "code": "10105", "value": "mp2p" }, { "code": "10106", "value": "msn_cache" }, { "code": "10107", "value": "msn_video" }, { "code": "10108", "value": "msnc" }, { "code": "10109", "value": "netflow" }, { "code": "10110", "value": "notes_rpc" }, { "code": "10111", "value": "esp" }, { "code": "10112", "value": "fbcdn_ssl" }, { "code": "10113", "value": "forticlient_sslvpn" }, { "code": "10114", "value": "rfb" }, { "code": "10115", "value": "rtmfp" }, { "code": "10117", "value": "slp" }, { "code": "10118", "value": "steam_inhomebroadcast" }, { "code": "10119", "value": "steam_localbroadcast" }, { "code": "10120", "value": "tpkt" }, { "code": "10121", "value": "xmpps" }, { "code": "10122", "value": "S7COMM" }, { "code": "10123", "value": "CitrixCGP" }, { "code": "10124", "value": "ID_Protocol" }, { "code": "10125", "value": "SMTP_Secure" }, { "code": "10126", "value": "NAT-PMP" } ], "visibility": "disabled" }, "label": "Protocol ID" }, { "name": "common_start_time", "type": "int", "doc": { "constraints": { "type": "timestamp" }, "visibility": "hidden" }, "label": "Start Time" }, { "name": "common_end_time", "type": "int", "doc": { "constraints": { "type": "timestamp" }, "visibility": "hidden" }, "label": "End Time" }, { "name": "common_establish_latency_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Establish Latency(ms)" }, { "name": "common_con_duration_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Duration(ms)" }, { "name": "common_stream_dir", "type": "int", "doc": { "data": [ { "code": "1", "value": "c2s" }, { "code": "2", "value": "s2c" }, { "code": "3", "value": "double" } ] }, "label": "Stream Direction" }, { "name": "common_address_list", "type": "string", "doc": { "visibility": "hidden" }, "label": "Address List" }, { "name": "common_has_dup_traffic", "type": "int", "doc": { "data": [ { "code": "0", "value": "No" }, { "code": "1", "value": "Yes" } ], "visibility": "hidden" }, "label": "Duplication Traffic" }, { "name": "common_stream_error", "type": "string", "doc": { "visibility": "hidden" }, "label": "Stream Error" }, { "name": "common_stream_trace_id", "type": "long", "doc": { "allow_query": "true" }, "label": "Session ID" }, { "name": "http_url", "type": "string", "doc": { "allow_query": "true" }, "label": "URL" }, { "name": "http_host", "type": "string", "doc": { "format": { "functions": "sub_domain", "appendTo": "http_domain" } }, "label": "Host" }, { "name": "http_domain", "type": "string", "doc": { "allow_query": "true" }, "label": "Domain" }, { "name": "http_request_line", "type": "string", "doc": { "visibility": "hidden" }, "label": "Request Line" }, { "name": "http_response_line", "type": "string", "doc": { "visibility": "hidden" }, "label": "Response Line" }, { "name": "http_request_header", "type": "string", "label": "Request Headers" }, { "name": "http_response_header", "type": "string", "label": "Response Headers" }, { "name": "http_request_body", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "Request Body" }, { "name": "http_response_body", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "Response Body" }, { "name": "http_request_body_key", "type": "string", "doc": { "visibility": "disabled" }, "label": "Request Body Key" }, { "name": "http_response_body_key", "type": "string", "doc": { "visibility": "disabled" }, "label": "Response Body Key" }, { "name": "http_proxy_flag", "type": "int", "label": "Proxy Flag" }, { "name": "http_sequence", "type": "int", "label": "Sequence" }, { "name": "http_snapshot", "type": "string", "doc": { "visibility": "hidden" }, "label": "Http Snapshot" }, { "name": "http_cookie", "type": "string", "label": "Cookie" }, { "name": "http_referer", "type": "string", "label": "Referer" }, { "name": "http_user_agent", "type": "string", "label": "User Agent" }, { "name": "http_content_length", "type": "string", "label": "Content Length" }, { "name": "http_content_type", "type": "string", "label": "Content Type" }, { "name": "http_set_cookie", "type": "string", "label": "Set Cookie" }, { "name": "http_version", "type": "string", "label": "Version" }, { "name": "http_response_lantency_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Response Latency(ms)" }, { "name": "http_session_duration_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Session Duration(ms)" }, { "name": "mail_protocol_type", "type": "string", "label": "Protocol Type" }, { "name": "mail_account", "type": "string", "label": "Account" }, { "name": "mail_from_cmd", "type": "string", "label": "From CMD" }, { "name": "mail_to_cmd", "type": "string", "label": "To CMD" }, { "name": "mail_from", "type": "string", "doc": { "constraints": { "type": "email" } }, "label": "From" }, { "name": "mail_to", "type": "string", "doc": { "constraints": { "type": "email" } }, "label": "To" }, { "name": "mail_cc", "type": "string", "label": "CC" }, { "name": "mail_bcc", "type": "string", "label": "BCC" }, { "name": "mail_subject", "type": "string", "doc": { "format": { "functions": "decode_of_base64", "param": "mail_subject_charset" } }, "label": "Subject" }, { "name": "mail_subject_charset", "type": "string", "doc": { "visibility": "disabled" }, "label": "Subject Charset" }, { "name": "mail_content", "type": "string", "doc": { "visibility": "hidden" }, "label": "Content" }, { "name": "mail_content_charset", "type": "string", "doc": { "visibility": "hidden" }, "label": "Content Charset" }, { "name": "mail_attachment_name", "type": "string", "doc": { "format": { "functions": "decode_of_base64", "param": "mail_attachment_name_charset" } }, "label": "Attachment" }, { "name": "mail_attachment_name_charset", "type": "string", "doc": { "visibility": "hidden" }, "label": "Attachment Charset" }, { "name": "mail_attachment_content", "type": "string", "doc": { "visibility": "hidden" }, "label": "Attachment Content" }, { "name": "mail_eml_file", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "EML File" }, { "name": "mail_snapshot", "type": "string", "doc": { "visibility": "hidden" }, "label": "Snapshot" }, { "name": "dns_message_id", "type": "int", "label": "Message ID" }, { "name": "dns_qr", "type": "int", "doc": { "data": [ { "code": "0", "value": "QUERY" }, { "code": "1", "value": "REESPONSE" } ] }, "label": "QR" }, { "name": "dns_opcode", "type": "int", "doc": { "data": [ { "code": "0", "value": "QUERY" }, { "code": "1", "value": "IQUERY" }, { "code": "2", "value": "STATUS" }, { "code": "5", "value": "UPDATE" } ] }, "label": "OPCODE" }, { "name": "dns_aa", "type": "int", "label": "AA" }, { "name": "dns_tc", "type": "int", "label": "TC" }, { "name": "dns_rd", "type": "int", "label": "RD" }, { "name": "dns_ra", "type": "int", "label": "RA" }, { "name": "dns_rcode", "type": "int", "label": "RCODE" }, { "name": "dns_qdcount", "type": "int", "label": "QDCOUNT" }, { "name": "dns_ancount", "type": "int", "label": "ANCOUNT" }, { "name": "dns_nscount", "type": "int", "label": "NSCOUNT" }, { "name": "dns_arcount", "type": "int", "label": "ARCOUNT" }, { "name": "dns_qname", "type": "string", "label": "QNAME" }, { "name": "dns_qtype", "type": "int", "doc": { "data": [ { "code": "1", "value": "A" }, { "code": "2", "value": "NS" }, { "code": "5", "value": "CNAME" }, { "code": "6", "value": "SOA" }, { "code": "11", "value": "WKS" }, { "code": "12", "value": "PTR" }, { "code": "13", "value": "HINFO" }, { "code": "11", "value": "WKS" }, { "code": "15", "value": "MX" }, { "code": "28", "value": "AAAA" } ] }, "label": "QTYPE" }, { "name": "dns_qclass", "type": "int", "label": "QCLASS" }, { "name": "dns_cname", "type": "string", "label": "CNAME" }, { "name": "dns_sub", "type": "int", "doc": { "data": [ { "code": "1", "value": "DNS" }, { "code": "2", "value": "DNSSEC" } ] }, "label": "SUB" }, { "name": "dns_rr", "type": "string", "label": "RR" }, { "name": "ssl_version", "type": "string", "label": "Version" }, { "name": "ssl_sni", "type": "string", "doc": { "allow_query": "true", "format": { "functions": "sub_domain", "appendTo": "http_domain" } }, "label": "SNI" }, { "name": "ssl_san", "type": "string", "label": "SAN" }, { "name": "ssl_cn", "type": "string", "label": "CN" }, { "name": "ssl_pinningst", "type": "int", "doc": { "data": [ { "code": "0", "value": "Not Pinning" }, { "code": "1", "value": "Pinning" }, { "code": "2", "value": "Maybe Pinning" } ] }, "label": "Pinning" }, { "name": "ssl_intercept_state", "type": "int", "doc": { "data": [ { "code": "0", "value": "Passthrough" }, { "code": "1", "value": "Intercept" }, { "code": "2", "value": "Shutdown" } ] }, "label": "Intercept State" }, { "name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)" }, { "name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)" }, { "name": "ssl_server_side_version", "type": "string", "label": "Server Side Version" }, { "name": "ssl_client_side_version", "type": "string", "label": "Client Side Version" }, { "name": "ssl_cert_verify", "type": "int", "doc": { "data": [ { "code": "0", "value": "No" }, { "code": "1", "value": "Yes" } ] }, "label": "Certificate Verify" }, { "name": "ssl_error", "type": "string", "label": "Error" }, { "name": "ssl_con_latency_ms", "type": "int", "doc": { "visibility": "disabled" }, "label": "Connection Latency(ms)" }, { "name": "ftp_account", "type": "string", "label": "Account" }, { "name": "ftp_url", "type": "string", "label": "URL" }, { "name": "ftp_content", "type": "string", "label": "Content" }, { "name": "bgp_type", "type": "int", "label": "Type" }, { "name": "bgp_as_num", "type": "string", "label": "AS Number" }, { "name": "bgp_route", "type": "string", "label": "Route" }, { "name": "voip_calling_account", "type": "string", "label": "Calling Account" }, { "name": "voip_called_account", "type": "string", "label": "Called Account" }, { "name": "voip_calling_number", "type": "string", "label": "Calling Number" }, { "name": "voip_called_number", "type": "string", "label": "Called Number" }, { "name": "streaming_media_url", "type": "string", "label": "Media URL" }, { "name": "streaming_media_protocol", "type": "string", "label": "Media Protocol" } ] } }, "required": [ "doc", "fields" ] }, "msg": { "type": "string", "default": "Success" }, "success": { "type": "boolean", "default": true } }, "required": [ "code", "data", "msg", "success" ] } assertions *Asserts the field as JSON object.* response body Logs the given message with the given level. ${LogSchemaResponse.body['data']} {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'common_server_location', 'common_subscriber_id', 'http_domain'], 'metrics': ['common_server_ip', 'common_client_ip', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num'], 'filters': ['common_policy_id', 'common_action', 'common_address_type', 'common_server_ip', 'common_client_ip', 'common_server_port', 'common_server_location', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'http_domain', 'http_content_type', 'ssl_sni', 'ssl_pinningst', 'ssl_intercept_state']}, 'schema_type': {'BASE': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port']}, 'HTTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'http_url', 'http_host', 'http_domain', 'http_request_line', 'http_response_line', 'http_request_header', 'http_response_header', 'http_request_body', 'http_response_body', 'http_request_body_key', 'http_response_body_key', 'http_proxy_flag', 'http_sequence', 'http_snapshot', 'http_cookie', 'http_referer', 'http_user_agent', 'http_content_length', 'http_content_type', 'http_set_cookie', 'http_version', 'http_response_lantency_ms', 'http_session_duration_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'http_url', 'common_server_port']}, 'MAIL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'mail_protocol_type', 'mail_account', 'mail_from_cmd', 'mail_to_cmd', 'mail_from', 'mail_to', 'mail_cc', 'mail_bcc', 'mail_subject', 'mail_subject_charset', 'mail_content', 'mail_content_charset', 'mail_attachment_name', 'mail_attachment_name_charset', 'mail_attachment_content', 'mail_eml_file', 'mail_snapshot'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'mail_from', 'mail_to', 'mail_subject']}, 'DNS': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'dns_message_id', 'dns_qr', 'dns_opcode', 'dns_aa', 'dns_tc', 'dns_rd', 'dns_ra', 'dns_rcode', 'dns_qdcount', 'dns_ancount', 'dns_nscount', 'dns_arcount', 'dns_qname', 'dns_qtype', 'dns_qclass', 'dns_cname', 'dns_sub', 'dns_rr'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_client_ip', 'dns_qr', 'dns_qname', 'dns_qtype']}, 'SSL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ssl_sni', 'ssl_san', 'ssl_cn', 'ssl_pinningst', 'ssl_intercept_state', 'ssl_server_side_latency', 'ssl_client_side_latency', 'ssl_server_side_version', 'ssl_client_side_version', 'ssl_cert_verify', 'ssl_error', 'ssl_con_latency_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ssl_sni', 'common_server_ip', 'common_server_port']}, 'FTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ftp_account', 'ftp_url', 'ftp_content'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ftp_url', 'common_server_ip', 'common_server_port']}, 'BGP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'bgp_type', 'bgp_as_num', 'bgp_route'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'bgp_type', 'bgp_as_num', 'common_server_ip', 'common_server_port']}, 'VOIP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'voip_calling_account', 'voip_called_account', 'voip_calling_number', 'voip_called_number'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'voip_calling_account', 'voip_called_account', 'common_server_ip', 'common_server_port']}}, 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port', 'common_schema_type']}, 'fields': [{'name': 'common_recv_time', 'type': 'int', 'doc': {'allow_query': 'true', 'constraints': {'type': 'timestamp'}, 'format': {'functions': 'current_timestamp'}}, 'label': 'Receive Time'}, {'name': 'common_log_id', 'type': 'long', 'doc': {'allow_query': 'true', 'format': {'functions': 'snowflake_id'}}, 'label': 'Log ID'}, {'name': 'common_policy_id', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Policy ID'}, {'name': 'common_subscriber_id', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Subscriber ID'}, {'name': 'common_client_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_detail,geo_asn,radius_match', 'appendTo': 'common_client_location,common_client_asn,common_subscriber_id'}}, 'label': 'Client IP'}, {'name': 'common_client_port', 'type': 'int', 'label': 'Client Port'}, {'name': 'common_l4_protocol', 'type': 'string', 'label': 'L4 Protocol'}, {'name': 'common_address_type', 'type': 'int', 'doc': {'data': [{'code': '4', 'value': 'ipv4'}, {'code': '6', 'value': 'ipv6'}]}, 'label': 'Address Type'}, {'name': 'common_server_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_country,geo_asn', 'appendTo': 'common_server_location,common_server_asn'}}, 'label': 'Server IP'}, {'name': 'common_server_port', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Server Port'}, {'name': 'common_action', 'type': 'int', 'doc': {'allow_query': 'true', 'data': [{'code': '0', 'value': 'None'}, {'code': '1', 'value': 'Monitor'}, {'code': '2', 'value': 'Intercept'}, {'code': '16', 'value': 'Deny'}, {'code': '48', 'value': 'Manipulation'}, {'code': '128', 'value': 'Allow'}]}, 'label': 'Action'}, {'name': 'common_direction', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'outbound'}, {'code': '1', 'value': 'inbound'}]}, 'label': 'Direction'}, {'name': 'common_entrance_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Entrance ID'}, {'name': 'common_sled_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}}, 'label': 'Sled IP'}, {'name': 'common_client_location', 'type': 'string', 'label': 'Client Location'}, {'name': 'common_client_asn', 'type': 'string', 'label': 'Client ASN'}, {'name': 'common_server_location', 'type': 'string', 'label': 'Server Location'}, {'name': 'common_server_asn', 'type': 'string', 'label': 'Server ASN'}, {'name': 'common_c2s_pkt_num', 'type': 'int', 'label': 'Packets Sent'}, {'name': 'common_s2c_pkt_num', 'type': 'int', 'label': 'Packets Received'}, {'name': 'common_c2s_byte_num', 'type': 'int', 'label': 'Bytes Sent'}, {'name': 'common_s2c_byte_num', 'type': 'int', 'label': 'Bytes Received'}, {'name': 'common_service', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Service'}, {'name': 'common_schema_type', 'type': 'string', 'doc': {'data': [{'code': 'BASE', 'value': 'BASE'}, {'code': 'HTTP', 'value': 'HTTP'}, {'code': 'MAIL', 'value': 'MAIL'}, {'code': 'DNS', 'value': 'DNS'}, {'code': 'SSL', 'value': 'SSL'}, {'code': 'FTP', 'value': 'FTP'}, {'code': 'BGP', 'value': 'BGP'}, {'code': 'VOIP', 'value': 'VOIP'}, {'code': 'RADIUS', 'value': 'RADIUS'}], 'allow_query': 'true'}, 'label': 'Schema Type'}, {'name': 'common_user_tags', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'User Tags'}, {'name': 'common_sub_action', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Sub Action'}, {'name': 'common_user_region', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'User Region'}, {'name': 'common_device_id', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Device ID'}, {'name': 'common_link_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Link ID'}, {'name': 'common_isp', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'ISP'}, {'name': 'common_encapsulation', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Ethernet'}, {'code': '8', 'value': 'PPP'}, {'code': '12', 'value': 'CiscoHDLC'}]}, 'label': 'Encapsulation'}, {'name': 'common_app_label', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Application Label'}, {'name': 'common_app_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '100001', 'value': 'Skype'}, {'code': '100101', 'value': 'Instagram'}, {'code': '100201', 'value': 'Youtube'}, {'code': '100301', 'value': 'Facebook'}, {'code': '100401', 'value': 'What‘s App'}, {'code': '100501', 'value': 'Periscope'}, {'code': '100601', 'value': 'Viber'}, {'code': '100701', 'value': 'Twitter'}, {'code': '100801', 'value': 'Vkontakte'}, {'code': '100901', 'value': 'Telegram'}, {'code': '101001', 'value': 'Odnoklassniki'}, {'code': '101101', 'value': 'Mail agent'}, {'code': '101201', 'value': 'FaceTime'}, {'code': '101301', 'value': 'Snapchat'}, {'code': '101401', 'value': 'Google'}, {'code': '101501', 'value': 'Yandex'}, {'code': '101601', 'value': 'Yandex Browser Turbo'}, {'code': '101701', 'value': 'Opera'}, {'code': '101702', 'value': 'Opera Turbo'}, {'code': '101703', 'value': 'Opera mini'}, {'code': '101801', 'value': 'AppStore'}, {'code': '101901', 'value': 'PlayMarket'}, {'code': '102001', 'value': 'Drugvokrug social networking'}, {'code': '102101', 'value': 'Badoo social networking'}, {'code': '102201', 'value': 'WeChat'}, {'code': '102301', 'value': 'Zello'}, {'code': '102401', 'value': 'Freegate'}, {'code': '102501', 'value': 'Psiphon'}, {'code': '102601', 'value': 'TOR'}, {'code': '102602', 'value': 'Tor browser'}, {'code': '102603', 'value': 'Tor mode'}, {'code': '102701', 'value': 'Orbot'}, {'code': '102801', 'value': 'Tunnel Bear VPN'}, {'code': '102901', 'value': 'HotSpot Shield VPN'}, {'code': '103001', 'value': 'VPN Master'}, {'code': '103101', 'value': 'Hola VPN'}, {'code': '103201', 'value': 'HideMyAss VPN'}, {'code': '103301', 'value': 'Zenmate VPN'}, {'code': '103401', 'value': 'SignalPrivateMessenger'}, {'code': '200001', 'value': 'RFA'}, {'code': '200002', 'value': 'VOA'}, {'code': '200003', 'value': 'lantern'}, {'code': '200004', 'value': 'Line'}, {'code': '200005', 'value': 'voxer'}, {'code': '200006', 'value': 'ZeroNet'}, {'code': '200007', 'value': 'Zalo'}, {'code': '200008', 'value': 'free_browser'}, {'code': '200009', 'value': 'Diaspora'}, {'code': '200010', 'value': 'browsec'}, {'code': '200011', 'value': 'Chrome_plugin_chuguo'}, {'code': '200012', 'value': 'GoGo_SocksHttp'}, {'code': '200013', 'value': 'ultrasurf_chrome'}, {'code': '200014', 'value': 'pinterest'}, {'code': '200015', 'value': 'Swisscom'}, {'code': '200016', 'value': 'Threema'}, {'code': '200017', 'value': 'Circuit_iOS'}, {'code': '200018', 'value': 'Chrome_plugin_FastsTunnel'}, {'code': '200019', 'value': 'OoVoo'}, {'code': '200020', 'value': 'Vine'}, {'code': '200021', 'value': 'Keek'}, {'code': '200022', 'value': 'Hi'}, {'code': '200023', 'value': 'HeyTell'}, {'code': '200024', 'value': 'HikeMessenger'}, {'code': '200025', 'value': 'Nonoh'}, {'code': '200026', 'value': 'Path'}, {'code': '200027', 'value': 'Kik'}, {'code': '200028', 'value': 'BBM'}, {'code': '200029', 'value': 'Talkray'}, {'code': '200030', 'value': 'HelloTalk'}, {'code': '200031', 'value': 'Skout'}, {'code': '200032', 'value': 'MeetMe'}, {'code': '200033', 'value': 'Nextdoor'}, {'code': '200034', 'value': 'Shots'}, {'code': '200035', 'value': 'Zoosk'}, {'code': '200036', 'value': 'TextPlus'}, {'code': '200037', 'value': 'Maaii'}, {'code': '200038', 'value': 'Ustream'}, {'code': '200039', 'value': 'Yikyak'}, {'code': '200040', 'value': 'chatsecure'}, {'code': '200041', 'value': 'freecalls'}, {'code': '200042', 'value': 'SignalPrivateMessenger'}, {'code': '200043', 'value': 'USGOV_CIA'}, {'code': '200044', 'value': 'USGOV_FBI'}, {'code': '200045', 'value': 'USGOV_DHS'}, {'code': '200046', 'value': 'shenxun_Secure_Call_android'}, {'code': '200047', 'value': 'shenxun_Secure_Call_web'}, {'code': '200048', 'value': 'UProxy'}, {'code': '200049', 'value': 'soma'}, {'code': '200050', 'value': "PlayerUnknown's_Battlegrounds"}, {'code': '200051', 'value': 'STEAM'}, {'code': '200052', 'value': 'dalai_lama'}, {'code': '200053', 'value': 'Steam_forum'}, {'code': '200054', 'value': 'Microsoft Online Certificate'}, {'code': '200055', 'value': 'sogou_spider'}, {'code': '200056', 'value': 'baidu_mobie'}, {'code': '200057', 'value': 'Apple Push Service'}, {'code': '200058', 'value': 'IQIYI'}, {'code': '200059', 'value': 'baidu_spider'}, {'code': '200060', 'value': 'Weibo'}, {'code': '200061', 'value': 'Apple captive service'}, {'code': '200062', 'value': 'Microsoft wns'}, {'code': '200063', 'value': '360_safe_pc'}, {'code': '200064', 'value': 'Sogou Public Service'}, {'code': '200065', 'value': 'Lenovo app_POST service'}, {'code': '200066', 'value': 'Apple securityd service'}, {'code': '200067', 'value': 'Weather pass'}, {'code': '200068', 'value': 'Apple Service Pack'}, {'code': '200069', 'value': 'Fast pressure'}, {'code': '200070', 'value': 'SemrushBot'}, {'code': '200071', 'value': 'Adrefs_spider'}, {'code': '200072', 'value': 'AndroidDownloadManager'}, {'code': '200073', 'value': 'XenderTop'}, {'code': '200074', 'value': 'microsoft_update'}, {'code': '200075', 'value': 'Youku'}, {'code': '200076', 'value': 'Google_spider'}, {'code': '200077', 'value': 'Microsoft User Experience and Telemetry Components'}, {'code': '200078', 'value': 'MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT'}, {'code': '200079', 'value': 'Microsoft ncsi'}, {'code': '200080', 'value': 'Microsoft Privacy Collection Service'}, {'code': '200081', 'value': 'uTorrent'}, {'code': '200082', 'value': 'Edge'}, {'code': '200083', 'value': 'Lenovo Music Store'}, {'code': '200084', 'value': 'LieBao'}, {'code': '200085', 'value': 'majesti_spider'}, {'code': '200086', 'value': 'DotBot'}, {'code': '200087', 'value': 'Millet Update'}, {'code': '200088', 'value': 'Today’s headlines'}, {'code': '200089', 'value': 'Microsoft live'}, {'code': '200090', 'value': 'Microsoft OneNote'}, {'code': '200091', 'value': 'Bing_spider'}, {'code': '200092', 'value': 'Apple location service'}, {'code': '200093', 'value': 'Kuaishou'}, {'code': '200094', 'value': 'LeTV video'}, {'code': '200095', 'value': 'QQ'}, {'code': '200096', 'value': 'Wps'}, {'code': '200097', 'value': 'kugou music'}, {'code': '200098', 'value': 'kuwo music'}, {'code': '200099', 'value': '360_common_service'}, {'code': '200100', 'value': 'Camera360'}, {'code': '200101', 'value': 'Outlook'}, {'code': '200102', 'value': 'zhihu'}, {'code': '200103', 'value': 'Tencent video'}, {'code': '200104', 'value': 'funshion'}, {'code': '200105', 'value': 'QQ shared service'}, {'code': '200106', 'value': 'Microsoft wdcp service'}, {'code': '200107', 'value': 'Microsoft Media_center_pc'}, {'code': '200108', 'value': '360 phone helper'}, {'code': '200109', 'value': 'Kingsoft Public Service'}, {'code': '200110', 'value': 'Ios_wifi connection'}, {'code': '200111', 'value': 'Teamviewer'}, {'code': '200112', 'value': 'Baidu cloud disk'}, {'code': '200113', 'value': 'Tencent News'}, {'code': '200114', 'value': 'Baidu map'}, {'code': '200115', 'value': 'Panda TV'}, {'code': '200116', 'value': 'Thunder'}, {'code': '200117', 'value': 'NetEase cloud music'}, {'code': '200118', 'value': 'QQ music'}, {'code': '200119', 'value': 'Itools'}, {'code': '200120', 'value': 'Jingdong Finance'}, {'code': '200121', 'value': 'PycURL'}, {'code': '200122', 'value': 'Yahoo_Spider'}, {'code': '200123', 'value': 'Himalayan FM'}, {'code': '200124', 'value': 'Youdao_dict'}, {'code': '200125', 'value': 'Microsoft_spynet'}, {'code': '200126', 'value': 'proximicBot'}, {'code': '200127', 'value': 'Foxit_reader'}, {'code': '200128', 'value': 'Sohu Video'}, {'code': '200129', 'value': 'BlueStacks'}, {'code': '200130', 'value': 'Beauty group'}, {'code': '200131', 'value': 'Kmplayer'}, {'code': '200132', 'value': 'TaoBao'}, {'code': '200133', 'value': 'Exabot'}, {'code': '200134', 'value': 'Ubuntu_apt_get'}, {'code': '200135', 'value': 'Oriental Fortune'}, {'code': '200136', 'value': 'JikeSpider'}, {'code': '200137', 'value': 'Itunesstored'}, {'code': '200138', 'value': 'GAD map'}, {'code': '200139', 'value': 'ifeng News'}, {'code': '200140', 'value': 'BoardReaderBot'}, {'code': '200141', 'value': 'AmazonBot'}, {'code': '200142', 'value': 'Alipay'}, {'code': '200143', 'value': 'Alipay security controls'}, {'code': '200144', 'value': '360 security guards (antivirus)'}, {'code': '200145', 'value': '360 logon service'}, {'code': '200146', 'value': 'BLP_bbot'}, {'code': '200147', 'value': 'Keep'}, {'code': '200148', 'value': 'WiFi universal key'}, {'code': '200149', 'value': 'Baidu Music'}, {'code': '200150', 'value': 'Vip.com'}, {'code': '200151', 'value': 'JD.COM'}, {'code': '200152', 'value': 'sina'}, {'code': '200153', 'value': 'youdao Public service'}, {'code': '200154', 'value': 'Jinshan public service'}, {'code': '200155', 'value': 'Baidu guard'}, {'code': '200156', 'value': 'Apple system update service'}, {'code': '200157', 'value': 'momo'}, {'code': '200158', 'value': 'CNZZ statistics'}, {'code': '200159', 'value': 'Microsoft one_drive service'}, {'code': '200160', 'value': 'WindowsStore'}, {'code': '200161', 'value': 'duba'}, {'code': '200162', 'value': 'Baidu HD'}, {'code': '200163', 'value': 'qunar'}, {'code': '200164', 'value': 'qianxunyingshi'}, {'code': '200165', 'value': 'KuaiyanKanShuSpider'}, {'code': '200166', 'value': 'Mail.RU_Bot_Robot'}, {'code': '200167', 'value': 'MpCommunication'}, {'code': '200168', 'value': 'Weather forecast'}, {'code': '200169', 'value': 'Ltx71_spider'}, {'code': '200170', 'value': 'Ia_archiver'}, {'code': '200171', 'value': 'Ali Wangwang'}, {'code': '200172', 'value': 'UC home page (information)'}, {'code': '200173', 'value': 'Yeti'}, {'code': '200174', 'value': 'Rtorrent'}, {'code': '200175', 'value': 'QQPim'}, {'code': '200176', 'value': 'NetEase News'}, {'code': '200177', 'value': 'sina sports'}, {'code': '200178', 'value': 'Exchange of foreign exchange'}, {'code': '200179', 'value': 'BlueStacks update'}, {'code': '200180', 'value': 'youdao'}, {'code': '200181', 'value': 'QQ computer housekeeper'}, {'code': '200182', 'value': 'UltraEdit'}, {'code': '200183', 'value': 'EasouSpider'}, {'code': '200184', 'value': 'QQ Zone'}, {'code': '200185', 'value': 'Foxmail'}, {'code': '200186', 'value': 'Pingdom.com'}, {'code': '200187', 'value': 'Sina Finance'}, {'code': '200188', 'value': 'QQ one key login'}, {'code': '200189', 'value': 'Norton'}, {'code': '200190', 'value': 'Baidu waimai'}, {'code': '200191', 'value': 'YaCy'}, {'code': '200192', 'value': 'Haitong e Haitong'}, {'code': '200193', 'value': 'AdsBot-Google'}, {'code': '200194', 'value': 'Guangfa Yijin'}, {'code': '200195', 'value': 'Ali security program'}, {'code': '200196', 'value': 'Cliqzbot'}, {'code': '200197', 'value': 'Mobike'}, {'code': '200198', 'value': 'Kingsoft PowerWord'}, {'code': '200199', 'value': 'meishij'}, {'code': '200200', 'value': 'CCB mobile bank'}, {'code': '200201', 'value': 'Mega SkyDrive'}, {'code': '200202', 'value': 'douyu'}, {'code': '200203', 'value': 'Flamingo_SearchEngine'}, {'code': '200204', 'value': 'Lenovo shop'}, {'code': '200205', 'value': 'Uc news'}, {'code': '200206', 'value': 'Volcano small video'}, {'code': '200207', 'value': 'Meitu Xiu Xiu'}, {'code': '200208', 'value': 'Kaspersky'}, {'code': '200209', 'value': 'AcFun'}, {'code': '200210', 'value': 'Slackbot'}, {'code': '200211', 'value': 'Snowball'}, {'code': '200212', 'value': 'SafeDNSBot'}, {'code': '200213', 'value': 'Great wisdom'}, {'code': '200214', 'value': 'Mailbox of NetEase'}, {'code': '200215', 'value': 'peasecod'}, {'code': '200216', 'value': 'Gold ten data'}, {'code': '200217', 'value': 'Linkdexbot'}, {'code': '200218', 'value': 'Sina blog'}, {'code': '200219', 'value': 'Ginger'}, {'code': '200220', 'value': 'Microsoft activation verification'}, {'code': '200221', 'value': 'Facebot'}, {'code': '200222', 'value': 'Dangdang'}, {'code': '200223', 'value': 'QQ cyclone'}, {'code': '200224', 'value': 'Wp_feedbot'}, {'code': '200225', 'value': 'ICBC'}, {'code': '200226', 'value': 'Public service'}, {'code': '200227', 'value': 'Magpie-crawler'}, {'code': '200228', 'value': 'xianyu'}, {'code': '200229', 'value': 'GetIntentBot'}, {'code': '200230', 'value': 'Papers'}, {'code': '200231', 'value': 'NewsGator'}, {'code': '200232', 'value': 'RankFlexBot'}, {'code': '200233', 'value': 'rogerbot'}, {'code': '200234', 'value': 'SurdotlyBot'}, {'code': '200235', 'value': 'CheckMarkNetworkBot'}, {'code': '200236', 'value': 'pyspider'}, {'code': '200237', 'value': 'spbot'}, {'code': '200238', 'value': 'Huaxia Bank'}, {'code': '200239', 'value': 'glory of king'}, {'code': '200240', 'value': 'msnbot-Products'}, {'code': '200241', 'value': 'archive.org'}, {'code': '200242', 'value': 'applebot'}, {'code': '200243', 'value': 'alicall'}, {'code': '200244', 'value': 'Superfeedrbot'}, {'code': '200245', 'value': 'QQ mailbox'}, {'code': '200246', 'value': 'coccocbot-webBot'}, {'code': '200247', 'value': 'dingtalk'}, {'code': '200248', 'value': 'Dragonbot'}, {'code': '200249', 'value': 'Mediatoolkitbot'}, {'code': '200250', 'value': 'bitcomet'}, {'code': '200251', 'value': 'filetopia'}, {'code': '200252', 'value': 'flashget'}, {'code': '200253', 'value': 'oracle'}, {'code': '200254', 'value': 'yyvoice'}, {'code': '200255', 'value': 'imesh'}, {'code': '200256', 'value': 'citrix'}, {'code': '200257', 'value': 'corba'}, {'code': '200258', 'value': 'dameware'}, {'code': '200259', 'value': 'pcanywhere'}, {'code': '200260', 'value': 'qq_rdp'}, {'code': '200261', 'value': 'poco'}, {'code': '200262', 'value': 'qqdownload'}, {'code': '200263', 'value': 'applejuice'}, {'code': '200264', 'value': 'stealthnet'}, {'code': '200265', 'value': 'winmx'}, {'code': '200266', 'value': 'emule'}, {'code': '200267', 'value': 'emule_decrypt'}, {'code': '200268', 'value': 'qvod'}, {'code': '200269', 'value': 'mysql'}, {'code': '200270', 'value': 'icecast'}, {'code': '200271', 'value': 'mms'}, {'code': '200272', 'value': 'pplive'}, {'code': '200273', 'value': 'ppstream'}, {'code': '200274', 'value': 'sopcast'}, {'code': '200275', 'value': 'tvants'}, {'code': '200276', 'value': 'sohutv'}, {'code': '200277', 'value': 'iku'}, {'code': '200278', 'value': 'qqlive'}, {'code': '200279', 'value': 'rsync'}, {'code': '200280', 'value': 'xunyou_speedup'}, {'code': '200281', 'value': 'msn'}, {'code': '200282', 'value': 'popo'}, {'code': '200283', 'value': 'sinauc'}, {'code': '200284', 'value': 'qqbattle'}, {'code': '200285', 'value': 'quake'}, {'code': '200286', 'value': 'xbox'}, {'code': '200287', 'value': 'wow'}, {'code': '200288', 'value': 'lol'}, {'code': '200289', 'value': 'PostgreSQL'}, {'code': '200290', 'value': 'TDS'}, {'code': '200291', 'value': 'VMware'}, {'code': '200292', 'value': 'Kontiki'}, {'code': '200293', 'value': 'OpenFT'}, {'code': '200294', 'value': 'Gnutella'}, {'code': '200295', 'value': 'eDonkey'}, {'code': '200296', 'value': 'AVI'}, {'code': '200297', 'value': 'RealMedia'}, {'code': '200298', 'value': 'Windowsmedia'}, {'code': '200299', 'value': 'MOVE'}, {'code': '200300', 'value': 'Feidian'}, {'code': '200301', 'value': 'Zattoo'}, {'code': '200302', 'value': 'SHOUTCast'}, {'code': '200303', 'value': 'TVUplayer'}, {'code': '200304', 'value': 'VeohTV'}, {'code': '200305', 'value': 'Soulseek'}, {'code': '200306', 'value': 'GaduGadu'}, {'code': '200307', 'value': 'Oscar'}, {'code': '200308', 'value': 'Yahoo'}, {'code': '200309', 'value': 'Battlefield'}, {'code': '200310', 'value': 'Halflife2'}, {'code': '200311', 'value': 'World of Warcraft'}, {'code': '200312', 'value': 'USENET'}, {'code': '200313', 'value': 'AFP'}, {'code': '200314', 'value': 'Truphone'}, {'code': '200315', 'value': 'Armagetron'}, {'code': '200316', 'value': 'CrossFire'}, {'code': '200317', 'value': 'Dofus'}, {'code': '200318', 'value': 'Fiesta'}, {'code': '200319', 'value': 'Florensia'}, {'code': '200320', 'value': 'Guildwars'}, {'code': '200321', 'value': 'HTTP Application Activesync'}, {'code': '200322', 'value': 'MapleStory'}, {'code': '200323', 'value': 'msSQL'}, {'code': '200324', 'value': 'WARCRAFT3'}, {'code': '200325', 'value': 'World of Kung Fu'}, {'code': '200326', 'value': 'MEEBO'}, {'code': '200327', 'value': 'DropBox'}, {'code': '200328', 'value': 'HTTP Proxy'}, {'code': '200329', 'value': 'Netflix'}, {'code': '200330', 'value': 'CitrixOnline/GotoMeeting'}, {'code': '200331', 'value': 'Webex'}, {'code': '200332', 'value': 'Apple iCloud'}, {'code': '200333', 'value': 'Apple iTunes'}, {'code': '200334', 'value': 'WindowsUpdate'}, {'code': '200335', 'value': 'Tuenti'}, {'code': '200336', 'value': 'LotusNotes'}, {'code': '200337', 'value': 'RemoteScan'}, {'code': '200338', 'value': 'Spotify'}, {'code': '200339', 'value': 'CiscoVPN'}, {'code': '200340', 'value': 'TeamSpeak'}, {'code': '200341', 'value': 'UbuntuONE'}, {'code': '200342', 'value': 'CNN'}, {'code': '200343', 'value': 'Wikipedia'}, {'code': '200344', 'value': 'Collectd'}, {'code': '200345', 'value': 'Redis'}, {'code': '200346', 'value': 'ZeroMQ'}, {'code': '200347', 'value': 'Stracraft'}, {'code': '200348', 'value': 'Simet'}, {'code': '200349', 'value': 'OpenSignal'}, {'code': '200350', 'value': '99Taxi'}, {'code': '200351', 'value': 'GloboTV'}, {'code': '200352', 'value': 'Deezer'}, {'code': '200353', 'value': 'Microsoft cloud services'}, {'code': '200354', 'value': 'Twitch'}, {'code': '200355', 'value': 'KakaoTalk Voice and Chat'}, {'code': '200357', 'value': '360.cn'}, {'code': '200358', 'value': '360Safeguard_P2P'}, {'code': '200359', 'value': '4D'}, {'code': '200360', 'value': 'acercloud'}, {'code': '200361', 'value': 'acestream'}, {'code': '200362', 'value': 'airdroid'}, {'code': '200363', 'value': 'airmedia'}, {'code': '200364', 'value': 'akamai'}, {'code': '200365', 'value': 'akamai_transfer'}, {'code': '200366', 'value': 'amanda'}, {'code': '200367', 'value': 'amp'}, {'code': '200368', 'value': 'Appear.in'}, {'code': '200369', 'value': 'ares'}, {'code': '200370', 'value': 'ARKSurvivalEvolved'}, {'code': '200371', 'value': 'ARMA3Server'}, {'code': '200372', 'value': 'ARMA2Server'}, {'code': '200373', 'value': 'AvastSecureDNS'}, {'code': '200374', 'value': 'azureus'}, {'code': '200375', 'value': 'backweb'}, {'code': '200376', 'value': 'BadBaidu'}, {'code': '200377', 'value': 'baofeng'}, {'code': '200378', 'value': 'bitext'}, {'code': '200379', 'value': 'BlackDesertOnline'}, {'code': '200380', 'value': 'Blizzard'}, {'code': '200381', 'value': 'bmdp'}, {'code': '200382', 'value': 'bncs'}, {'code': '200383', 'value': 'btdht'}, {'code': '200384', 'value': 'btsync'}, {'code': '200385', 'value': 'cacaoweb'}, {'code': '200386', 'value': 'chatango'}, {'code': '200387', 'value': 'chivalry'}, {'code': '200388', 'value': 'cirn'}, {'code': '200389', 'value': 'cisco_sslvpn'}, {'code': '200390', 'value': 'clash_of_clans'}, {'code': '200391', 'value': 'Clubbox'}, {'code': '200392', 'value': 'cod'}, {'code': '200393', 'value': 'cod_waw'}, {'code': '200394', 'value': 'combatarms'}, {'code': '200395', 'value': 'combatarms_p2p'}, {'code': '200396', 'value': 'ConquerOnline'}, {'code': '200397', 'value': 'Counterstrike1.6'}, {'code': '200398', 'value': 'Checkpoint_RDP'}, {'code': '200399', 'value': 'crashplan'}, {'code': '200400', 'value': 'crossout'}, {'code': '200401', 'value': 'cryptic'}, {'code': '200402', 'value': 'cvs'}, {'code': '200403', 'value': 'dash'}, {'code': '200404', 'value': 'dc'}, {'code': '200405', 'value': 'db2'}, {'code': '200406', 'value': 'dell_backup'}, {'code': '200407', 'value': 'Demonware'}, {'code': '200408', 'value': 'destiny'}, {'code': '200409', 'value': 'diablo2'}, {'code': '200410', 'value': 'isakmp'}, {'code': '200411', 'value': 'jedi'}, {'code': '200412', 'value': 'jedi_academy'}, {'code': '200413', 'value': 'jx3online'}, {'code': '200414', 'value': 'kankan'}, {'code': '200415', 'value': 'kaseya'}, {'code': '200416', 'value': 'kazaa'}, {'code': '200417', 'value': 'kuaibo'}, {'code': '200418', 'value': 'lifeforge'}, {'code': '200419', 'value': 'linkproof'}, {'code': '200420', 'value': 'litecoin'}, {'code': '200421', 'value': 'maxicloud'}, {'code': '200422', 'value': 'merakicloud'}, {'code': '200423', 'value': 'minecraft'}, {'code': '200424', 'value': 'mongo'}, {'code': '200425', 'value': 'msoffice_mac'}, {'code': '200426', 'value': 'munin'}, {'code': '200427', 'value': 'mzinga'}, {'code': '200428', 'value': 'n2ping'}, {'code': '200429', 'value': 'ncsoft'}, {'code': '200430', 'value': 'netcat_cctv'}, {'code': '200431', 'value': 'neverwinter'}, {'code': '200432', 'value': 'newerth'}, {'code': '200433', 'value': 'nintendo'}, {'code': '200434', 'value': 'nntps'}, {'code': '200435', 'value': 'noction'}, {'code': '200436', 'value': 'noe'}, {'code': '200437', 'value': 'norton_backup'}, {'code': '200438', 'value': 'omegle'}, {'code': '200439', 'value': 'opaserv'}, {'code': '200440', 'value': 'orbit'}, {'code': '200441', 'value': 'ourworld'}, {'code': '200442', 'value': 'overwatch'}, {'code': '200443', 'value': 'diablo3'}, {'code': '200444', 'value': 'dianping'}, {'code': '200445', 'value': 'dianshijia'}, {'code': '200446', 'value': 'discord'}, {'code': '200447', 'value': 'dogecoin'}, {'code': '200448', 'value': 'dota2'}, {'code': '200449', 'value': 'douyu_chat'}, {'code': '200450', 'value': 'doyo'}, {'code': '200451', 'value': 'driveshare'}, {'code': '200452', 'value': 'dtls'}, {'code': '200453', 'value': 'dueling_network'}, {'code': '200454', 'value': 'dvrns'}, {'code': '200455', 'value': 'dxp'}, {'code': '200456', 'value': 'ea_games'}, {'code': '200457', 'value': 'epson'}, {'code': '200458', 'value': 'eso'}, {'code': '200459', 'value': 'etrust'}, {'code': '200460', 'value': 'fasp'}, {'code': '200461', 'value': 'finalfantasy_xiv'}, {'code': '200462', 'value': 'flash'}, {'code': '200463', 'value': 'fliggy'}, {'code': '200464', 'value': 'fortinet'}, {'code': '200465', 'value': 'foscam'}, {'code': '200466', 'value': 'freechal'}, {'code': '200467', 'value': 'fring'}, {'code': '200468', 'value': 'fuckcoin'}, {'code': '200469', 'value': 'gamespy'}, {'code': '200470', 'value': 'gangsofspace'}, {'code': '200471', 'value': 'garena'}, {'code': '200472', 'value': 'gearsofwar'}, {'code': '200473', 'value': 'giop'}, {'code': '200474', 'value': 'git'}, {'code': '200475', 'value': 'glupteba'}, {'code': '200476', 'value': 'gnutella2'}, {'code': '200477', 'value': 'gokuchat'}, {'code': '200478', 'value': 'google_hangouts'}, {'code': '200479', 'value': 'gotomeeting'}, {'code': '200480', 'value': 'gprs_tunnel'}, {'code': '200481', 'value': 'graal_online_era'}, {'code': '200482', 'value': 'gsm'}, {'code': '200483', 'value': 'h1z1'}, {'code': '200484', 'value': 'halo_online'}, {'code': '200485', 'value': 'hamachi'}, {'code': '200486', 'value': 'harveys'}, {'code': '200487', 'value': 'hearthstone'}, {'code': '200488', 'value': 'heroes_generals'}, {'code': '200489', 'value': 'hots'}, {'code': '200490', 'value': 'icp'}, {'code': '200491', 'value': 'icq'}, {'code': '200492', 'value': 'id'}, {'code': '200493', 'value': 'idrive_sync'}, {'code': '200494', 'value': 'ipmsg'}, {'code': '200495', 'value': 'ipop'}, {'code': '200496', 'value': 'ipsharkk'}, {'code': '200497', 'value': 'palringo'}, {'code': '200498', 'value': 'paltalk'}, {'code': '200499', 'value': 'pando'}, {'code': '200500', 'value': 'panipani'}, {'code': '200501', 'value': 'pdbox'}, {'code': '200502', 'value': 'planetside2'}, {'code': '200503', 'value': 'portmap_rpc'}, {'code': '200504', 'value': 'ps4_remoteplay'}, {'code': '200505', 'value': 'psn'}, {'code': '200506', 'value': 'psn_store'}, {'code': '200507', 'value': 'punkbuster'}, {'code': '200508', 'value': 'pyzor'}, {'code': '200509', 'value': 'qcloud_ilvb'}, {'code': '200510', 'value': 'qqpcmgr'}, {'code': '200511', 'value': 'ramsey_dash'}, {'code': '200512', 'value': 'razor'}, {'code': '200513', 'value': 'rbls'}, {'code': '200514', 'value': 'realvnc'}, {'code': '200515', 'value': 'relay'}, {'code': '200516', 'value': 'revolver_nblbt'}, {'code': '200517', 'value': 'rising_storm'}, {'code': '200518', 'value': 'roblox'}, {'code': '200519', 'value': 'robocraft'}, {'code': '200520', 'value': 'rpc_scan'}, {'code': '200521', 'value': 'runescape'}, {'code': '200522', 'value': 'sanandreas'}, {'code': '200523', 'value': 'saprouter'}, {'code': '200524', 'value': 'secondlife'}, {'code': '200525', 'value': 'serialnumberd'}, {'code': '200526', 'value': 'silkroadonline'}, {'code': '200527', 'value': 'smite'}, {'code': '200528', 'value': 'snapvpn'}, {'code': '200529', 'value': 'spamfighter'}, {'code': '200530', 'value': 'speedin'}, {'code': '200531', 'value': 'speedtest'}, {'code': '200532', 'value': 'spotify_broadcast'}, {'code': '200533', 'value': 'sqlexp'}, {'code': '200534', 'value': 'starcitizen'}, {'code': '200535', 'value': 'starcraft'}, {'code': '200536', 'value': 'starleaf'}, {'code': '200537', 'value': 'steam_friends'}, {'code': '200538', 'value': 'storm_worm'}, {'code': '200539', 'value': 'stratum'}, {'code': '200540', 'value': 'supl'}, {'code': '200541', 'value': 'svn'}, {'code': '200542', 'value': 'talesrunner'}, {'code': '200543', 'value': 'tankix'}, {'code': '200544', 'value': 'telecomkey'}, {'code': '200545', 'value': 'telnet_exploit'}, {'code': '200546', 'value': 'tencent_games'}, {'code': '200547', 'value': 'tenfivecoin'}, {'code': '200548', 'value': 'tensafe'}, {'code': '200549', 'value': 'tera'}, {'code': '200550', 'value': 'tetrisonline'}, {'code': '200551', 'value': 'thq'}, {'code': '200552', 'value': 'tip'}, {'code': '200553', 'value': 'torchlight2'}, {'code': '200554', 'value': 'traceroute'}, {'code': '200555', 'value': 'trackmania'}, {'code': '200556', 'value': 'tremulous'}, {'code': '200557', 'value': 'trion'}, {'code': '200558', 'value': 'trojan_zeroaccess'}, {'code': '200559', 'value': 'twitcasting'}, {'code': '200560', 'value': 'twitch_irc'}, {'code': '200561', 'value': 'ubisoft_games'}, {'code': '200562', 'value': 'umeye'}, {'code': '200563', 'value': 'vainglory'}, {'code': '200564', 'value': 'ventrilo'}, {'code': '200565', 'value': 'vivox'}, {'code': '200566', 'value': 'vodlocker'}, {'code': '200567', 'value': 'vpnrobot'}, {'code': '200568', 'value': 'vpn_unlimited'}, {'code': '200569', 'value': 'vxworks_exploit'}, {'code': '200570', 'value': 'warthunder'}, {'code': '200571', 'value': 'weblogic'}, {'code': '200572', 'value': 'web_junk'}, {'code': '200573', 'value': 'weiqi'}, {'code': '200574', 'value': 'win_message'}, {'code': '200575', 'value': 'wizard101'}, {'code': '200576', 'value': 'wns'}, {'code': '200577', 'value': 'wolf_et'}, {'code': '200578', 'value': 'worm_22105'}, {'code': '200579', 'value': 'wuala'}, {'code': '200580', 'value': 'xfire_p2p'}, {'code': '200581', 'value': 'xiami'}, {'code': '200582', 'value': 'xunlei'}, {'code': '200583', 'value': 'xunlei_accel'}, {'code': '200584', 'value': 'xunlei_jsq'}, {'code': '200585', 'value': 'xunyou'}, {'code': '200586', 'value': 'xymon'}, {'code': '200587', 'value': 'yahoo_error'}, {'code': '200588', 'value': 'yahoo_games'}, {'code': '200589', 'value': 'yahoo_webcam'}, {'code': '200590', 'value': 'zabbix'}, {'code': '200591', 'value': 'zeroaccess'}, {'code': '200592', 'value': 'zoom'}, {'code': '200593', 'value': 'zynga'}, {'code': '200594', 'value': 'ICMP_Flood'}, {'code': '200595', 'value': 'IPFRAG_Flood'}, {'code': '200596', 'value': 'SYN_Flood'}, {'code': '200597', 'value': 'ACK_Flood'}, {'code': '200598', 'value': 'RST_Flood'}, {'code': '200599', 'value': 'DNS_Flood'}, {'code': '200600', 'value': 'NTP_Flood'}, {'code': '200601', 'value': 'UDP_Flood'}, {'code': '200602', 'value': 'HTTP_Flood'}, {'code': '200603', 'value': 'SSDP_Flood'}, {'code': '200604', 'value': 'baiduP2P'}, {'code': '200605', 'value': 'CSGlobalOffensive'}, {'code': '200606', 'value': 'AllSeeingEye'}, {'code': '200607', 'value': 'Bittorrent_Extension'}, {'code': '200608', 'value': 'BitTorrentSync'}, {'code': '200609', 'value': 'Call_of_Duty'}, {'code': '200612', 'value': 'CitrixICA'}, {'code': '200613', 'value': 'Citrix_Jedi'}, {'code': '200614', 'value': 'ClashOfClans'}, {'code': '200615', 'value': 'Canon_BJNP'}, {'code': '200617', 'value': 'DoyoP2P'}, {'code': '200618', 'value': 'FortiClientSSLVPN'}, {'code': '200619', 'value': 'GTA_SanAndreas_Multiplayer'}, {'code': '200620', 'value': 'HalfLife'}, {'code': '200621', 'value': 'IBM-DB2'}, {'code': '200622', 'value': 'Flash_Player'}, {'code': '200623', 'value': 'Kugou'}, {'code': '200624', 'value': 'LeagueOfLegends'}, {'code': '200625', 'value': 'GluptebaBackdoor'}, {'code': '200626', 'value': 'MedalOfHonor'}, {'code': '200628', 'value': 'MultiTheftAuto'}, {'code': '200631', 'value': 'NetcoreScan'}, {'code': '200632', 'value': 'NeverwinterNights'}, {'code': '200633', 'value': 'NoctionIRP'}, {'code': '200634', 'value': 'JavaObjectSerialised'}, {'code': '200635', 'value': 'RealPlayer'}, {'code': '200636', 'value': 'TeamFortress2'}, {'code': '200637', 'value': 'TheCrew'}, {'code': '200638', 'value': 'TurboVPN'}, {'code': '200639', 'value': 'MSN_Voice'}, {'code': '200640', 'value': 'MaplestoryChina'}, {'code': '200641', 'value': 'Message4U'}, {'code': '200642', 'value': 'MongoDB'}, {'code': '200643', 'value': 'NDTThroughput'}, {'code': '200644', 'value': 'NET-MFP'}, {'code': '200645', 'value': 'WindowsMessenger'}, {'code': '200646', 'value': 'WolfensteinEnemyTerritory'}, {'code': '200647', 'value': 'XboxLive'}, {'code': '200649', 'value': 'RBL'}, {'code': '200650', 'value': 'RPC_Exploit'}, {'code': '200651', 'value': 'Rejection'}, {'code': '200655', 'value': 'Silverplatter_DXP'}, {'code': '200659', 'value': 'TencentWNS'}, {'code': '200660', 'value': 'TrionGames'}, {'code': '200661', 'value': 'Trojan.Win32.Generic!SB'}, {'code': '200666', 'value': 'WorldOfWarcraft'}, {'code': '200667', 'value': 'YY'}, {'code': '200669', 'value': 'nopayload'}, {'code': '200670', 'value': 'No_FirstPkt'}, {'code': '200671', 'value': 'Invalid'}], 'visibility': 'disabled'}, 'label': 'Application ID'}, {'name': 'common_protocol_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '10000', 'value': 'NOT SPECIFIED'}, {'code': '10001', 'value': 'TCP'}, {'code': '10002', 'value': 'UDP'}, {'code': '10003', 'value': 'DNS'}, {'code': '10004', 'value': 'FTP'}, {'code': '10005', 'value': 'FTPS'}, {'code': '10006', 'value': 'GRE'}, {'code': '10007', 'value': 'HTTP'}, {'code': '10008', 'value': 'HTTPS'}, {'code': '10009', 'value': 'ICMP'}, {'code': '10010', 'value': 'IKE'}, {'code': '10011', 'value': 'IMAP'}, {'code': '10012', 'value': 'IMAPS'}, {'code': '10013', 'value': 'IPSEC'}, {'code': '10014', 'value': 'XMPP'}, {'code': '10015', 'value': 'L2TP'}, {'code': '10016', 'value': 'NTP'}, {'code': '10017', 'value': 'POP3'}, {'code': '10018', 'value': 'POP3 SSL'}, {'code': '10019', 'value': 'PPTP'}, {'code': '10020', 'value': 'Quic'}, {'code': '10021', 'value': 'SIP'}, {'code': '10022', 'value': 'smb'}, {'code': '10023', 'value': 'SMTP'}, {'code': '10024', 'value': 'SMTPS'}, {'code': '10025', 'value': 'SPDY'}, {'code': '10028', 'value': 'SSH'}, {'code': '10029', 'value': 'SSL'}, {'code': '10030', 'value': 'SOCKS'}, {'code': '10031', 'value': 'BITTORRENT'}, {'code': '10032', 'value': 'RTSP'}, {'code': '10033', 'value': 'TELNET'}, {'code': '10034', 'value': 'UTP'}, {'code': '10035', 'value': 'FASTTRACK'}, {'code': '10036', 'value': 'SKINNY'}, {'code': '10037', 'value': 'IAX'}, {'code': '10038', 'value': 'MGCP'}, {'code': '10039', 'value': 'RTCP'}, {'code': '10040', 'value': 'RTP'}, {'code': '10041', 'value': 'VNC'}, {'code': '10042', 'value': 'XDMCP'}, {'code': '10043', 'value': 'RDP'}, {'code': '10044', 'value': 'AIMINI'}, {'code': '10045', 'value': 'IPP'}, {'code': '10046', 'value': 'NFS'}, {'code': '10047', 'value': 'TFTP'}, {'code': '10048', 'value': 'BGP'}, {'code': '10049', 'value': 'DHCP'}, {'code': '10050', 'value': 'DHCPV6'}, {'code': '10051', 'value': 'FINGER'}, {'code': '10052', 'value': 'KERBEROS'}, {'code': '10053', 'value': 'LDAP'}, {'code': '10054', 'value': 'MDNS'}, {'code': '10055', 'value': 'NNTP'}, {'code': '10056', 'value': 'SNMP'}, {'code': '10057', 'value': 'SSDP'}, {'code': '10058', 'value': 'SYSLOG'}, {'code': '10059', 'value': 'WHOIS'}, {'code': '10060', 'value': 'RADIUS'}, {'code': '10061', 'value': 'OPENVPN'}, {'code': '10062', 'value': 'STUN'}, {'code': '10063', 'value': 'TEREDO'}, {'code': '10064', 'value': 'GTP'}, {'code': '10065', 'value': 'RTMP'}, {'code': '10066', 'value': 'chargen_tcp_udp'}, {'code': '10067', 'value': 'llmnr_udp'}, {'code': '10068', 'value': 'nbns_udp'}, {'code': '10069', 'value': 'NETBIOS'}, {'code': '10070', 'value': 'DirectDownloadLink'}, {'code': '10071', 'value': 'I23V5'}, {'code': '10072', 'value': 'DirectConnect'}, {'code': '10073', 'value': 'OFF'}, {'code': '10074', 'value': 'OGG'}, {'code': '10075', 'value': 'MPEG'}, {'code': '10076', 'value': 'IRC'}, {'code': '10077', 'value': 'Jabber'}, {'code': '10078', 'value': 'VRRP'}, {'code': '10079', 'value': 'IGMP'}, {'code': '10080', 'value': 'EGP'}, {'code': '10081', 'value': 'SCTP'}, {'code': '10082', 'value': 'OSPF'}, {'code': '10083', 'value': 'IP in IP'}, {'code': '10084', 'value': 'ICMPv6'}, {'code': '10085', 'value': 'DCE RPC'}, {'code': '10086', 'value': 'NetFlow_IPFIX'}, {'code': '10087', 'value': 'sFlow'}, {'code': '10088', 'value': 'HTTP Connect (SSL over HTTP)'}, {'code': '10089', 'value': 'SAP'}, {'code': '10090', 'value': 'UPnP'}, {'code': '10091', 'value': 'H323'}, {'code': '10092', 'value': 'Megaco'}, {'code': '10094', 'value': 'bacnet'}, {'code': '10096', 'value': 'bjnp'}, {'code': '10097', 'value': 'cgp'}, {'code': '10098', 'value': 'dahua'}, {'code': '10099', 'value': 'dcc'}, {'code': '10100', 'value': 'kademlia'}, {'code': '10101', 'value': 'lansync'}, {'code': '10102', 'value': 'ldap_ad'}, {'code': '10103', 'value': 'llp2p'}, {'code': '10104', 'value': 'mfnp'}, {'code': '10105', 'value': 'mp2p'}, {'code': '10106', 'value': 'msn_cache'}, {'code': '10107', 'value': 'msn_video'}, {'code': '10108', 'value': 'msnc'}, {'code': '10109', 'value': 'netflow'}, {'code': '10110', 'value': 'notes_rpc'}, {'code': '10111', 'value': 'esp'}, {'code': '10112', 'value': 'fbcdn_ssl'}, {'code': '10113', 'value': 'forticlient_sslvpn'}, {'code': '10114', 'value': 'rfb'}, {'code': '10115', 'value': 'rtmfp'}, {'code': '10117', 'value': 'slp'}, {'code': '10118', 'value': 'steam_inhomebroadcast'}, {'code': '10119', 'value': 'steam_localbroadcast'}, {'code': '10120', 'value': 'tpkt'}, {'code': '10121', 'value': 'xmpps'}, {'code': '10122', 'value': 'S7COMM'}, {'code': '10123', 'value': 'CitrixCGP'}, {'code': '10124', 'value': 'ID_Protocol'}, {'code': '10125', 'value': 'SMTP_Secure'}, {'code': '10126', 'value': 'NAT-PMP'}], 'visibility': 'disabled'}, 'label': 'Protocol ID'}, {'name': 'common_start_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'Start Time'}, {'name': 'common_end_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'End Time'}, {'name': 'common_establish_latency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Establish Latency(ms)'}, {'name': 'common_con_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Duration(ms)'}, {'name': 'common_stream_dir', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'c2s'}, {'code': '2', 'value': 's2c'}, {'code': '3', 'value': 'double'}]}, 'label': 'Stream Direction'}, {'name': 'common_address_list', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Address List'}, {'name': 'common_has_dup_traffic', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}], 'visibility': 'hidden'}, 'label': 'Duplication Traffic'}, {'name': 'common_stream_error', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Stream Error'}, {'name': 'common_stream_trace_id', 'type': 'long', 'doc': {'allow_query': 'true'}, 'label': 'Session ID'}, {'name': 'http_url', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'URL'}, {'name': 'http_host', 'type': 'string', 'doc': {'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'Host'}, {'name': 'http_domain', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Domain'}, {'name': 'http_request_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Request Line'}, {'name': 'http_response_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Response Line'}, {'name': 'http_request_header', 'type': 'string', 'label': 'Request Headers'}, {'name': 'http_response_header', 'type': 'string', 'label': 'Response Headers'}, {'name': 'http_request_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Request Body'}, {'name': 'http_response_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Response Body'}, {'name': 'http_request_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Request Body Key'}, {'name': 'http_response_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Response Body Key'}, {'name': 'http_proxy_flag', 'type': 'int', 'label': 'Proxy Flag'}, {'name': 'http_sequence', 'type': 'int', 'label': 'Sequence'}, {'name': 'http_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Http Snapshot'}, {'name': 'http_cookie', 'type': 'string', 'label': 'Cookie'}, {'name': 'http_referer', 'type': 'string', 'label': 'Referer'}, {'name': 'http_user_agent', 'type': 'string', 'label': 'User Agent'}, {'name': 'http_content_length', 'type': 'string', 'label': 'Content Length'}, {'name': 'http_content_type', 'type': 'string', 'label': 'Content Type'}, {'name': 'http_set_cookie', 'type': 'string', 'label': 'Set Cookie'}, {'name': 'http_version', 'type': 'string', 'label': 'Version'}, {'name': 'http_response_lantency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Response Latency(ms)'}, {'name': 'http_session_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Session Duration(ms)'}, {'name': 'mail_protocol_type', 'type': 'string', 'label': 'Protocol Type'}, {'name': 'mail_account', 'type': 'string', 'label': 'Account'}, {'name': 'mail_from_cmd', 'type': 'string', 'label': 'From CMD'}, {'name': 'mail_to_cmd', 'type': 'string', 'label': 'To CMD'}, {'name': 'mail_from', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'From'}, {'name': 'mail_to', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'To'}, {'name': 'mail_cc', 'type': 'string', 'label': 'CC'}, {'name': 'mail_bcc', 'type': 'string', 'label': 'BCC'}, {'name': 'mail_subject', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_subject_charset'}}, 'label': 'Subject'}, {'name': 'mail_subject_charset', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Subject Charset'}, {'name': 'mail_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content'}, {'name': 'mail_content_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content Charset'}, {'name': 'mail_attachment_name', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_attachment_name_charset'}}, 'label': 'Attachment'}, {'name': 'mail_attachment_name_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Charset'}, {'name': 'mail_attachment_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Content'}, {'name': 'mail_eml_file', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'EML File'}, {'name': 'mail_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Snapshot'}, {'name': 'dns_message_id', 'type': 'int', 'label': 'Message ID'}, {'name': 'dns_qr', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'REESPONSE'}]}, 'label': 'QR'}, {'name': 'dns_opcode', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'IQUERY'}, {'code': '2', 'value': 'STATUS'}, {'code': '5', 'value': 'UPDATE'}]}, 'label': 'OPCODE'}, {'name': 'dns_aa', 'type': 'int', 'label': 'AA'}, {'name': 'dns_tc', 'type': 'int', 'label': 'TC'}, {'name': 'dns_rd', 'type': 'int', 'label': 'RD'}, {'name': 'dns_ra', 'type': 'int', 'label': 'RA'}, {'name': 'dns_rcode', 'type': 'int', 'label': 'RCODE'}, {'name': 'dns_qdcount', 'type': 'int', 'label': 'QDCOUNT'}, {'name': 'dns_ancount', 'type': 'int', 'label': 'ANCOUNT'}, {'name': 'dns_nscount', 'type': 'int', 'label': 'NSCOUNT'}, {'name': 'dns_arcount', 'type': 'int', 'label': 'ARCOUNT'}, {'name': 'dns_qname', 'type': 'string', 'label': 'QNAME'}, {'name': 'dns_qtype', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'A'}, {'code': '2', 'value': 'NS'}, {'code': '5', 'value': 'CNAME'}, {'code': '6', 'value': 'SOA'}, {'code': '11', 'value': 'WKS'}, {'code': '12', 'value': 'PTR'}, {'code': '13', 'value': 'HINFO'}, {'code': '11', 'value': 'WKS'}, {'code': '15', 'value': 'MX'}, {'code': '28', 'value': 'AAAA'}]}, 'label': 'QTYPE'}, {'name': 'dns_qclass', 'type': 'int', 'label': 'QCLASS'}, {'name': 'dns_cname', 'type': 'string', 'label': 'CNAME'}, {'name': 'dns_sub', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'DNS'}, {'code': '2', 'value': 'DNSSEC'}]}, 'label': 'SUB'}, {'name': 'dns_rr', 'type': 'string', 'label': 'RR'}, {'name': 'ssl_version', 'type': 'string', 'label': 'Version'}, {'name': 'ssl_sni', 'type': 'string', 'doc': {'allow_query': 'true', 'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'SNI'}, {'name': 'ssl_san', 'type': 'string', 'label': 'SAN'}, {'name': 'ssl_cn', 'type': 'string', 'label': 'CN'}, {'name': 'ssl_pinningst', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Not Pinning'}, {'code': '1', 'value': 'Pinning'}, {'code': '2', 'value': 'Maybe Pinning'}]}, 'label': 'Pinning'}, {'name': 'ssl_intercept_state', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Passthrough'}, {'code': '1', 'value': 'Intercept'}, {'code': '2', 'value': 'Shutdown'}]}, 'label': 'Intercept State'}, {'name': 'ssl_server_side_latency', 'type': 'int', 'label': 'Server Side Latency(ms)'}, {'name': 'ssl_client_side_latency', 'type': 'int', 'label': 'Client Side Latency(ms)'}, {'name': 'ssl_server_side_version', 'type': 'string', 'label': 'Server Side Version'}, {'name': 'ssl_client_side_version', 'type': 'string', 'label': 'Client Side Version'}, {'name': 'ssl_cert_verify', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}]}, 'label': 'Certificate Verify'}, {'name': 'ssl_error', 'type': 'string', 'label': 'Error'}, {'name': 'ssl_con_latency_ms', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Connection Latency(ms)'}, {'name': 'ftp_account', 'type': 'string', 'label': 'Account'}, {'name': 'ftp_url', 'type': 'string', 'label': 'URL'}, {'name': 'ftp_content', 'type': 'string', 'label': 'Content'}, {'name': 'bgp_type', 'type': 'int', 'label': 'Type'}, {'name': 'bgp_as_num', 'type': 'string', 'label': 'AS Number'}, {'name': 'bgp_route', 'type': 'string', 'label': 'Route'}, {'name': 'voip_calling_account', 'type': 'string', 'label': 'Calling Account'}, {'name': 'voip_called_account', 'type': 'string', 'label': 'Called Account'}, {'name': 'voip_calling_number', 'type': 'string', 'label': 'Calling Number'}, {'name': 'voip_called_number', 'type': 'string', 'label': 'Called Number'}, {'name': 'streaming_media_url', 'type': 'string', 'label': 'Media URL'}, {'name': 'streaming_media_protocol', 'type': 'string', 'label': 'Media Protocol'}]} Evaluates the given expression in Python and returns the results. json.dumps(eval(str(${LogSchemaResponse.body['data']['fields']}))) json ${field} ${field} = [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "com... Logs the given message with the given level. ${field} [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}] Returns the given values which can then be assigned to a variables. 30 ${pageSize} ${pageSize} = 30 Returns the given values which can then be assigned to a variables. 1 ${pageNo} ${pageNo} = 1 Returns the given values which can then be assigned to a variables. [{"value":["${startTime}","${endTime}"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ${condition} ${condition} = [{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] Returns the given values which can then be assigned to a variables. {"pageNo":${pageNo},"pageSize":${pageSize},"logType":"${logname}","fields":${field},"start_common_recv_time":"${startTime}","end_common_recv_time":"${endTime}","conditions":${condition} ,"common_client_ips":"${client_ip}","common_policy_ids":"${policy_id}"} ${logCondition} ${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function... Logs the given message with the given level. this time query condition:${logCondition} this time query condition:{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:20:37","end_common_recv_time":"2020-04-01 12:21:50","conditions":[{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"75"} ${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function... Logs the given message with the given level. ${logCondition} {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:20:37","end_common_recv_time":"2020-04-01 12:21:50","conditions":[{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"75"} /log/list ${logCondition} ${LogListResponse} Creates and returns a dictionary based on the given ``items``. Content-Type=application/json Authorization=${token} ${header} ${header} = {'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'} Create Session: create a HTTP session to a server api http://${host}:${port}/${version} headers=${header} Creating Session using : alias=api, url=http://192.168.40.120:8080/v1, headers={'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a POST request on the session object found using the given `alias` api ${url} data=${data} headers=${header} ${remoteResponse} POST Request using : uri=/log/list, params=None, files=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'} data={"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:20:37","end_common_recv_time":"2020-04-01 12:21:50","conditions":[{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"75"} json=None ${remoteResponse} = <Response [200]> ${LogListResponse} = <Response [200]> Fails if objects are unequal after converting them to strings. ${LogListResponse.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${LogListResponse.content} ${returnData} To JSON using : content={ "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:20:59", "common_log_id":"48581107529943040", "common_policy_id":"75", "common_subscriber_id":"", "common_client_ip":"192.168.50.43", "common_client_port":"57710", "common_l4_protocol":"IPv4_TCP", "common_address_type":"4", "common_server_ip":"111.206.186.250", "common_server_port":"80", "common_action":"128", "common_direction":"0", "common_entrance_id":"0", "common_sled_ip":"192.168.40.161", "common_client_location":"Private IP", "common_client_asn":"N/A", "common_server_location":"China", "common_server_asn":"4808", "common_c2s_pkt_num":"4", "common_s2c_pkt_num":"4", "common_c2s_byte_num":"80", "common_s2c_byte_num":"387", "common_service":"0", "common_schema_type":"HTTP", "common_user_tags":"", "common_sub_action":"", "common_user_region":"", "common_device_id":"", "common_link_id":"0", "common_isp":"", "common_encapsulation":"0", "common_app_label":"", "common_app_id":"0", "common_protocol_id":"0", "common_start_time":"2020-04-01 12:20:08", "common_end_time":"2020-04-01 12:20:10", "common_establish_latency_ms":"0", "common_con_duration_ms":"2000", "common_stream_dir":"3", "common_address_list":"57710-80-192.168.50.43-111.206.186.250", "common_has_dup_traffic":"0", "common_stream_error":"", "common_stream_trace_id":"7980237763036", "http_url":"", "http_host":"www.icbc.com.cn", "http_domain":"icbc.com.cn", "http_request_line":"", "http_response_line":"", "http_request_header":"", "http_response_header":"", "http_request_body":"", "http_response_body":"", "http_request_body_key":"", "http_response_body_key":"", "http_proxy_flag":"0", "http_sequence":"0", "http_snapshot":"", "http_cookie":"", "http_referer":"", "http_user_agent":"", "http_content_length":"", "http_content_type":"", "http_set_cookie":"", "http_version":"", "http_response_lantency_ms":"0", "http_session_duration_ms":"0", "mail_protocol_type":"", "mail_account":"", "mail_from_cmd":"", "mail_to_cmd":"", "mail_from":"", "mail_to":"", "mail_cc":"", "mail_bcc":"", "mail_subject":"", "mail_subject_charset":"", "mail_content":"", "mail_content_charset":"", "mail_attachment_name":"", "mail_attachment_name_charset":"", "mail_attachment_content":"", "mail_eml_file":"", "mail_snapshot":"", "dns_message_id":"0", "dns_aa":"0", "dns_tc":"0", "dns_rd":"0", "dns_ra":"0", "dns_rcode":"0", "dns_qdcount":"0", "dns_ancount":"0", "dns_nscount":"0", "dns_arcount":"0", "dns_qname":"", "dns_qtype":"0", "dns_qclass":"0", "dns_cname":"", "dns_sub":"0", "dns_rr":"", "ssl_version":"", "ssl_sni":"", "ssl_san":"", "ssl_cn":"", "ssl_server_side_latency":"0", "ssl_client_side_latency":"0", "ssl_server_side_version":"", "ssl_client_side_version":"", "ssl_error":"", "ssl_con_latency_ms":"0", "ftp_account":"", "ftp_url":"", "ftp_content":"", "bgp_type":"0", "bgp_as_num":"", "bgp_route":"", "voip_calling_account":"", "voip_called_account":"", "voip_calling_number":"", "voip_called_number":"", "streaming_media_url":"", "streaming_media_protocol":"" } ], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } To JSON using : pretty_print=False ${returnData} = {'code': 200, 'data': {'list': [{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.... Returns a value from the given ``dictionary`` based on the given ``key``. ${returnData} code ${responseCode} ${responseCode} = 200 Logs the given message with the given level. ${responseCode} 200 Fails if the given objects are unequal. ${responseCode} ${200} security_event_log \ \ test query list failed Logs the given message with the given level. this time request security_event_log \ table logRecord \ : ${LogListResponse.content} this time request security_event_log table logRecord : { "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:20:59", "common_log_id":"48581107529943040", "common_policy_id":"75", "common_subscriber_id":"", "common_client_ip":"192.168.50.43", "common_client_port":"57710", "common_l4_protocol":"IPv4_TCP", "common_address_type":"4", "common_server_ip":"111.206.186.250", "common_server_port":"80", "common_action":"128", "common_direction":"0", "common_entrance_id":"0", "common_sled_ip":"192.168.40.161", "common_client_location":"Private IP", "common_client_asn":"N/A", "common_server_location":"China", "common_server_asn":"4808", "common_c2s_pkt_num":"4", "common_s2c_pkt_num":"4", "common_c2s_byte_num":"80", "common_s2c_byte_num":"387", "common_service":"0", "common_schema_type":"HTTP", "common_user_tags":"", "common_sub_action":"", "common_user_region":"", "common_device_id":"", "common_link_id":"0", "common_isp":"", "common_encapsulation":"0", "common_app_label":"", "common_app_id":"0", "common_protocol_id":"0", "common_start_time":"2020-04-01 12:20:08", "common_end_time":"2020-04-01 12:20:10", "common_establish_latency_ms":"0", "common_con_duration_ms":"2000", "common_stream_dir":"3", "common_address_list":"57710-80-192.168.50.43-111.206.186.250", "common_has_dup_traffic":"0", "common_stream_error":"", "common_stream_trace_id":"7980237763036", "http_url":"", "http_host":"www.icbc.com.cn", "http_domain":"icbc.com.cn", "http_request_line":"", "http_response_line":"", "http_request_header":"", "http_response_header":"", "http_request_body":"", "http_response_body":"", "http_request_body_key":"", "http_response_body_key":"", "http_proxy_flag":"0", "http_sequence":"0", "http_snapshot":"", "http_cookie":"", "http_referer":"", "http_user_agent":"", "http_content_length":"", "http_content_type":"", "http_set_cookie":"", "http_version":"", "http_response_lantency_ms":"0", "http_session_duration_ms":"0", "mail_protocol_type":"", "mail_account":"", "mail_from_cmd":"", "mail_to_cmd":"", "mail_from":"", "mail_to":"", "mail_cc":"", "mail_bcc":"", "mail_subject":"", "mail_subject_charset":"", "mail_content":"", "mail_content_charset":"", "mail_attachment_name":"", "mail_attachment_name_charset":"", "mail_attachment_content":"", "mail_eml_file":"", "mail_snapshot":"", "dns_message_id":"0", "dns_aa":"0", "dns_tc":"0", "dns_rd":"0", "dns_ra":"0", "dns_rcode":"0", "dns_qdcount":"0", "dns_ancount":"0", "dns_nscount":"0", "dns_arcount":"0", "dns_qname":"", "dns_qtype":"0", "dns_qclass":"0", "dns_cname":"", "dns_sub":"0", "dns_rr":"", "ssl_version":"", "ssl_sni":"", "ssl_san":"", "ssl_cn":"", "ssl_server_side_latency":"0", "ssl_client_side_latency":"0", "ssl_server_side_version":"", "ssl_client_side_version":"", "ssl_error":"", "ssl_con_latency_ms":"0", "ftp_account":"", "ftp_url":"", "ftp_content":"", "bgp_type":"0", "bgp_as_num":"", "bgp_route":"", "voip_calling_account":"", "voip_called_account":"", "voip_calling_number":"", "voip_called_number":"", "streaming_media_url":"", "streaming_media_protocol":"" } ], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Returns the given values which can then be assigned to a variables. this time request security_event_log \ table logRecord \ : ${LogListResponse.content} ${a} ${a} = this time request security_event_log table logRecord : { "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:20:59", "common_log_id":"48581107529943040", "common_pol... Logs the given message with the given level. ${a} this time request security_event_log table logRecord : { "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:20:59", "common_log_id":"48581107529943040", "common_policy_id":"75", "common_subscriber_id":"", "common_client_ip":"192.168.50.43", "common_client_port":"57710", "common_l4_protocol":"IPv4_TCP", "common_address_type":"4", "common_server_ip":"111.206.186.250", "common_server_port":"80", "common_action":"128", "common_direction":"0", "common_entrance_id":"0", "common_sled_ip":"192.168.40.161", "common_client_location":"Private IP", "common_client_asn":"N/A", "common_server_location":"China", "common_server_asn":"4808", "common_c2s_pkt_num":"4", "common_s2c_pkt_num":"4", "common_c2s_byte_num":"80", "common_s2c_byte_num":"387", "common_service":"0", "common_schema_type":"HTTP", "common_user_tags":"", "common_sub_action":"", "common_user_region":"", "common_device_id":"", "common_link_id":"0", "common_isp":"", "common_encapsulation":"0", "common_app_label":"", "common_app_id":"0", "common_protocol_id":"0", "common_start_time":"2020-04-01 12:20:08", "common_end_time":"2020-04-01 12:20:10", "common_establish_latency_ms":"0", "common_con_duration_ms":"2000", "common_stream_dir":"3", "common_address_list":"57710-80-192.168.50.43-111.206.186.250", "common_has_dup_traffic":"0", "common_stream_error":"", "common_stream_trace_id":"7980237763036", "http_url":"", "http_host":"www.icbc.com.cn", "http_domain":"icbc.com.cn", "http_request_line":"", "http_response_line":"", "http_request_header":"", "http_response_header":"", "http_request_body":"", "http_response_body":"", "http_request_body_key":"", "http_response_body_key":"", "http_proxy_flag":"0", "http_sequence":"0", "http_snapshot":"", "http_cookie":"", "http_referer":"", "http_user_agent":"", "http_content_length":"", "http_content_type":"", "http_set_cookie":"", "http_version":"", "http_response_lantency_ms":"0", "http_session_duration_ms":"0", "mail_protocol_type":"", "mail_account":"", "mail_from_cmd":"", "mail_to_cmd":"", "mail_from":"", "mail_to":"", "mail_cc":"", "mail_bcc":"", "mail_subject":"", "mail_subject_charset":"", "mail_content":"", "mail_content_charset":"", "mail_attachment_name":"", "mail_attachment_name_charset":"", "mail_attachment_content":"", "mail_eml_file":"", "mail_snapshot":"", "dns_message_id":"0", "dns_aa":"0", "dns_tc":"0", "dns_rd":"0", "dns_ra":"0", "dns_rcode":"0", "dns_qdcount":"0", "dns_ancount":"0", "dns_nscount":"0", "dns_arcount":"0", "dns_qname":"", "dns_qtype":"0", "dns_qclass":"0", "dns_cname":"", "dns_sub":"0", "dns_rr":"", "ssl_version":"", "ssl_sni":"", "ssl_san":"", "ssl_cn":"", "ssl_server_side_latency":"0", "ssl_client_side_latency":"0", "ssl_server_side_version":"", "ssl_client_side_version":"", "ssl_error":"", "ssl_con_latency_ms":"0", "ftp_account":"", "ftp_url":"", "ftp_content":"", "bgp_type":"0", "bgp_as_num":"", "bgp_route":"", "voip_calling_account":"", "voip_called_account":"", "voip_calling_number":"", "voip_called_number":"", "streaming_media_url":"", "streaming_media_protocol":"" } ], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Returns the given values which can then be assigned to a variables. ${LogListResponse.json()}[data][list] ${log} ${log} = [{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '577... Logs the given message with the given level. ${logs} [{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57710', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '111.206.186.250', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '387', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:20:08', 'common_end_time': '2020-04-01 12:20:10', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '2000', 'common_stream_dir': '3', 'common_address_list': '57710-80-192.168.50.43-111.206.186.250', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980237763036', 'http_url': '', 'http_host': 'www.icbc.com.cn', 'http_domain': 'icbc.com.cn', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}] Logs the given message with the given level. %%%%%%%%%%%%%%%%%%%%%%%%${logs} %%%%%%%%%%%%%%%%%%%%%%%%[{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57710', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '111.206.186.250', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '387', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:20:08', 'common_end_time': '2020-04-01 12:20:10', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '2000', 'common_stream_dir': '3', 'common_address_list': '57710-80-192.168.50.43-111.206.186.250', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980237763036', 'http_url': '', 'http_host': 'www.icbc.com.cn', 'http_domain': 'icbc.com.cn', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}] Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${client_ip} Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${policy_id} Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${parmkey} Fails if ``container`` does not contain ``item`` one or more times. ${logs}"${parmkey}" ${parmvalue} ${policyIds} ${objectids} Logs the given message with the given level. toDeletePolicy_DeletePolicyAndObject toDeletePolicy_DeletePolicyAndObject Returns and logs the length of the given item as an integer. ${policyids} ${listlenth} Length is 2 ${listlenth} = 2 Logs the given message with the given level. ${var} 0 ${policyids}[${var}] Logs the given message with the given level. toDeletePolicy_DeletePolicyDeletePolicy toDeletePolicy_DeletePolicyDeletePolicy /v1/policy/compile ${body} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"policyType":"tsg_security","policyIds":[74]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Logs the given message with the given level. ${var} 1 ${policyids}[${var}] Logs the given message with the given level. toDeletePolicy_DeletePolicyDeletePolicy toDeletePolicy_DeletePolicyDeletePolicy /v1/policy/compile ${body} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"policyType":"tsg_security","policyIds":[75]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Logs the given message with the given level. todeleteobj_DeletePolicyAndObject todeleteobj_DeletePolicyAndObject ${objectids} Logs the given message with the given level. todeleteobj todeleteobj /v1/policy/object {"objectIds":[${objectids}]} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"objectIds":[471]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Allow DENY FQDN HTTP IP tsg_adc tsg_security {"opAction":"add","returnData":1,"objectList":{"objectType":"subscriberid","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00002_subid","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["$zmmtest"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[]}} ${rescode} ${object_Subid_Id} /v1/policy/object body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.138607 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$zmmtest'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isIn... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "objectList": [ { "addItemList": [ { "itemId": "", "keywordArray": [ "$zmmtest" ], "isHexbin": 0 } ], "deleteItemIds": [], "isExclusion": 0, "isInitialize": 0, "isValid": 1, "objectDesc": "", "objectId": 472, "objectName": "SecurityPolicy-Allow-Http-00002_subid", "objectType": "subscriberid", "opTime": "2020-04-01 12:21:51", "opUser": 981, "subObjectIds": [], "updateItemList": [] } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$zmmtest'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objectDesc... ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$zmmtest'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objectDesc... Returns the given values which can then be assigned to a variables. ${response['data']['objectList'][0]['objectId']} ${objectId} ${objectId} = 472 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescodeReturn} ${rescodeReturn} = 200 ${rescode} = 200 ${object_Subid_Id} = 472 Logs the given message with the given level. ${object_Subid_Id} 472 Returns the given values which can then be assigned to a variables. ${object_Subid_Id} ${objectids} ${objectids} = 472 {"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn_category","objectSubType":"","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00002-Categry","objectDesc":"autotest","subObjectIds":[],"addItemList":[{"keywordArray":["*www.ccb.com"],"itemId":"","isValid":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[],"objectId":""}} ${rescodeip} ${object_Category_Id} /v1/policy/object body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.136421 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*www.ccb.com'], 'isValid': '', 'isHexbin': 0}], 'deleteItemIds': [], 'isE... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "objectList": [ { "addItemList": [ { "itemId": "", "keywordArray": [ "*www.ccb.com" ], "isValid": "", "isHexbin": 0 } ], "deleteItemIds": [], "isExclusion": 0, "isInitialize": 0, "isValid": 1, "objectDesc": "autotest", "objectId": 473, "objectName": "SecurityPolicy-Allow-Http-00002-Categry", "objectSubType": "", "objectType": "fqdn_category", "opTime": "2020-04-01 12:21:51", "opUser": 981, "subObjectIds": [], "updateItemList": [] } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*www.ccb.com'], 'isValid': '', 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isVal... ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*www.ccb.com'], 'isValid': '', 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isVal... Returns the given values which can then be assigned to a variables. ${response['data']['objectList'][0]['objectId']} ${objectId} ${objectId} = 473 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescodeReturn} ${rescodeReturn} = 200 ${rescodeip} = 200 ${object_Category_Id} = 473 Logs the given message with the given level. ${object_Category_Id} 473 Returns the given values which can then be assigned to a variables. ${object_Subid_Id},${object_Category_Id} ${objectids} ${objectids} = 472,473 Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002_deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${object_Subid_Id},"protocolFields":[null]},{"objectId":${object_Category_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002_deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po... Logs the given message with the given level. ${addPolicyStr} {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002_deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":472,"protocolFields":[null]},{"objectId":473,"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${rescode} ${policyId1} /v1/policy/compile body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.169178 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 60.0, 'evalu... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "policyList": [ { "action": "deny", "appObjectIdArray": [ 2 ], "doLog": 1, "evaluationLayer": "session_layer", "evaluationOrder": 60.0, "evaluationStage": 1, "isValid": 1, "newSubIdObjName": "SecurityPolicy-Allow-Http-00002_subid", "opTime": "2020-04-01 12:21:51", "opUser": 981, "policyDesc": "autotest", "policyId": 76, "policyName": "SecurityPolicy-Allow-Http-00002_deny", "policyType": "tsg_security", "protocol": "HTTP", "referenceObject": [], "scheduleId": [], "userRegion": { "protocol": "HTTP", "method": "drop" }, "userTags": "" } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 60.0, 'evaluationStage': 1, 'isValid': 1, 'newSubId... ${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 60.0, 'evaluationStage': 1, 'isValid': 1, 'newSubId... Returns the given values which can then be assigned to a variables. ${response['data']['policyList'][0]['policyId']} ${policyId} ${policyId} = 76 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescode} ${rescode} = 200 ${rescode} = 200 ${policyId1} = 76 Logs the given message with the given level. ${policyId1} 76 Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId1}]} ${policyIds} ${policyIds} = {"policyType":"tsg_security","policyIds":[76]} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${object_Subid_Id},"protocolFields":[null]},{"objectId":${object_Category_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy... ${addPolicyStr} ${rescode} ${policyId2} /v1/policy/compile body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.224751 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 61.0, 'eval... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "policyList": [ { "action": "allow", "appObjectIdArray": [ 2 ], "doLog": 1, "evaluationLayer": "session_layer", "evaluationOrder": 61.0, "evaluationStage": 1, "isValid": 1, "newSubIdObjName": "SecurityPolicy-Allow-Http-00002_subid", "opTime": "2020-04-01 12:21:51", "opUser": 981, "policyDesc": "autotest", "policyId": 77, "policyName": "SecurityPolicy-Allow-Http-00002", "policyType": "tsg_security", "protocol": "HTTP", "referenceObject": [], "scheduleId": [], "userRegion": { "protocol": "HTTP" }, "userTags": "" } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 61.0, 'evaluationStage': 1, 'isValid': 1, 'newSubI... ${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 61.0, 'evaluationStage': 1, 'isValid': 1, 'newSubI... Returns the given values which can then be assigned to a variables. ${response['data']['policyList'][0]['policyId']} ${policyId} ${policyId} = 77 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescode} ${rescode} = 200 ${rescode} = 200 ${policyId2} = 77 Logs the given message with the given level. ${policyId2} 77 Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId1}]} ${policyIds1} ${policyIds1} = {"policyType":"tsg_security","policyIds":[76]} Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId2}]} ${policyIds2} ${policyIds2} = {"policyType":"tsg_security","policyIds":[77]} Returns a list containing given items. ${policyIds1} ${policyIds2} ${policyIds} ${policyIds} = ['{"policyType":"tsg_security","policyIds":[76]}', '{"policyType":"tsg_security","policyIds":[77]}'] Pauses the test executed for the given time. ${policyVerificationSleepSeconds}s Slept 20 seconds Returns the given time in the requested format. ${starttime} ${starttime} = 2020-04-01 12:22:12 Runs the given command in the system and returns the output. curl -I \ -m \ 10 \ -o \ /dev/null \ -s \ -w \ \ \%{http_code} \ \ http://www.ccb.com ${commandreturn} Running command 'curl -I -m 10 -o /dev/null -s -w %{http_code} http://www.ccb.com 2>&1'. ${commandreturn} = 200 Fails if ``container`` does not contain ``item`` one or more times. ${commandreturn} 200 Pauses the test executed for the given time. ${policyLogVerificationSleepSeconds}s Slept 50 seconds Returns the given time in the requested format. ${endtime} ${endtime} = 2020-04-01 12:23:04 Converts the given item to a Unicode string. ${policyId2} ${s} ${s} = 77 security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host ccb ${logType} ${startTime} ${endTime} ${client_ip} ${policy_id} ${logCondition} settings *Sets new request headers or updates the existing.* {"Content-Type":"application/x-www-form-urlencoded","Authorization":"${token}"} http *Sends a GET request to the endpoint.* /v1/log/schema?logType=${logname} &{LogSchemaResponse} &{LogSchemaResponse} = { seconds=0.043569000000000004 | status=200 | body={'code': 200, 'data': {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_s... Logs the given message with the given level. ${logname} security_event_log I/O *Outputs JSON Schema to terminal or a file.* response body { "type": "object", "properties": { "code": { "type": "integer", "default": 200 }, "data": { "type": "object", "properties": { "doc": { "type": "object", "properties": { "schema_query": { "type": "object", "properties": { "dimensions": { "type": "array", "items": { "type": "string" }, "default": [ "common_server_ip", "common_client_ip", "common_policy_id", "common_action", "common_sled_ip", "common_server_location", "common_subscriber_id", "http_domain" ] }, "metrics": { "type": "array", "items": { "type": "string" }, "default": [ "common_server_ip", "common_client_ip", "common_subscriber_id", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num" ] }, "filters": { "type": "array", "items": { "type": "string" }, "default": [ "common_policy_id", "common_action", "common_address_type", "common_server_ip", "common_client_ip", "common_server_port", "common_server_location", "common_subscriber_id", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "http_domain", "http_content_type", "ssl_sni", "ssl_pinningst", "ssl_intercept_state" ] } }, "required": [ "dimensions", "filters", "metrics" ] }, "schema_type": { "type": "object", "properties": { "BASE": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "HTTP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "http_url", "http_host", "http_domain", "http_request_line", "http_response_line", "http_request_header", "http_response_header", "http_request_body", "http_response_body", "http_request_body_key", "http_response_body_key", "http_proxy_flag", "http_sequence", "http_snapshot", "http_cookie", "http_referer", "http_user_agent", "http_content_length", "http_content_type", "http_set_cookie", "http_version", "http_response_lantency_ms", "http_session_duration_ms" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "http_url", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "MAIL": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "mail_protocol_type", "mail_account", "mail_from_cmd", "mail_to_cmd", "mail_from", "mail_to", "mail_cc", "mail_bcc", "mail_subject", "mail_subject_charset", "mail_content", "mail_content_charset", "mail_attachment_name", "mail_attachment_name_charset", "mail_attachment_content", "mail_eml_file", "mail_snapshot" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "mail_from", "mail_to", "mail_subject" ] } }, "required": [ "columns", "default_columns" ] }, "DNS": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "dns_message_id", "dns_qr", "dns_opcode", "dns_aa", "dns_tc", "dns_rd", "dns_ra", "dns_rcode", "dns_qdcount", "dns_ancount", "dns_nscount", "dns_arcount", "dns_qname", "dns_qtype", "dns_qclass", "dns_cname", "dns_sub", "dns_rr" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_client_ip", "dns_qr", "dns_qname", "dns_qtype" ] } }, "required": [ "columns", "default_columns" ] }, "SSL": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "ssl_sni", "ssl_san", "ssl_cn", "ssl_pinningst", "ssl_intercept_state", "ssl_server_side_latency", "ssl_client_side_latency", "ssl_server_side_version", "ssl_client_side_version", "ssl_cert_verify", "ssl_error", "ssl_con_latency_ms" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "ssl_sni", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "FTP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "ftp_account", "ftp_url", "ftp_content" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "ftp_url", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "BGP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "bgp_type", "bgp_as_num", "bgp_route" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "bgp_type", "bgp_as_num", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "VOIP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "voip_calling_account", "voip_called_account", "voip_calling_number", "voip_called_number" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "voip_calling_account", "voip_called_account", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] } }, "required": [ "BASE", "BGP", "DNS", "FTP", "HTTP", "MAIL", "SSL", "VOIP" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_server_ip", "common_server_port", "common_schema_type" ] } }, "required": [ "default_columns", "schema_query", "schema_type" ] }, "fields": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string" }, "type": { "type": "string" }, "doc": { "type": "object", "properties": { "allow_query": { "type": "string" }, "constraints": { "type": "object", "properties": { "type": { "type": "string" } }, "required": [ "type" ] }, "format": { "type": "object", "properties": { "functions": { "type": "string" }, "appendTo": { "type": "string" }, "param": { "type": "string" } }, "required": [ "functions" ] }, "data": { "type": "array", "items": { "type": "object", "properties": { "code": { "type": "string" }, "value": { "type": "string" } }, "required": [ "code", "value" ] } }, "visibility": { "type": "string" } } }, "label": { "type": "string" } }, "required": [ "label", "name", "type" ] }, "default": [ { "name": "common_recv_time", "type": "int", "doc": { "allow_query": "true", "constraints": { "type": "timestamp" }, "format": { "functions": "current_timestamp" } }, "label": "Receive Time" }, { "name": "common_log_id", "type": "long", "doc": { "allow_query": "true", "format": { "functions": "snowflake_id" } }, "label": "Log ID" }, { "name": "common_policy_id", "type": "int", "doc": { "allow_query": "true" }, "label": "Policy ID" }, { "name": "common_subscriber_id", "type": "string", "doc": { "allow_query": "true" }, "label": "Subscriber ID" }, { "name": "common_client_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" }, "format": { "functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id" } }, "label": "Client IP" }, { "name": "common_client_port", "type": "int", "label": "Client Port" }, { "name": "common_l4_protocol", "type": "string", "label": "L4 Protocol" }, { "name": "common_address_type", "type": "int", "doc": { "data": [ { "code": "4", "value": "ipv4" }, { "code": "6", "value": "ipv6" } ] }, "label": "Address Type" }, { "name": "common_server_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" }, "format": { "functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn" } }, "label": "Server IP" }, { "name": "common_server_port", "type": "int", "doc": { "allow_query": "true" }, "label": "Server Port" }, { "name": "common_action", "type": "int", "doc": { "allow_query": "true", "data": [ { "code": "0", "value": "None" }, { "code": "1", "value": "Monitor" }, { "code": "2", "value": "Intercept" }, { "code": "16", "value": "Deny" }, { "code": "48", "value": "Manipulation" }, { "code": "128", "value": "Allow" } ] }, "label": "Action" }, { "name": "common_direction", "type": "int", "doc": { "data": [ { "code": "0", "value": "outbound" }, { "code": "1", "value": "inbound" } ] }, "label": "Direction" }, { "name": "common_entrance_id", "type": "int", "doc": { "visibility": "disabled" }, "label": "Entrance ID" }, { "name": "common_sled_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" } }, "label": "Sled IP" }, { "name": "common_client_location", "type": "string", "label": "Client Location" }, { "name": "common_client_asn", "type": "string", "label": "Client ASN" }, { "name": "common_server_location", "type": "string", "label": "Server Location" }, { "name": "common_server_asn", "type": "string", "label": "Server ASN" }, { "name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent" }, { "name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received" }, { "name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent" }, { "name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received" }, { "name": "common_service", "type": "int", "doc": { "visibility": "disabled" }, "label": "Service" }, { "name": "common_schema_type", "type": "string", "doc": { "data": [ { "code": "BASE", "value": "BASE" }, { "code": "HTTP", "value": "HTTP" }, { "code": "MAIL", "value": "MAIL" }, { "code": "DNS", "value": "DNS" }, { "code": "SSL", "value": "SSL" }, { "code": "FTP", "value": "FTP" }, { "code": "BGP", "value": "BGP" }, { "code": "VOIP", "value": "VOIP" }, { "code": "RADIUS", "value": "RADIUS" } ], "allow_query": "true" }, "label": "Schema Type" }, { "name": "common_user_tags", "type": "string", "doc": { "visibility": "disabled" }, "label": "User Tags" }, { "name": "common_sub_action", "type": "string", "doc": { "visibility": "hidden" }, "label": "Sub Action" }, { "name": "common_user_region", "type": "string", "doc": { "visibility": "hidden" }, "label": "User Region" }, { "name": "common_device_id", "type": "string", "doc": { "visibility": "disabled" }, "label": "Device ID" }, { "name": "common_link_id", "type": "int", "doc": { "visibility": "disabled" }, "label": "Link ID" }, { "name": "common_isp", "type": "string", "doc": { "visibility": "disabled" }, "label": "ISP" }, { "name": "common_encapsulation", "type": "int", "doc": { "data": [ { "code": "0", "value": "Ethernet" }, { "code": "8", "value": "PPP" }, { "code": "12", "value": "CiscoHDLC" } ] }, "label": "Encapsulation" }, { "name": "common_app_label", "type": "string", "doc": { "visibility": "disabled" }, "label": "Application Label" }, { "name": "common_app_id", "type": "int", "doc": { "data": [ { "code": "0", "value": "NOT SPECIFIED" }, { "code": "100001", "value": "Skype" }, { "code": "100101", "value": "Instagram" }, { "code": "100201", "value": "Youtube" }, { "code": "100301", "value": "Facebook" }, { "code": "100401", "value": "What‘s App" }, { "code": "100501", "value": "Periscope" }, { "code": "100601", "value": "Viber" }, { "code": "100701", "value": "Twitter" }, { "code": "100801", "value": "Vkontakte" }, { "code": "100901", "value": "Telegram" }, { "code": "101001", "value": "Odnoklassniki" }, { "code": "101101", "value": "Mail agent" }, { "code": "101201", "value": "FaceTime" }, { "code": "101301", "value": "Snapchat" }, { "code": "101401", "value": "Google" }, { "code": "101501", "value": "Yandex" }, { "code": "101601", "value": "Yandex Browser Turbo" }, { "code": "101701", "value": "Opera" }, { "code": "101702", "value": "Opera Turbo" }, { "code": "101703", "value": "Opera mini" }, { "code": "101801", "value": "AppStore" }, { "code": "101901", "value": "PlayMarket" }, { "code": "102001", "value": "Drugvokrug social networking" }, { "code": "102101", "value": "Badoo social networking" }, { "code": "102201", "value": "WeChat" }, { "code": "102301", "value": "Zello" }, { "code": "102401", "value": "Freegate" }, { "code": "102501", "value": "Psiphon" }, { "code": "102601", "value": "TOR" }, { "code": "102602", "value": "Tor browser" }, { "code": "102603", "value": "Tor mode" }, { "code": "102701", "value": "Orbot" }, { "code": "102801", "value": "Tunnel Bear VPN" }, { "code": "102901", "value": "HotSpot Shield VPN" }, { "code": "103001", "value": "VPN Master" }, { "code": "103101", "value": "Hola VPN" }, { "code": "103201", "value": "HideMyAss VPN" }, { "code": "103301", "value": "Zenmate VPN" }, { "code": "103401", "value": "SignalPrivateMessenger" }, { "code": "200001", "value": "RFA" }, { "code": "200002", "value": "VOA" }, { "code": "200003", "value": "lantern" }, { "code": "200004", "value": "Line" }, { "code": "200005", "value": "voxer" }, { "code": "200006", "value": "ZeroNet" }, { "code": "200007", "value": "Zalo" }, { "code": "200008", "value": "free_browser" }, { "code": "200009", "value": "Diaspora" }, { "code": "200010", "value": "browsec" }, { "code": "200011", "value": "Chrome_plugin_chuguo" }, { "code": "200012", "value": "GoGo_SocksHttp" }, { "code": "200013", "value": "ultrasurf_chrome" }, { "code": "200014", "value": "pinterest" }, { "code": "200015", "value": "Swisscom" }, { "code": "200016", "value": "Threema" }, { "code": "200017", "value": "Circuit_iOS" }, { "code": "200018", "value": "Chrome_plugin_FastsTunnel" }, { "code": "200019", "value": "OoVoo" }, { "code": "200020", "value": "Vine" }, { "code": "200021", "value": "Keek" }, { "code": "200022", "value": "Hi" }, { "code": "200023", "value": "HeyTell" }, { "code": "200024", "value": "HikeMessenger" }, { "code": "200025", "value": "Nonoh" }, { "code": "200026", "value": "Path" }, { "code": "200027", "value": "Kik" }, { "code": "200028", "value": "BBM" }, { "code": "200029", "value": "Talkray" }, { "code": "200030", "value": "HelloTalk" }, { "code": "200031", "value": "Skout" }, { "code": "200032", "value": "MeetMe" }, { "code": "200033", "value": "Nextdoor" }, { "code": "200034", "value": "Shots" }, { "code": "200035", "value": "Zoosk" }, { "code": "200036", "value": "TextPlus" }, { "code": "200037", "value": "Maaii" }, { "code": "200038", "value": "Ustream" }, { "code": "200039", "value": "Yikyak" }, { "code": "200040", "value": "chatsecure" }, { "code": "200041", "value": "freecalls" }, { "code": "200042", "value": "SignalPrivateMessenger" }, { "code": "200043", "value": "USGOV_CIA" }, { "code": "200044", "value": "USGOV_FBI" }, { "code": "200045", "value": "USGOV_DHS" }, { "code": "200046", "value": "shenxun_Secure_Call_android" }, { "code": "200047", "value": "shenxun_Secure_Call_web" }, { "code": "200048", "value": "UProxy" }, { "code": "200049", "value": "soma" }, { "code": "200050", "value": "PlayerUnknown's_Battlegrounds" }, { "code": "200051", "value": "STEAM" }, { "code": "200052", "value": "dalai_lama" }, { "code": "200053", "value": "Steam_forum" }, { "code": "200054", "value": "Microsoft Online Certificate" }, { "code": "200055", "value": "sogou_spider" }, { "code": "200056", "value": "baidu_mobie" }, { "code": "200057", "value": "Apple Push Service" }, { "code": "200058", "value": "IQIYI" }, { "code": "200059", "value": "baidu_spider" }, { "code": "200060", "value": "Weibo" }, { "code": "200061", "value": "Apple captive service" }, { "code": "200062", "value": "Microsoft wns" }, { "code": "200063", "value": "360_safe_pc" }, { "code": "200064", "value": "Sogou Public Service" }, { "code": "200065", "value": "Lenovo app_POST service" }, { "code": "200066", "value": "Apple securityd service" }, { "code": "200067", "value": "Weather pass" }, { "code": "200068", "value": "Apple Service Pack" }, { "code": "200069", "value": "Fast pressure" }, { "code": "200070", "value": "SemrushBot" }, { "code": "200071", "value": "Adrefs_spider" }, { "code": "200072", "value": "AndroidDownloadManager" }, { "code": "200073", "value": "XenderTop" }, { "code": "200074", "value": "microsoft_update" }, { "code": "200075", "value": "Youku" }, { "code": "200076", "value": "Google_spider" }, { "code": "200077", "value": "Microsoft User Experience and Telemetry Components" }, { "code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT" }, { "code": "200079", "value": "Microsoft ncsi" }, { "code": "200080", "value": "Microsoft Privacy Collection Service" }, { "code": "200081", "value": "uTorrent" }, { "code": "200082", "value": "Edge" }, { "code": "200083", "value": "Lenovo Music Store" }, { "code": "200084", "value": "LieBao" }, { "code": "200085", "value": "majesti_spider" }, { "code": "200086", "value": "DotBot" }, { "code": "200087", "value": "Millet Update" }, { "code": "200088", "value": "Today’s headlines" }, { "code": "200089", "value": "Microsoft live" }, { "code": "200090", "value": "Microsoft OneNote" }, { "code": "200091", "value": "Bing_spider" }, { "code": "200092", "value": "Apple location service" }, { "code": "200093", "value": "Kuaishou" }, { "code": "200094", "value": "LeTV video" }, { "code": "200095", "value": "QQ" }, { "code": "200096", "value": "Wps" }, { "code": "200097", "value": "kugou music" }, { "code": "200098", "value": "kuwo music" }, { "code": "200099", "value": "360_common_service" }, { "code": "200100", "value": "Camera360" }, { "code": "200101", "value": "Outlook" }, { "code": "200102", "value": "zhihu" }, { "code": "200103", "value": "Tencent video" }, { "code": "200104", "value": "funshion" }, { "code": "200105", "value": "QQ shared service" }, { "code": "200106", "value": "Microsoft wdcp service" }, { "code": "200107", "value": "Microsoft Media_center_pc" }, { "code": "200108", "value": "360 phone helper" }, { "code": "200109", "value": "Kingsoft Public Service" }, { "code": "200110", "value": "Ios_wifi connection" }, { "code": "200111", "value": "Teamviewer" }, { "code": "200112", "value": "Baidu cloud disk" }, { "code": "200113", "value": "Tencent News" }, { "code": "200114", "value": "Baidu map" }, { "code": "200115", "value": "Panda TV" }, { "code": "200116", "value": "Thunder" }, { "code": "200117", "value": "NetEase cloud music" }, { "code": "200118", "value": "QQ music" }, { "code": "200119", "value": "Itools" }, { "code": "200120", "value": "Jingdong Finance" }, { "code": "200121", "value": "PycURL" }, { "code": "200122", "value": "Yahoo_Spider" }, { "code": "200123", "value": "Himalayan FM" }, { "code": "200124", "value": "Youdao_dict" }, { "code": "200125", "value": "Microsoft_spynet" }, { "code": "200126", "value": "proximicBot" }, { "code": "200127", "value": "Foxit_reader" }, { "code": "200128", "value": "Sohu Video" }, { "code": "200129", "value": "BlueStacks" }, { "code": "200130", "value": "Beauty group" }, { "code": "200131", "value": "Kmplayer" }, { "code": "200132", "value": "TaoBao" }, { "code": "200133", "value": "Exabot" }, { "code": "200134", "value": "Ubuntu_apt_get" }, { "code": "200135", "value": "Oriental Fortune" }, { "code": "200136", "value": "JikeSpider" }, { "code": "200137", "value": "Itunesstored" }, { "code": "200138", "value": "GAD map" }, { "code": "200139", "value": "ifeng News" }, { "code": "200140", "value": "BoardReaderBot" }, { "code": "200141", "value": "AmazonBot" }, { "code": "200142", "value": "Alipay" }, { "code": "200143", "value": "Alipay security controls" }, { "code": "200144", "value": "360 security guards (antivirus)" }, { "code": "200145", "value": "360 logon service" }, { "code": "200146", "value": "BLP_bbot" }, { "code": "200147", "value": "Keep" }, { "code": "200148", "value": "WiFi universal key" }, { "code": "200149", "value": "Baidu Music" }, { "code": "200150", "value": "Vip.com" }, { "code": "200151", "value": "JD.COM" }, { "code": "200152", "value": "sina" }, { "code": "200153", "value": "youdao Public service" }, { "code": "200154", "value": "Jinshan public service" }, { "code": "200155", "value": "Baidu guard" }, { "code": "200156", "value": "Apple system update service" }, { "code": "200157", "value": "momo" }, { "code": "200158", "value": "CNZZ statistics" }, { "code": "200159", "value": "Microsoft one_drive service" }, { "code": "200160", "value": "WindowsStore" }, { "code": "200161", "value": "duba" }, { "code": "200162", "value": "Baidu HD" }, { "code": "200163", "value": "qunar" }, { "code": "200164", "value": "qianxunyingshi" }, { "code": "200165", "value": "KuaiyanKanShuSpider" }, { "code": "200166", "value": "Mail.RU_Bot_Robot" }, { "code": "200167", "value": "MpCommunication" }, { "code": "200168", "value": "Weather forecast" }, { "code": "200169", "value": "Ltx71_spider" }, { "code": "200170", "value": "Ia_archiver" }, { "code": "200171", "value": "Ali Wangwang" }, { "code": "200172", "value": "UC home page (information)" }, { "code": "200173", "value": "Yeti" }, { "code": "200174", "value": "Rtorrent" }, { "code": "200175", "value": "QQPim" }, { "code": "200176", "value": "NetEase News" }, { "code": "200177", "value": "sina sports" }, { "code": "200178", "value": "Exchange of foreign exchange" }, { "code": "200179", "value": "BlueStacks update" }, { "code": "200180", "value": "youdao" }, { "code": "200181", "value": "QQ computer housekeeper" }, { "code": "200182", "value": "UltraEdit" }, { "code": "200183", "value": "EasouSpider" }, { "code": "200184", "value": "QQ Zone" }, { "code": "200185", "value": "Foxmail" }, { "code": "200186", "value": "Pingdom.com" }, { "code": "200187", "value": "Sina Finance" }, { "code": "200188", "value": "QQ one key login" }, { "code": "200189", "value": "Norton" }, { "code": "200190", "value": "Baidu waimai" }, { "code": "200191", "value": "YaCy" }, { "code": "200192", "value": "Haitong e Haitong" }, { "code": "200193", "value": "AdsBot-Google" }, { "code": "200194", "value": "Guangfa Yijin" }, { "code": "200195", "value": "Ali security program" }, { "code": "200196", "value": "Cliqzbot" }, { "code": "200197", "value": "Mobike" }, { "code": "200198", "value": "Kingsoft PowerWord" }, { "code": "200199", "value": "meishij" }, { "code": "200200", "value": "CCB mobile bank" }, { "code": "200201", "value": "Mega SkyDrive" }, { "code": "200202", "value": "douyu" }, { "code": "200203", "value": "Flamingo_SearchEngine" }, { "code": "200204", "value": "Lenovo shop" }, { "code": "200205", "value": "Uc news" }, { "code": "200206", "value": "Volcano small video" }, { "code": "200207", "value": "Meitu Xiu Xiu" }, { "code": "200208", "value": "Kaspersky" }, { "code": "200209", "value": "AcFun" }, { "code": "200210", "value": "Slackbot" }, { "code": "200211", "value": "Snowball" }, { "code": "200212", "value": "SafeDNSBot" }, { "code": "200213", "value": "Great wisdom" }, { "code": "200214", "value": "Mailbox of NetEase" }, { "code": "200215", "value": "peasecod" }, { "code": "200216", "value": "Gold ten data" }, { "code": "200217", "value": "Linkdexbot" }, { "code": "200218", "value": "Sina blog" }, { "code": "200219", "value": "Ginger" }, { "code": "200220", "value": "Microsoft activation verification" }, { "code": "200221", "value": "Facebot" }, { "code": "200222", "value": "Dangdang" }, { "code": "200223", "value": "QQ cyclone" }, { "code": "200224", "value": "Wp_feedbot" }, { "code": "200225", "value": "ICBC" }, { "code": "200226", "value": "Public service" }, { "code": "200227", "value": "Magpie-crawler" }, { "code": "200228", "value": "xianyu" }, { "code": "200229", "value": "GetIntentBot" }, { "code": "200230", "value": "Papers" }, { "code": "200231", "value": "NewsGator" }, { "code": "200232", "value": "RankFlexBot" }, { "code": "200233", "value": "rogerbot" }, { "code": "200234", "value": "SurdotlyBot" }, { "code": "200235", "value": "CheckMarkNetworkBot" }, { "code": "200236", "value": "pyspider" }, { "code": "200237", "value": "spbot" }, { "code": "200238", "value": "Huaxia Bank" }, { "code": "200239", "value": "glory of king" }, { "code": "200240", "value": "msnbot-Products" }, { "code": "200241", "value": "archive.org" }, { "code": "200242", "value": "applebot" }, { "code": "200243", "value": "alicall" }, { "code": "200244", "value": "Superfeedrbot" }, { "code": "200245", "value": "QQ mailbox" }, { "code": "200246", "value": "coccocbot-webBot" }, { "code": "200247", "value": "dingtalk" }, { "code": "200248", "value": "Dragonbot" }, { "code": "200249", "value": "Mediatoolkitbot" }, { "code": "200250", "value": "bitcomet" }, { "code": "200251", "value": "filetopia" }, { "code": "200252", "value": "flashget" }, { "code": "200253", "value": "oracle" }, { "code": "200254", "value": "yyvoice" }, { "code": "200255", "value": "imesh" }, { "code": "200256", "value": "citrix" }, { "code": "200257", "value": "corba" }, { "code": "200258", "value": "dameware" }, { "code": "200259", "value": "pcanywhere" }, { "code": "200260", "value": "qq_rdp" }, { "code": "200261", "value": "poco" }, { "code": "200262", "value": "qqdownload" }, { "code": "200263", "value": "applejuice" }, { "code": "200264", "value": "stealthnet" }, { "code": "200265", "value": "winmx" }, { "code": "200266", "value": "emule" }, { "code": "200267", "value": "emule_decrypt" }, { "code": "200268", "value": "qvod" }, { "code": "200269", "value": "mysql" }, { "code": "200270", "value": "icecast" }, { "code": "200271", "value": "mms" }, { "code": "200272", "value": "pplive" }, { "code": "200273", "value": "ppstream" }, { "code": "200274", "value": "sopcast" }, { "code": "200275", "value": "tvants" }, { "code": "200276", "value": "sohutv" }, { "code": "200277", "value": "iku" }, { "code": "200278", "value": "qqlive" }, { "code": "200279", "value": "rsync" }, { "code": "200280", "value": "xunyou_speedup" }, { "code": "200281", "value": "msn" }, { "code": "200282", "value": "popo" }, { "code": "200283", "value": "sinauc" }, { "code": "200284", "value": "qqbattle" }, { "code": "200285", "value": "quake" }, { "code": "200286", "value": "xbox" }, { "code": "200287", "value": "wow" }, { "code": "200288", "value": "lol" }, { "code": "200289", "value": "PostgreSQL" }, { "code": "200290", "value": "TDS" }, { "code": "200291", "value": "VMware" }, { "code": "200292", "value": "Kontiki" }, { "code": "200293", "value": "OpenFT" }, { "code": "200294", "value": "Gnutella" }, { "code": "200295", "value": "eDonkey" }, { "code": "200296", "value": "AVI" }, { "code": "200297", "value": "RealMedia" }, { "code": "200298", "value": "Windowsmedia" }, { "code": "200299", "value": "MOVE" }, { "code": "200300", "value": "Feidian" }, { "code": "200301", "value": "Zattoo" }, { "code": "200302", "value": "SHOUTCast" }, { "code": "200303", "value": "TVUplayer" }, { "code": "200304", "value": "VeohTV" }, { "code": "200305", "value": "Soulseek" }, { "code": "200306", "value": "GaduGadu" }, { "code": "200307", "value": "Oscar" }, { "code": "200308", "value": "Yahoo" }, { "code": "200309", "value": "Battlefield" }, { "code": "200310", "value": "Halflife2" }, { "code": "200311", "value": "World of Warcraft" }, { "code": "200312", "value": "USENET" }, { "code": "200313", "value": "AFP" }, { "code": "200314", "value": "Truphone" }, { "code": "200315", "value": "Armagetron" }, { "code": "200316", "value": "CrossFire" }, { "code": "200317", "value": "Dofus" }, { "code": "200318", "value": "Fiesta" }, { "code": "200319", "value": "Florensia" }, { "code": "200320", "value": "Guildwars" }, { "code": "200321", "value": "HTTP Application Activesync" }, { "code": "200322", "value": "MapleStory" }, { "code": "200323", "value": "msSQL" }, { "code": "200324", "value": "WARCRAFT3" }, { "code": "200325", "value": "World of Kung Fu" }, { "code": "200326", "value": "MEEBO" }, { "code": "200327", "value": "DropBox" }, { "code": "200328", "value": "HTTP Proxy" }, { "code": "200329", "value": "Netflix" }, { "code": "200330", "value": "CitrixOnline/GotoMeeting" }, { "code": "200331", "value": "Webex" }, { "code": "200332", "value": "Apple iCloud" }, { "code": "200333", "value": "Apple iTunes" }, { "code": "200334", "value": "WindowsUpdate" }, { "code": "200335", "value": "Tuenti" }, { "code": "200336", "value": "LotusNotes" }, { "code": "200337", "value": "RemoteScan" }, { "code": "200338", "value": "Spotify" }, { "code": "200339", "value": "CiscoVPN" }, { "code": "200340", "value": "TeamSpeak" }, { "code": "200341", "value": "UbuntuONE" }, { "code": "200342", "value": "CNN" }, { "code": "200343", "value": "Wikipedia" }, { "code": "200344", "value": "Collectd" }, { "code": "200345", "value": "Redis" }, { "code": "200346", "value": "ZeroMQ" }, { "code": "200347", "value": "Stracraft" }, { "code": "200348", "value": "Simet" }, { "code": "200349", "value": "OpenSignal" }, { "code": "200350", "value": "99Taxi" }, { "code": "200351", "value": "GloboTV" }, { "code": "200352", "value": "Deezer" }, { "code": "200353", "value": "Microsoft cloud services" }, { "code": "200354", "value": "Twitch" }, { "code": "200355", "value": "KakaoTalk Voice and Chat" }, { "code": "200357", "value": "360.cn" }, { "code": "200358", "value": "360Safeguard_P2P" }, { "code": "200359", "value": "4D" }, { "code": "200360", "value": "acercloud" }, { "code": "200361", "value": "acestream" }, { "code": "200362", "value": "airdroid" }, { "code": "200363", "value": "airmedia" }, { "code": "200364", "value": "akamai" }, { "code": "200365", "value": "akamai_transfer" }, { "code": "200366", "value": "amanda" }, { "code": "200367", "value": "amp" }, { "code": "200368", "value": "Appear.in" }, { "code": "200369", "value": "ares" }, { "code": "200370", "value": "ARKSurvivalEvolved" }, { "code": "200371", "value": "ARMA3Server" }, { "code": "200372", "value": "ARMA2Server" }, { "code": "200373", "value": "AvastSecureDNS" }, { "code": "200374", "value": "azureus" }, { "code": "200375", "value": "backweb" }, { "code": "200376", "value": "BadBaidu" }, { "code": "200377", "value": "baofeng" }, { "code": "200378", "value": "bitext" }, { "code": "200379", "value": "BlackDesertOnline" }, { "code": "200380", "value": "Blizzard" }, { "code": "200381", "value": "bmdp" }, { "code": "200382", "value": "bncs" }, { "code": "200383", "value": "btdht" }, { "code": "200384", "value": "btsync" }, { "code": "200385", "value": "cacaoweb" }, { "code": "200386", "value": "chatango" }, { "code": "200387", "value": "chivalry" }, { "code": "200388", "value": "cirn" }, { "code": "200389", "value": "cisco_sslvpn" }, { "code": "200390", "value": "clash_of_clans" }, { "code": "200391", "value": "Clubbox" }, { "code": "200392", "value": "cod" }, { "code": "200393", "value": "cod_waw" }, { "code": "200394", "value": "combatarms" }, { "code": "200395", "value": "combatarms_p2p" }, { "code": "200396", "value": "ConquerOnline" }, { "code": "200397", "value": "Counterstrike1.6" }, { "code": "200398", "value": "Checkpoint_RDP" }, { "code": "200399", "value": "crashplan" }, { "code": "200400", "value": "crossout" }, { "code": "200401", "value": "cryptic" }, { "code": "200402", "value": "cvs" }, { "code": "200403", "value": "dash" }, { "code": "200404", "value": "dc" }, { "code": "200405", "value": "db2" }, { "code": "200406", "value": "dell_backup" }, { "code": "200407", "value": "Demonware" }, { "code": "200408", "value": "destiny" }, { "code": "200409", "value": "diablo2" }, { "code": "200410", "value": "isakmp" }, { "code": "200411", "value": "jedi" }, { "code": "200412", "value": "jedi_academy" }, { "code": "200413", "value": "jx3online" }, { "code": "200414", "value": "kankan" }, { "code": "200415", "value": "kaseya" }, { "code": "200416", "value": "kazaa" }, { "code": "200417", "value": "kuaibo" }, { "code": "200418", "value": "lifeforge" }, { "code": "200419", "value": "linkproof" }, { "code": "200420", "value": "litecoin" }, { "code": "200421", "value": "maxicloud" }, { "code": "200422", "value": "merakicloud" }, { "code": "200423", "value": "minecraft" }, { "code": "200424", "value": "mongo" }, { "code": "200425", "value": "msoffice_mac" }, { "code": "200426", "value": "munin" }, { "code": "200427", "value": "mzinga" }, { "code": "200428", "value": "n2ping" }, { "code": "200429", "value": "ncsoft" }, { "code": "200430", "value": "netcat_cctv" }, { "code": "200431", "value": "neverwinter" }, { "code": "200432", "value": "newerth" }, { "code": "200433", "value": "nintendo" }, { "code": "200434", "value": "nntps" }, { "code": "200435", "value": "noction" }, { "code": "200436", "value": "noe" }, { "code": "200437", "value": "norton_backup" }, { "code": "200438", "value": "omegle" }, { "code": "200439", "value": "opaserv" }, { "code": "200440", "value": "orbit" }, { "code": "200441", "value": "ourworld" }, { "code": "200442", "value": "overwatch" }, { "code": "200443", "value": "diablo3" }, { "code": "200444", "value": "dianping" }, { "code": "200445", "value": "dianshijia" }, { "code": "200446", "value": "discord" }, { "code": "200447", "value": "dogecoin" }, { "code": "200448", "value": "dota2" }, { "code": "200449", "value": "douyu_chat" }, { "code": "200450", "value": "doyo" }, { "code": "200451", "value": "driveshare" }, { "code": "200452", "value": "dtls" }, { "code": "200453", "value": "dueling_network" }, { "code": "200454", "value": "dvrns" }, { "code": "200455", "value": "dxp" }, { "code": "200456", "value": "ea_games" }, { "code": "200457", "value": "epson" }, { "code": "200458", "value": "eso" }, { "code": "200459", "value": "etrust" }, { "code": "200460", "value": "fasp" }, { "code": "200461", "value": "finalfantasy_xiv" }, { "code": "200462", "value": "flash" }, { "code": "200463", "value": "fliggy" }, { "code": "200464", "value": "fortinet" }, { "code": "200465", "value": "foscam" }, { "code": "200466", "value": "freechal" }, { "code": "200467", "value": "fring" }, { "code": "200468", "value": "fuckcoin" }, { "code": "200469", "value": "gamespy" }, { "code": "200470", "value": "gangsofspace" }, { "code": "200471", "value": "garena" }, { "code": "200472", "value": "gearsofwar" }, { "code": "200473", "value": "giop" }, { "code": "200474", "value": "git" }, { "code": "200475", "value": "glupteba" }, { "code": "200476", "value": "gnutella2" }, { "code": "200477", "value": "gokuchat" }, { "code": "200478", "value": "google_hangouts" }, { "code": "200479", "value": "gotomeeting" }, { "code": "200480", "value": "gprs_tunnel" }, { "code": "200481", "value": "graal_online_era" }, { "code": "200482", "value": "gsm" }, { "code": "200483", "value": "h1z1" }, { "code": "200484", "value": "halo_online" }, { "code": "200485", "value": "hamachi" }, { "code": "200486", "value": "harveys" }, { "code": "200487", "value": "hearthstone" }, { "code": "200488", "value": "heroes_generals" }, { "code": "200489", "value": "hots" }, { "code": "200490", "value": "icp" }, { "code": "200491", "value": "icq" }, { "code": "200492", "value": "id" }, { "code": "200493", "value": "idrive_sync" }, { "code": "200494", "value": "ipmsg" }, { "code": "200495", "value": "ipop" }, { "code": "200496", "value": "ipsharkk" }, { "code": "200497", "value": "palringo" }, { "code": "200498", "value": "paltalk" }, { "code": "200499", "value": "pando" }, { "code": "200500", "value": "panipani" }, { "code": "200501", "value": "pdbox" }, { "code": "200502", "value": "planetside2" }, { "code": "200503", "value": "portmap_rpc" }, { "code": "200504", "value": "ps4_remoteplay" }, { "code": "200505", "value": "psn" }, { "code": "200506", "value": "psn_store" }, { "code": "200507", "value": "punkbuster" }, { "code": "200508", "value": "pyzor" }, { "code": "200509", "value": "qcloud_ilvb" }, { "code": "200510", "value": "qqpcmgr" }, { "code": "200511", "value": "ramsey_dash" }, { "code": "200512", "value": "razor" }, { "code": "200513", "value": "rbls" }, { "code": "200514", "value": "realvnc" }, { "code": "200515", "value": "relay" }, { "code": "200516", "value": "revolver_nblbt" }, { "code": "200517", "value": "rising_storm" }, { "code": "200518", "value": "roblox" }, { "code": "200519", "value": "robocraft" }, { "code": "200520", "value": "rpc_scan" }, { "code": "200521", "value": "runescape" }, { "code": "200522", "value": "sanandreas" }, { "code": "200523", "value": "saprouter" }, { "code": "200524", "value": "secondlife" }, { "code": "200525", "value": "serialnumberd" }, { "code": "200526", "value": "silkroadonline" }, { "code": "200527", "value": "smite" }, { "code": "200528", "value": "snapvpn" }, { "code": "200529", "value": "spamfighter" }, { "code": "200530", "value": "speedin" }, { "code": "200531", "value": "speedtest" }, { "code": "200532", "value": "spotify_broadcast" }, { "code": "200533", "value": "sqlexp" }, { "code": "200534", "value": "starcitizen" }, { "code": "200535", "value": "starcraft" }, { "code": "200536", "value": "starleaf" }, { "code": "200537", "value": "steam_friends" }, { "code": "200538", "value": "storm_worm" }, { "code": "200539", "value": "stratum" }, { "code": "200540", "value": "supl" }, { "code": "200541", "value": "svn" }, { "code": "200542", "value": "talesrunner" }, { "code": "200543", "value": "tankix" }, { "code": "200544", "value": "telecomkey" }, { "code": "200545", "value": "telnet_exploit" }, { "code": "200546", "value": "tencent_games" }, { "code": "200547", "value": "tenfivecoin" }, { "code": "200548", "value": "tensafe" }, { "code": "200549", "value": "tera" }, { "code": "200550", "value": "tetrisonline" }, { "code": "200551", "value": "thq" }, { "code": "200552", "value": "tip" }, { "code": "200553", "value": "torchlight2" }, { "code": "200554", "value": "traceroute" }, { "code": "200555", "value": "trackmania" }, { "code": "200556", "value": "tremulous" }, { "code": "200557", "value": "trion" }, { "code": "200558", "value": "trojan_zeroaccess" }, { "code": "200559", "value": "twitcasting" }, { "code": "200560", "value": "twitch_irc" }, { "code": "200561", "value": "ubisoft_games" }, { "code": "200562", "value": "umeye" }, { "code": "200563", "value": "vainglory" }, { "code": "200564", "value": "ventrilo" }, { "code": "200565", "value": "vivox" }, { "code": "200566", "value": "vodlocker" }, { "code": "200567", "value": "vpnrobot" }, { "code": "200568", "value": "vpn_unlimited" }, { "code": "200569", "value": "vxworks_exploit" }, { "code": "200570", "value": "warthunder" }, { "code": "200571", "value": "weblogic" }, { "code": "200572", "value": "web_junk" }, { "code": "200573", "value": "weiqi" }, { "code": "200574", "value": "win_message" }, { "code": "200575", "value": "wizard101" }, { "code": "200576", "value": "wns" }, { "code": "200577", "value": "wolf_et" }, { "code": "200578", "value": "worm_22105" }, { "code": "200579", "value": "wuala" }, { "code": "200580", "value": "xfire_p2p" }, { "code": "200581", "value": "xiami" }, { "code": "200582", "value": "xunlei" }, { "code": "200583", "value": "xunlei_accel" }, { "code": "200584", "value": "xunlei_jsq" }, { "code": "200585", "value": "xunyou" }, { "code": "200586", "value": "xymon" }, { "code": "200587", "value": "yahoo_error" }, { "code": "200588", "value": "yahoo_games" }, { "code": "200589", "value": "yahoo_webcam" }, { "code": "200590", "value": "zabbix" }, { "code": "200591", "value": "zeroaccess" }, { "code": "200592", "value": "zoom" }, { "code": "200593", "value": "zynga" }, { "code": "200594", "value": "ICMP_Flood" }, { "code": "200595", "value": "IPFRAG_Flood" }, { "code": "200596", "value": "SYN_Flood" }, { "code": "200597", "value": "ACK_Flood" }, { "code": "200598", "value": "RST_Flood" }, { "code": "200599", "value": "DNS_Flood" }, { "code": "200600", "value": "NTP_Flood" }, { "code": "200601", "value": "UDP_Flood" }, { "code": "200602", "value": "HTTP_Flood" }, { "code": "200603", "value": "SSDP_Flood" }, { "code": "200604", "value": "baiduP2P" }, { "code": "200605", "value": "CSGlobalOffensive" }, { "code": "200606", "value": "AllSeeingEye" }, { "code": "200607", "value": "Bittorrent_Extension" }, { "code": "200608", "value": "BitTorrentSync" }, { "code": "200609", "value": "Call_of_Duty" }, { "code": "200612", "value": "CitrixICA" }, { "code": "200613", "value": "Citrix_Jedi" }, { "code": "200614", "value": "ClashOfClans" }, { "code": "200615", "value": "Canon_BJNP" }, { "code": "200617", "value": "DoyoP2P" }, { "code": "200618", "value": "FortiClientSSLVPN" }, { "code": "200619", "value": "GTA_SanAndreas_Multiplayer" }, { "code": "200620", "value": "HalfLife" }, { "code": "200621", "value": "IBM-DB2" }, { "code": "200622", "value": "Flash_Player" }, { "code": "200623", "value": "Kugou" }, { "code": "200624", "value": "LeagueOfLegends" }, { "code": "200625", "value": "GluptebaBackdoor" }, { "code": "200626", "value": "MedalOfHonor" }, { "code": "200628", "value": "MultiTheftAuto" }, { "code": "200631", "value": "NetcoreScan" }, { "code": "200632", "value": "NeverwinterNights" }, { "code": "200633", "value": "NoctionIRP" }, { "code": "200634", "value": "JavaObjectSerialised" }, { "code": "200635", "value": "RealPlayer" }, { "code": "200636", "value": "TeamFortress2" }, { "code": "200637", "value": "TheCrew" }, { "code": "200638", "value": "TurboVPN" }, { "code": "200639", "value": "MSN_Voice" }, { "code": "200640", "value": "MaplestoryChina" }, { "code": "200641", "value": "Message4U" }, { "code": "200642", "value": "MongoDB" }, { "code": "200643", "value": "NDTThroughput" }, { "code": "200644", "value": "NET-MFP" }, { "code": "200645", "value": "WindowsMessenger" }, { "code": "200646", "value": "WolfensteinEnemyTerritory" }, { "code": "200647", "value": "XboxLive" }, { "code": "200649", "value": "RBL" }, { "code": "200650", "value": "RPC_Exploit" }, { "code": "200651", "value": "Rejection" }, { "code": "200655", "value": "Silverplatter_DXP" }, { "code": "200659", "value": "TencentWNS" }, { "code": "200660", "value": "TrionGames" }, { "code": "200661", "value": "Trojan.Win32.Generic!SB" }, { "code": "200666", "value": "WorldOfWarcraft" }, { "code": "200667", "value": "YY" }, { "code": "200669", "value": "nopayload" }, { "code": "200670", "value": "No_FirstPkt" }, { "code": "200671", "value": "Invalid" } ], "visibility": "disabled" }, "label": "Application ID" }, { "name": "common_protocol_id", "type": "int", "doc": { "data": [ { "code": "0", "value": "NOT SPECIFIED" }, { "code": "10000", "value": "NOT SPECIFIED" }, { "code": "10001", "value": "TCP" }, { "code": "10002", "value": "UDP" }, { "code": "10003", "value": "DNS" }, { "code": "10004", "value": "FTP" }, { "code": "10005", "value": "FTPS" }, { "code": "10006", "value": "GRE" }, { "code": "10007", "value": "HTTP" }, { "code": "10008", "value": "HTTPS" }, { "code": "10009", "value": "ICMP" }, { "code": "10010", "value": "IKE" }, { "code": "10011", "value": "IMAP" }, { "code": "10012", "value": "IMAPS" }, { "code": "10013", "value": "IPSEC" }, { "code": "10014", "value": "XMPP" }, { "code": "10015", "value": "L2TP" }, { "code": "10016", "value": "NTP" }, { "code": "10017", "value": "POP3" }, { "code": "10018", "value": "POP3 SSL" }, { "code": "10019", "value": "PPTP" }, { "code": "10020", "value": "Quic" }, { "code": "10021", "value": "SIP" }, { "code": "10022", "value": "smb" }, { "code": "10023", "value": "SMTP" }, { "code": "10024", "value": "SMTPS" }, { "code": "10025", "value": "SPDY" }, { "code": "10028", "value": "SSH" }, { "code": "10029", "value": "SSL" }, { "code": "10030", "value": "SOCKS" }, { "code": "10031", "value": "BITTORRENT" }, { "code": "10032", "value": "RTSP" }, { "code": "10033", "value": "TELNET" }, { "code": "10034", "value": "UTP" }, { "code": "10035", "value": "FASTTRACK" }, { "code": "10036", "value": "SKINNY" }, { "code": "10037", "value": "IAX" }, { "code": "10038", "value": "MGCP" }, { "code": "10039", "value": "RTCP" }, { "code": "10040", "value": "RTP" }, { "code": "10041", "value": "VNC" }, { "code": "10042", "value": "XDMCP" }, { "code": "10043", "value": "RDP" }, { "code": "10044", "value": "AIMINI" }, { "code": "10045", "value": "IPP" }, { "code": "10046", "value": "NFS" }, { "code": "10047", "value": "TFTP" }, { "code": "10048", "value": "BGP" }, { "code": "10049", "value": "DHCP" }, { "code": "10050", "value": "DHCPV6" }, { "code": "10051", "value": "FINGER" }, { "code": "10052", "value": "KERBEROS" }, { "code": "10053", "value": "LDAP" }, { "code": "10054", "value": "MDNS" }, { "code": "10055", "value": "NNTP" }, { "code": "10056", "value": "SNMP" }, { "code": "10057", "value": "SSDP" }, { "code": "10058", "value": "SYSLOG" }, { "code": "10059", "value": "WHOIS" }, { "code": "10060", "value": "RADIUS" }, { "code": "10061", "value": "OPENVPN" }, { "code": "10062", "value": "STUN" }, { "code": "10063", "value": "TEREDO" }, { "code": "10064", "value": "GTP" }, { "code": "10065", "value": "RTMP" }, { "code": "10066", "value": "chargen_tcp_udp" }, { "code": "10067", "value": "llmnr_udp" }, { "code": "10068", "value": "nbns_udp" }, { "code": "10069", "value": "NETBIOS" }, { "code": "10070", "value": "DirectDownloadLink" }, { "code": "10071", "value": "I23V5" }, { "code": "10072", "value": "DirectConnect" }, { "code": "10073", "value": "OFF" }, { "code": "10074", "value": "OGG" }, { "code": "10075", "value": "MPEG" }, { "code": "10076", "value": "IRC" }, { "code": "10077", "value": "Jabber" }, { "code": "10078", "value": "VRRP" }, { "code": "10079", "value": "IGMP" }, { "code": "10080", "value": "EGP" }, { "code": "10081", "value": "SCTP" }, { "code": "10082", "value": "OSPF" }, { "code": "10083", "value": "IP in IP" }, { "code": "10084", "value": "ICMPv6" }, { "code": "10085", "value": "DCE RPC" }, { "code": "10086", "value": "NetFlow_IPFIX" }, { "code": "10087", "value": "sFlow" }, { "code": "10088", "value": "HTTP Connect (SSL over HTTP)" }, { "code": "10089", "value": "SAP" }, { "code": "10090", "value": "UPnP" }, { "code": "10091", "value": "H323" }, { "code": "10092", "value": "Megaco" }, { "code": "10094", "value": "bacnet" }, { "code": "10096", "value": "bjnp" }, { "code": "10097", "value": "cgp" }, { "code": "10098", "value": "dahua" }, { "code": "10099", "value": "dcc" }, { "code": "10100", "value": "kademlia" }, { "code": "10101", "value": "lansync" }, { "code": "10102", "value": "ldap_ad" }, { "code": "10103", "value": "llp2p" }, { "code": "10104", "value": "mfnp" }, { "code": "10105", "value": "mp2p" }, { "code": "10106", "value": "msn_cache" }, { "code": "10107", "value": "msn_video" }, { "code": "10108", "value": "msnc" }, { "code": "10109", "value": "netflow" }, { "code": "10110", "value": "notes_rpc" }, { "code": "10111", "value": "esp" }, { "code": "10112", "value": "fbcdn_ssl" }, { "code": "10113", "value": "forticlient_sslvpn" }, { "code": "10114", "value": "rfb" }, { "code": "10115", "value": "rtmfp" }, { "code": "10117", "value": "slp" }, { "code": "10118", "value": "steam_inhomebroadcast" }, { "code": "10119", "value": "steam_localbroadcast" }, { "code": "10120", "value": "tpkt" }, { "code": "10121", "value": "xmpps" }, { "code": "10122", "value": "S7COMM" }, { "code": "10123", "value": "CitrixCGP" }, { "code": "10124", "value": "ID_Protocol" }, { "code": "10125", "value": "SMTP_Secure" }, { "code": "10126", "value": "NAT-PMP" } ], "visibility": "disabled" }, "label": "Protocol ID" }, { "name": "common_start_time", "type": "int", "doc": { "constraints": { "type": "timestamp" }, "visibility": "hidden" }, "label": "Start Time" }, { "name": "common_end_time", "type": "int", "doc": { "constraints": { "type": "timestamp" }, "visibility": "hidden" }, "label": "End Time" }, { "name": "common_establish_latency_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Establish Latency(ms)" }, { "name": "common_con_duration_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Duration(ms)" }, { "name": "common_stream_dir", "type": "int", "doc": { "data": [ { "code": "1", "value": "c2s" }, { "code": "2", "value": "s2c" }, { "code": "3", "value": "double" } ] }, "label": "Stream Direction" }, { "name": "common_address_list", "type": "string", "doc": { "visibility": "hidden" }, "label": "Address List" }, { "name": "common_has_dup_traffic", "type": "int", "doc": { "data": [ { "code": "0", "value": "No" }, { "code": "1", "value": "Yes" } ], "visibility": "hidden" }, "label": "Duplication Traffic" }, { "name": "common_stream_error", "type": "string", "doc": { "visibility": "hidden" }, "label": "Stream Error" }, { "name": "common_stream_trace_id", "type": "long", "doc": { "allow_query": "true" }, "label": "Session ID" }, { "name": "http_url", "type": "string", "doc": { "allow_query": "true" }, "label": "URL" }, { "name": "http_host", "type": "string", "doc": { "format": { "functions": "sub_domain", "appendTo": "http_domain" } }, "label": "Host" }, { "name": "http_domain", "type": "string", "doc": { "allow_query": "true" }, "label": "Domain" }, { "name": "http_request_line", "type": "string", "doc": { "visibility": "hidden" }, "label": "Request Line" }, { "name": "http_response_line", "type": "string", "doc": { "visibility": "hidden" }, "label": "Response Line" }, { "name": "http_request_header", "type": "string", "label": "Request Headers" }, { "name": "http_response_header", "type": "string", "label": "Response Headers" }, { "name": "http_request_body", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "Request Body" }, { "name": "http_response_body", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "Response Body" }, { "name": "http_request_body_key", "type": "string", "doc": { "visibility": "disabled" }, "label": "Request Body Key" }, { "name": "http_response_body_key", "type": "string", "doc": { "visibility": "disabled" }, "label": "Response Body Key" }, { "name": "http_proxy_flag", "type": "int", "label": "Proxy Flag" }, { "name": "http_sequence", "type": "int", "label": "Sequence" }, { "name": "http_snapshot", "type": "string", "doc": { "visibility": "hidden" }, "label": "Http Snapshot" }, { "name": "http_cookie", "type": "string", "label": "Cookie" }, { "name": "http_referer", "type": "string", "label": "Referer" }, { "name": "http_user_agent", "type": "string", "label": "User Agent" }, { "name": "http_content_length", "type": "string", "label": "Content Length" }, { "name": "http_content_type", "type": "string", "label": "Content Type" }, { "name": "http_set_cookie", "type": "string", "label": "Set Cookie" }, { "name": "http_version", "type": "string", "label": "Version" }, { "name": "http_response_lantency_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Response Latency(ms)" }, { "name": "http_session_duration_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Session Duration(ms)" }, { "name": "mail_protocol_type", "type": "string", "label": "Protocol Type" }, { "name": "mail_account", "type": "string", "label": "Account" }, { "name": "mail_from_cmd", "type": "string", "label": "From CMD" }, { "name": "mail_to_cmd", "type": "string", "label": "To CMD" }, { "name": "mail_from", "type": "string", "doc": { "constraints": { "type": "email" } }, "label": "From" }, { "name": "mail_to", "type": "string", "doc": { "constraints": { "type": "email" } }, "label": "To" }, { "name": "mail_cc", "type": "string", "label": "CC" }, { "name": "mail_bcc", "type": "string", "label": "BCC" }, { "name": "mail_subject", "type": "string", "doc": { "format": { "functions": "decode_of_base64", "param": "mail_subject_charset" } }, "label": "Subject" }, { "name": "mail_subject_charset", "type": "string", "doc": { "visibility": "disabled" }, "label": "Subject Charset" }, { "name": "mail_content", "type": "string", "doc": { "visibility": "hidden" }, "label": "Content" }, { "name": "mail_content_charset", "type": "string", "doc": { "visibility": "hidden" }, "label": "Content Charset" }, { "name": "mail_attachment_name", "type": "string", "doc": { "format": { "functions": "decode_of_base64", "param": "mail_attachment_name_charset" } }, "label": "Attachment" }, { "name": "mail_attachment_name_charset", "type": "string", "doc": { "visibility": "hidden" }, "label": "Attachment Charset" }, { "name": "mail_attachment_content", "type": "string", "doc": { "visibility": "hidden" }, "label": "Attachment Content" }, { "name": "mail_eml_file", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "EML File" }, { "name": "mail_snapshot", "type": "string", "doc": { "visibility": "hidden" }, "label": "Snapshot" }, { "name": "dns_message_id", "type": "int", "label": "Message ID" }, { "name": "dns_qr", "type": "int", "doc": { "data": [ { "code": "0", "value": "QUERY" }, { "code": "1", "value": "REESPONSE" } ] }, "label": "QR" }, { "name": "dns_opcode", "type": "int", "doc": { "data": [ { "code": "0", "value": "QUERY" }, { "code": "1", "value": "IQUERY" }, { "code": "2", "value": "STATUS" }, { "code": "5", "value": "UPDATE" } ] }, "label": "OPCODE" }, { "name": "dns_aa", "type": "int", "label": "AA" }, { "name": "dns_tc", "type": "int", "label": "TC" }, { "name": "dns_rd", "type": "int", "label": "RD" }, { "name": "dns_ra", "type": "int", "label": "RA" }, { "name": "dns_rcode", "type": "int", "label": "RCODE" }, { "name": "dns_qdcount", "type": "int", "label": "QDCOUNT" }, { "name": "dns_ancount", "type": "int", "label": "ANCOUNT" }, { "name": "dns_nscount", "type": "int", "label": "NSCOUNT" }, { "name": "dns_arcount", "type": "int", "label": "ARCOUNT" }, { "name": "dns_qname", "type": "string", "label": "QNAME" }, { "name": "dns_qtype", "type": "int", "doc": { "data": [ { "code": "1", "value": "A" }, { "code": "2", "value": "NS" }, { "code": "5", "value": "CNAME" }, { "code": "6", "value": "SOA" }, { "code": "11", "value": "WKS" }, { "code": "12", "value": "PTR" }, { "code": "13", "value": "HINFO" }, { "code": "11", "value": "WKS" }, { "code": "15", "value": "MX" }, { "code": "28", "value": "AAAA" } ] }, "label": "QTYPE" }, { "name": "dns_qclass", "type": "int", "label": "QCLASS" }, { "name": "dns_cname", "type": "string", "label": "CNAME" }, { "name": "dns_sub", "type": "int", "doc": { "data": [ { "code": "1", "value": "DNS" }, { "code": "2", "value": "DNSSEC" } ] }, "label": "SUB" }, { "name": "dns_rr", "type": "string", "label": "RR" }, { "name": "ssl_version", "type": "string", "label": "Version" }, { "name": "ssl_sni", "type": "string", "doc": { "allow_query": "true", "format": { "functions": "sub_domain", "appendTo": "http_domain" } }, "label": "SNI" }, { "name": "ssl_san", "type": "string", "label": "SAN" }, { "name": "ssl_cn", "type": "string", "label": "CN" }, { "name": "ssl_pinningst", "type": "int", "doc": { "data": [ { "code": "0", "value": "Not Pinning" }, { "code": "1", "value": "Pinning" }, { "code": "2", "value": "Maybe Pinning" } ] }, "label": "Pinning" }, { "name": "ssl_intercept_state", "type": "int", "doc": { "data": [ { "code": "0", "value": "Passthrough" }, { "code": "1", "value": "Intercept" }, { "code": "2", "value": "Shutdown" } ] }, "label": "Intercept State" }, { "name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)" }, { "name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)" }, { "name": "ssl_server_side_version", "type": "string", "label": "Server Side Version" }, { "name": "ssl_client_side_version", "type": "string", "label": "Client Side Version" }, { "name": "ssl_cert_verify", "type": "int", "doc": { "data": [ { "code": "0", "value": "No" }, { "code": "1", "value": "Yes" } ] }, "label": "Certificate Verify" }, { "name": "ssl_error", "type": "string", "label": "Error" }, { "name": "ssl_con_latency_ms", "type": "int", "doc": { "visibility": "disabled" }, "label": "Connection Latency(ms)" }, { "name": "ftp_account", "type": "string", "label": "Account" }, { "name": "ftp_url", "type": "string", "label": "URL" }, { "name": "ftp_content", "type": "string", "label": "Content" }, { "name": "bgp_type", "type": "int", "label": "Type" }, { "name": "bgp_as_num", "type": "string", "label": "AS Number" }, { "name": "bgp_route", "type": "string", "label": "Route" }, { "name": "voip_calling_account", "type": "string", "label": "Calling Account" }, { "name": "voip_called_account", "type": "string", "label": "Called Account" }, { "name": "voip_calling_number", "type": "string", "label": "Calling Number" }, { "name": "voip_called_number", "type": "string", "label": "Called Number" }, { "name": "streaming_media_url", "type": "string", "label": "Media URL" }, { "name": "streaming_media_protocol", "type": "string", "label": "Media Protocol" } ] } }, "required": [ "doc", "fields" ] }, "msg": { "type": "string", "default": "Success" }, "success": { "type": "boolean", "default": true } }, "required": [ "code", "data", "msg", "success" ] } assertions *Asserts the field as JSON object.* response body Logs the given message with the given level. ${LogSchemaResponse.body['data']} {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'common_server_location', 'common_subscriber_id', 'http_domain'], 'metrics': ['common_server_ip', 'common_client_ip', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num'], 'filters': ['common_policy_id', 'common_action', 'common_address_type', 'common_server_ip', 'common_client_ip', 'common_server_port', 'common_server_location', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'http_domain', 'http_content_type', 'ssl_sni', 'ssl_pinningst', 'ssl_intercept_state']}, 'schema_type': {'BASE': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port']}, 'HTTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'http_url', 'http_host', 'http_domain', 'http_request_line', 'http_response_line', 'http_request_header', 'http_response_header', 'http_request_body', 'http_response_body', 'http_request_body_key', 'http_response_body_key', 'http_proxy_flag', 'http_sequence', 'http_snapshot', 'http_cookie', 'http_referer', 'http_user_agent', 'http_content_length', 'http_content_type', 'http_set_cookie', 'http_version', 'http_response_lantency_ms', 'http_session_duration_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'http_url', 'common_server_port']}, 'MAIL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'mail_protocol_type', 'mail_account', 'mail_from_cmd', 'mail_to_cmd', 'mail_from', 'mail_to', 'mail_cc', 'mail_bcc', 'mail_subject', 'mail_subject_charset', 'mail_content', 'mail_content_charset', 'mail_attachment_name', 'mail_attachment_name_charset', 'mail_attachment_content', 'mail_eml_file', 'mail_snapshot'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'mail_from', 'mail_to', 'mail_subject']}, 'DNS': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'dns_message_id', 'dns_qr', 'dns_opcode', 'dns_aa', 'dns_tc', 'dns_rd', 'dns_ra', 'dns_rcode', 'dns_qdcount', 'dns_ancount', 'dns_nscount', 'dns_arcount', 'dns_qname', 'dns_qtype', 'dns_qclass', 'dns_cname', 'dns_sub', 'dns_rr'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_client_ip', 'dns_qr', 'dns_qname', 'dns_qtype']}, 'SSL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ssl_sni', 'ssl_san', 'ssl_cn', 'ssl_pinningst', 'ssl_intercept_state', 'ssl_server_side_latency', 'ssl_client_side_latency', 'ssl_server_side_version', 'ssl_client_side_version', 'ssl_cert_verify', 'ssl_error', 'ssl_con_latency_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ssl_sni', 'common_server_ip', 'common_server_port']}, 'FTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ftp_account', 'ftp_url', 'ftp_content'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ftp_url', 'common_server_ip', 'common_server_port']}, 'BGP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'bgp_type', 'bgp_as_num', 'bgp_route'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'bgp_type', 'bgp_as_num', 'common_server_ip', 'common_server_port']}, 'VOIP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'voip_calling_account', 'voip_called_account', 'voip_calling_number', 'voip_called_number'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'voip_calling_account', 'voip_called_account', 'common_server_ip', 'common_server_port']}}, 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port', 'common_schema_type']}, 'fields': [{'name': 'common_recv_time', 'type': 'int', 'doc': {'allow_query': 'true', 'constraints': {'type': 'timestamp'}, 'format': {'functions': 'current_timestamp'}}, 'label': 'Receive Time'}, {'name': 'common_log_id', 'type': 'long', 'doc': {'allow_query': 'true', 'format': {'functions': 'snowflake_id'}}, 'label': 'Log ID'}, {'name': 'common_policy_id', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Policy ID'}, {'name': 'common_subscriber_id', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Subscriber ID'}, {'name': 'common_client_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_detail,geo_asn,radius_match', 'appendTo': 'common_client_location,common_client_asn,common_subscriber_id'}}, 'label': 'Client IP'}, {'name': 'common_client_port', 'type': 'int', 'label': 'Client Port'}, {'name': 'common_l4_protocol', 'type': 'string', 'label': 'L4 Protocol'}, {'name': 'common_address_type', 'type': 'int', 'doc': {'data': [{'code': '4', 'value': 'ipv4'}, {'code': '6', 'value': 'ipv6'}]}, 'label': 'Address Type'}, {'name': 'common_server_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_country,geo_asn', 'appendTo': 'common_server_location,common_server_asn'}}, 'label': 'Server IP'}, {'name': 'common_server_port', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Server Port'}, {'name': 'common_action', 'type': 'int', 'doc': {'allow_query': 'true', 'data': [{'code': '0', 'value': 'None'}, {'code': '1', 'value': 'Monitor'}, {'code': '2', 'value': 'Intercept'}, {'code': '16', 'value': 'Deny'}, {'code': '48', 'value': 'Manipulation'}, {'code': '128', 'value': 'Allow'}]}, 'label': 'Action'}, {'name': 'common_direction', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'outbound'}, {'code': '1', 'value': 'inbound'}]}, 'label': 'Direction'}, {'name': 'common_entrance_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Entrance ID'}, {'name': 'common_sled_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}}, 'label': 'Sled IP'}, {'name': 'common_client_location', 'type': 'string', 'label': 'Client Location'}, {'name': 'common_client_asn', 'type': 'string', 'label': 'Client ASN'}, {'name': 'common_server_location', 'type': 'string', 'label': 'Server Location'}, {'name': 'common_server_asn', 'type': 'string', 'label': 'Server ASN'}, {'name': 'common_c2s_pkt_num', 'type': 'int', 'label': 'Packets Sent'}, {'name': 'common_s2c_pkt_num', 'type': 'int', 'label': 'Packets Received'}, {'name': 'common_c2s_byte_num', 'type': 'int', 'label': 'Bytes Sent'}, {'name': 'common_s2c_byte_num', 'type': 'int', 'label': 'Bytes Received'}, {'name': 'common_service', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Service'}, {'name': 'common_schema_type', 'type': 'string', 'doc': {'data': [{'code': 'BASE', 'value': 'BASE'}, {'code': 'HTTP', 'value': 'HTTP'}, {'code': 'MAIL', 'value': 'MAIL'}, {'code': 'DNS', 'value': 'DNS'}, {'code': 'SSL', 'value': 'SSL'}, {'code': 'FTP', 'value': 'FTP'}, {'code': 'BGP', 'value': 'BGP'}, {'code': 'VOIP', 'value': 'VOIP'}, {'code': 'RADIUS', 'value': 'RADIUS'}], 'allow_query': 'true'}, 'label': 'Schema Type'}, {'name': 'common_user_tags', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'User Tags'}, {'name': 'common_sub_action', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Sub Action'}, {'name': 'common_user_region', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'User Region'}, {'name': 'common_device_id', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Device ID'}, {'name': 'common_link_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Link ID'}, {'name': 'common_isp', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'ISP'}, {'name': 'common_encapsulation', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Ethernet'}, {'code': '8', 'value': 'PPP'}, {'code': '12', 'value': 'CiscoHDLC'}]}, 'label': 'Encapsulation'}, {'name': 'common_app_label', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Application Label'}, {'name': 'common_app_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '100001', 'value': 'Skype'}, {'code': '100101', 'value': 'Instagram'}, {'code': '100201', 'value': 'Youtube'}, {'code': '100301', 'value': 'Facebook'}, {'code': '100401', 'value': 'What‘s App'}, {'code': '100501', 'value': 'Periscope'}, {'code': '100601', 'value': 'Viber'}, {'code': '100701', 'value': 'Twitter'}, {'code': '100801', 'value': 'Vkontakte'}, {'code': '100901', 'value': 'Telegram'}, {'code': '101001', 'value': 'Odnoklassniki'}, {'code': '101101', 'value': 'Mail agent'}, {'code': '101201', 'value': 'FaceTime'}, {'code': '101301', 'value': 'Snapchat'}, {'code': '101401', 'value': 'Google'}, {'code': '101501', 'value': 'Yandex'}, {'code': '101601', 'value': 'Yandex Browser Turbo'}, {'code': '101701', 'value': 'Opera'}, {'code': '101702', 'value': 'Opera Turbo'}, {'code': '101703', 'value': 'Opera mini'}, {'code': '101801', 'value': 'AppStore'}, {'code': '101901', 'value': 'PlayMarket'}, {'code': '102001', 'value': 'Drugvokrug social networking'}, {'code': '102101', 'value': 'Badoo social networking'}, {'code': '102201', 'value': 'WeChat'}, {'code': '102301', 'value': 'Zello'}, {'code': '102401', 'value': 'Freegate'}, {'code': '102501', 'value': 'Psiphon'}, {'code': '102601', 'value': 'TOR'}, {'code': '102602', 'value': 'Tor browser'}, {'code': '102603', 'value': 'Tor mode'}, {'code': '102701', 'value': 'Orbot'}, {'code': '102801', 'value': 'Tunnel Bear VPN'}, {'code': '102901', 'value': 'HotSpot Shield VPN'}, {'code': '103001', 'value': 'VPN Master'}, {'code': '103101', 'value': 'Hola VPN'}, {'code': '103201', 'value': 'HideMyAss VPN'}, {'code': '103301', 'value': 'Zenmate VPN'}, {'code': '103401', 'value': 'SignalPrivateMessenger'}, {'code': '200001', 'value': 'RFA'}, {'code': '200002', 'value': 'VOA'}, {'code': '200003', 'value': 'lantern'}, {'code': '200004', 'value': 'Line'}, {'code': '200005', 'value': 'voxer'}, {'code': '200006', 'value': 'ZeroNet'}, {'code': '200007', 'value': 'Zalo'}, {'code': '200008', 'value': 'free_browser'}, {'code': '200009', 'value': 'Diaspora'}, {'code': '200010', 'value': 'browsec'}, {'code': '200011', 'value': 'Chrome_plugin_chuguo'}, {'code': '200012', 'value': 'GoGo_SocksHttp'}, {'code': '200013', 'value': 'ultrasurf_chrome'}, {'code': '200014', 'value': 'pinterest'}, {'code': '200015', 'value': 'Swisscom'}, {'code': '200016', 'value': 'Threema'}, {'code': '200017', 'value': 'Circuit_iOS'}, {'code': '200018', 'value': 'Chrome_plugin_FastsTunnel'}, {'code': '200019', 'value': 'OoVoo'}, {'code': '200020', 'value': 'Vine'}, {'code': '200021', 'value': 'Keek'}, {'code': '200022', 'value': 'Hi'}, {'code': '200023', 'value': 'HeyTell'}, {'code': '200024', 'value': 'HikeMessenger'}, {'code': '200025', 'value': 'Nonoh'}, {'code': '200026', 'value': 'Path'}, {'code': '200027', 'value': 'Kik'}, {'code': '200028', 'value': 'BBM'}, {'code': '200029', 'value': 'Talkray'}, {'code': '200030', 'value': 'HelloTalk'}, {'code': '200031', 'value': 'Skout'}, {'code': '200032', 'value': 'MeetMe'}, {'code': '200033', 'value': 'Nextdoor'}, {'code': '200034', 'value': 'Shots'}, {'code': '200035', 'value': 'Zoosk'}, {'code': '200036', 'value': 'TextPlus'}, {'code': '200037', 'value': 'Maaii'}, {'code': '200038', 'value': 'Ustream'}, {'code': '200039', 'value': 'Yikyak'}, {'code': '200040', 'value': 'chatsecure'}, {'code': '200041', 'value': 'freecalls'}, {'code': '200042', 'value': 'SignalPrivateMessenger'}, {'code': '200043', 'value': 'USGOV_CIA'}, {'code': '200044', 'value': 'USGOV_FBI'}, {'code': '200045', 'value': 'USGOV_DHS'}, {'code': '200046', 'value': 'shenxun_Secure_Call_android'}, {'code': '200047', 'value': 'shenxun_Secure_Call_web'}, {'code': '200048', 'value': 'UProxy'}, {'code': '200049', 'value': 'soma'}, {'code': '200050', 'value': "PlayerUnknown's_Battlegrounds"}, {'code': '200051', 'value': 'STEAM'}, {'code': '200052', 'value': 'dalai_lama'}, {'code': '200053', 'value': 'Steam_forum'}, {'code': '200054', 'value': 'Microsoft Online Certificate'}, {'code': '200055', 'value': 'sogou_spider'}, {'code': '200056', 'value': 'baidu_mobie'}, {'code': '200057', 'value': 'Apple Push Service'}, {'code': '200058', 'value': 'IQIYI'}, {'code': '200059', 'value': 'baidu_spider'}, {'code': '200060', 'value': 'Weibo'}, {'code': '200061', 'value': 'Apple captive service'}, {'code': '200062', 'value': 'Microsoft wns'}, {'code': '200063', 'value': '360_safe_pc'}, {'code': '200064', 'value': 'Sogou Public Service'}, {'code': '200065', 'value': 'Lenovo app_POST service'}, {'code': '200066', 'value': 'Apple securityd service'}, {'code': '200067', 'value': 'Weather pass'}, {'code': '200068', 'value': 'Apple Service Pack'}, {'code': '200069', 'value': 'Fast pressure'}, {'code': '200070', 'value': 'SemrushBot'}, {'code': '200071', 'value': 'Adrefs_spider'}, {'code': '200072', 'value': 'AndroidDownloadManager'}, {'code': '200073', 'value': 'XenderTop'}, {'code': '200074', 'value': 'microsoft_update'}, {'code': '200075', 'value': 'Youku'}, {'code': '200076', 'value': 'Google_spider'}, {'code': '200077', 'value': 'Microsoft User Experience and Telemetry Components'}, {'code': '200078', 'value': 'MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT'}, {'code': '200079', 'value': 'Microsoft ncsi'}, {'code': '200080', 'value': 'Microsoft Privacy Collection Service'}, {'code': '200081', 'value': 'uTorrent'}, {'code': '200082', 'value': 'Edge'}, {'code': '200083', 'value': 'Lenovo Music Store'}, {'code': '200084', 'value': 'LieBao'}, {'code': '200085', 'value': 'majesti_spider'}, {'code': '200086', 'value': 'DotBot'}, {'code': '200087', 'value': 'Millet Update'}, {'code': '200088', 'value': 'Today’s headlines'}, {'code': '200089', 'value': 'Microsoft live'}, {'code': '200090', 'value': 'Microsoft OneNote'}, {'code': '200091', 'value': 'Bing_spider'}, {'code': '200092', 'value': 'Apple location service'}, {'code': '200093', 'value': 'Kuaishou'}, {'code': '200094', 'value': 'LeTV video'}, {'code': '200095', 'value': 'QQ'}, {'code': '200096', 'value': 'Wps'}, {'code': '200097', 'value': 'kugou music'}, {'code': '200098', 'value': 'kuwo music'}, {'code': '200099', 'value': '360_common_service'}, {'code': '200100', 'value': 'Camera360'}, {'code': '200101', 'value': 'Outlook'}, {'code': '200102', 'value': 'zhihu'}, {'code': '200103', 'value': 'Tencent video'}, {'code': '200104', 'value': 'funshion'}, {'code': '200105', 'value': 'QQ shared service'}, {'code': '200106', 'value': 'Microsoft wdcp service'}, {'code': '200107', 'value': 'Microsoft Media_center_pc'}, {'code': '200108', 'value': '360 phone helper'}, {'code': '200109', 'value': 'Kingsoft Public Service'}, {'code': '200110', 'value': 'Ios_wifi connection'}, {'code': '200111', 'value': 'Teamviewer'}, {'code': '200112', 'value': 'Baidu cloud disk'}, {'code': '200113', 'value': 'Tencent News'}, {'code': '200114', 'value': 'Baidu map'}, {'code': '200115', 'value': 'Panda TV'}, {'code': '200116', 'value': 'Thunder'}, {'code': '200117', 'value': 'NetEase cloud music'}, {'code': '200118', 'value': 'QQ music'}, {'code': '200119', 'value': 'Itools'}, {'code': '200120', 'value': 'Jingdong Finance'}, {'code': '200121', 'value': 'PycURL'}, {'code': '200122', 'value': 'Yahoo_Spider'}, {'code': '200123', 'value': 'Himalayan FM'}, {'code': '200124', 'value': 'Youdao_dict'}, {'code': '200125', 'value': 'Microsoft_spynet'}, {'code': '200126', 'value': 'proximicBot'}, {'code': '200127', 'value': 'Foxit_reader'}, {'code': '200128', 'value': 'Sohu Video'}, {'code': '200129', 'value': 'BlueStacks'}, {'code': '200130', 'value': 'Beauty group'}, {'code': '200131', 'value': 'Kmplayer'}, {'code': '200132', 'value': 'TaoBao'}, {'code': '200133', 'value': 'Exabot'}, {'code': '200134', 'value': 'Ubuntu_apt_get'}, {'code': '200135', 'value': 'Oriental Fortune'}, {'code': '200136', 'value': 'JikeSpider'}, {'code': '200137', 'value': 'Itunesstored'}, {'code': '200138', 'value': 'GAD map'}, {'code': '200139', 'value': 'ifeng News'}, {'code': '200140', 'value': 'BoardReaderBot'}, {'code': '200141', 'value': 'AmazonBot'}, {'code': '200142', 'value': 'Alipay'}, {'code': '200143', 'value': 'Alipay security controls'}, {'code': '200144', 'value': '360 security guards (antivirus)'}, {'code': '200145', 'value': '360 logon service'}, {'code': '200146', 'value': 'BLP_bbot'}, {'code': '200147', 'value': 'Keep'}, {'code': '200148', 'value': 'WiFi universal key'}, {'code': '200149', 'value': 'Baidu Music'}, {'code': '200150', 'value': 'Vip.com'}, {'code': '200151', 'value': 'JD.COM'}, {'code': '200152', 'value': 'sina'}, {'code': '200153', 'value': 'youdao Public service'}, {'code': '200154', 'value': 'Jinshan public service'}, {'code': '200155', 'value': 'Baidu guard'}, {'code': '200156', 'value': 'Apple system update service'}, {'code': '200157', 'value': 'momo'}, {'code': '200158', 'value': 'CNZZ statistics'}, {'code': '200159', 'value': 'Microsoft one_drive service'}, {'code': '200160', 'value': 'WindowsStore'}, {'code': '200161', 'value': 'duba'}, {'code': '200162', 'value': 'Baidu HD'}, {'code': '200163', 'value': 'qunar'}, {'code': '200164', 'value': 'qianxunyingshi'}, {'code': '200165', 'value': 'KuaiyanKanShuSpider'}, {'code': '200166', 'value': 'Mail.RU_Bot_Robot'}, {'code': '200167', 'value': 'MpCommunication'}, {'code': '200168', 'value': 'Weather forecast'}, {'code': '200169', 'value': 'Ltx71_spider'}, {'code': '200170', 'value': 'Ia_archiver'}, {'code': '200171', 'value': 'Ali Wangwang'}, {'code': '200172', 'value': 'UC home page (information)'}, {'code': '200173', 'value': 'Yeti'}, {'code': '200174', 'value': 'Rtorrent'}, {'code': '200175', 'value': 'QQPim'}, {'code': '200176', 'value': 'NetEase News'}, {'code': '200177', 'value': 'sina sports'}, {'code': '200178', 'value': 'Exchange of foreign exchange'}, {'code': '200179', 'value': 'BlueStacks update'}, {'code': '200180', 'value': 'youdao'}, {'code': '200181', 'value': 'QQ computer housekeeper'}, {'code': '200182', 'value': 'UltraEdit'}, {'code': '200183', 'value': 'EasouSpider'}, {'code': '200184', 'value': 'QQ Zone'}, {'code': '200185', 'value': 'Foxmail'}, {'code': '200186', 'value': 'Pingdom.com'}, {'code': '200187', 'value': 'Sina Finance'}, {'code': '200188', 'value': 'QQ one key login'}, {'code': '200189', 'value': 'Norton'}, {'code': '200190', 'value': 'Baidu waimai'}, {'code': '200191', 'value': 'YaCy'}, {'code': '200192', 'value': 'Haitong e Haitong'}, {'code': '200193', 'value': 'AdsBot-Google'}, {'code': '200194', 'value': 'Guangfa Yijin'}, {'code': '200195', 'value': 'Ali security program'}, {'code': '200196', 'value': 'Cliqzbot'}, {'code': '200197', 'value': 'Mobike'}, {'code': '200198', 'value': 'Kingsoft PowerWord'}, {'code': '200199', 'value': 'meishij'}, {'code': '200200', 'value': 'CCB mobile bank'}, {'code': '200201', 'value': 'Mega SkyDrive'}, {'code': '200202', 'value': 'douyu'}, {'code': '200203', 'value': 'Flamingo_SearchEngine'}, {'code': '200204', 'value': 'Lenovo shop'}, {'code': '200205', 'value': 'Uc news'}, {'code': '200206', 'value': 'Volcano small video'}, {'code': '200207', 'value': 'Meitu Xiu Xiu'}, {'code': '200208', 'value': 'Kaspersky'}, {'code': '200209', 'value': 'AcFun'}, {'code': '200210', 'value': 'Slackbot'}, {'code': '200211', 'value': 'Snowball'}, {'code': '200212', 'value': 'SafeDNSBot'}, {'code': '200213', 'value': 'Great wisdom'}, {'code': '200214', 'value': 'Mailbox of NetEase'}, {'code': '200215', 'value': 'peasecod'}, {'code': '200216', 'value': 'Gold ten data'}, {'code': '200217', 'value': 'Linkdexbot'}, {'code': '200218', 'value': 'Sina blog'}, {'code': '200219', 'value': 'Ginger'}, {'code': '200220', 'value': 'Microsoft activation verification'}, {'code': '200221', 'value': 'Facebot'}, {'code': '200222', 'value': 'Dangdang'}, {'code': '200223', 'value': 'QQ cyclone'}, {'code': '200224', 'value': 'Wp_feedbot'}, {'code': '200225', 'value': 'ICBC'}, {'code': '200226', 'value': 'Public service'}, {'code': '200227', 'value': 'Magpie-crawler'}, {'code': '200228', 'value': 'xianyu'}, {'code': '200229', 'value': 'GetIntentBot'}, {'code': '200230', 'value': 'Papers'}, {'code': '200231', 'value': 'NewsGator'}, {'code': '200232', 'value': 'RankFlexBot'}, {'code': '200233', 'value': 'rogerbot'}, {'code': '200234', 'value': 'SurdotlyBot'}, {'code': '200235', 'value': 'CheckMarkNetworkBot'}, {'code': '200236', 'value': 'pyspider'}, {'code': '200237', 'value': 'spbot'}, {'code': '200238', 'value': 'Huaxia Bank'}, {'code': '200239', 'value': 'glory of king'}, {'code': '200240', 'value': 'msnbot-Products'}, {'code': '200241', 'value': 'archive.org'}, {'code': '200242', 'value': 'applebot'}, {'code': '200243', 'value': 'alicall'}, {'code': '200244', 'value': 'Superfeedrbot'}, {'code': '200245', 'value': 'QQ mailbox'}, {'code': '200246', 'value': 'coccocbot-webBot'}, {'code': '200247', 'value': 'dingtalk'}, {'code': '200248', 'value': 'Dragonbot'}, {'code': '200249', 'value': 'Mediatoolkitbot'}, {'code': '200250', 'value': 'bitcomet'}, {'code': '200251', 'value': 'filetopia'}, {'code': '200252', 'value': 'flashget'}, {'code': '200253', 'value': 'oracle'}, {'code': '200254', 'value': 'yyvoice'}, {'code': '200255', 'value': 'imesh'}, {'code': '200256', 'value': 'citrix'}, {'code': '200257', 'value': 'corba'}, {'code': '200258', 'value': 'dameware'}, {'code': '200259', 'value': 'pcanywhere'}, {'code': '200260', 'value': 'qq_rdp'}, {'code': '200261', 'value': 'poco'}, {'code': '200262', 'value': 'qqdownload'}, {'code': '200263', 'value': 'applejuice'}, {'code': '200264', 'value': 'stealthnet'}, {'code': '200265', 'value': 'winmx'}, {'code': '200266', 'value': 'emule'}, {'code': '200267', 'value': 'emule_decrypt'}, {'code': '200268', 'value': 'qvod'}, {'code': '200269', 'value': 'mysql'}, {'code': '200270', 'value': 'icecast'}, {'code': '200271', 'value': 'mms'}, {'code': '200272', 'value': 'pplive'}, {'code': '200273', 'value': 'ppstream'}, {'code': '200274', 'value': 'sopcast'}, {'code': '200275', 'value': 'tvants'}, {'code': '200276', 'value': 'sohutv'}, {'code': '200277', 'value': 'iku'}, {'code': '200278', 'value': 'qqlive'}, {'code': '200279', 'value': 'rsync'}, {'code': '200280', 'value': 'xunyou_speedup'}, {'code': '200281', 'value': 'msn'}, {'code': '200282', 'value': 'popo'}, {'code': '200283', 'value': 'sinauc'}, {'code': '200284', 'value': 'qqbattle'}, {'code': '200285', 'value': 'quake'}, {'code': '200286', 'value': 'xbox'}, {'code': '200287', 'value': 'wow'}, {'code': '200288', 'value': 'lol'}, {'code': '200289', 'value': 'PostgreSQL'}, {'code': '200290', 'value': 'TDS'}, {'code': '200291', 'value': 'VMware'}, {'code': '200292', 'value': 'Kontiki'}, {'code': '200293', 'value': 'OpenFT'}, {'code': '200294', 'value': 'Gnutella'}, {'code': '200295', 'value': 'eDonkey'}, {'code': '200296', 'value': 'AVI'}, {'code': '200297', 'value': 'RealMedia'}, {'code': '200298', 'value': 'Windowsmedia'}, {'code': '200299', 'value': 'MOVE'}, {'code': '200300', 'value': 'Feidian'}, {'code': '200301', 'value': 'Zattoo'}, {'code': '200302', 'value': 'SHOUTCast'}, {'code': '200303', 'value': 'TVUplayer'}, {'code': '200304', 'value': 'VeohTV'}, {'code': '200305', 'value': 'Soulseek'}, {'code': '200306', 'value': 'GaduGadu'}, {'code': '200307', 'value': 'Oscar'}, {'code': '200308', 'value': 'Yahoo'}, {'code': '200309', 'value': 'Battlefield'}, {'code': '200310', 'value': 'Halflife2'}, {'code': '200311', 'value': 'World of Warcraft'}, {'code': '200312', 'value': 'USENET'}, {'code': '200313', 'value': 'AFP'}, {'code': '200314', 'value': 'Truphone'}, {'code': '200315', 'value': 'Armagetron'}, {'code': '200316', 'value': 'CrossFire'}, {'code': '200317', 'value': 'Dofus'}, {'code': '200318', 'value': 'Fiesta'}, {'code': '200319', 'value': 'Florensia'}, {'code': '200320', 'value': 'Guildwars'}, {'code': '200321', 'value': 'HTTP Application Activesync'}, {'code': '200322', 'value': 'MapleStory'}, {'code': '200323', 'value': 'msSQL'}, {'code': '200324', 'value': 'WARCRAFT3'}, {'code': '200325', 'value': 'World of Kung Fu'}, {'code': '200326', 'value': 'MEEBO'}, {'code': '200327', 'value': 'DropBox'}, {'code': '200328', 'value': 'HTTP Proxy'}, {'code': '200329', 'value': 'Netflix'}, {'code': '200330', 'value': 'CitrixOnline/GotoMeeting'}, {'code': '200331', 'value': 'Webex'}, {'code': '200332', 'value': 'Apple iCloud'}, {'code': '200333', 'value': 'Apple iTunes'}, {'code': '200334', 'value': 'WindowsUpdate'}, {'code': '200335', 'value': 'Tuenti'}, {'code': '200336', 'value': 'LotusNotes'}, {'code': '200337', 'value': 'RemoteScan'}, {'code': '200338', 'value': 'Spotify'}, {'code': '200339', 'value': 'CiscoVPN'}, {'code': '200340', 'value': 'TeamSpeak'}, {'code': '200341', 'value': 'UbuntuONE'}, {'code': '200342', 'value': 'CNN'}, {'code': '200343', 'value': 'Wikipedia'}, {'code': '200344', 'value': 'Collectd'}, {'code': '200345', 'value': 'Redis'}, {'code': '200346', 'value': 'ZeroMQ'}, {'code': '200347', 'value': 'Stracraft'}, {'code': '200348', 'value': 'Simet'}, {'code': '200349', 'value': 'OpenSignal'}, {'code': '200350', 'value': '99Taxi'}, {'code': '200351', 'value': 'GloboTV'}, {'code': '200352', 'value': 'Deezer'}, {'code': '200353', 'value': 'Microsoft cloud services'}, {'code': '200354', 'value': 'Twitch'}, {'code': '200355', 'value': 'KakaoTalk Voice and Chat'}, {'code': '200357', 'value': '360.cn'}, {'code': '200358', 'value': '360Safeguard_P2P'}, {'code': '200359', 'value': '4D'}, {'code': '200360', 'value': 'acercloud'}, {'code': '200361', 'value': 'acestream'}, {'code': '200362', 'value': 'airdroid'}, {'code': '200363', 'value': 'airmedia'}, {'code': '200364', 'value': 'akamai'}, {'code': '200365', 'value': 'akamai_transfer'}, {'code': '200366', 'value': 'amanda'}, {'code': '200367', 'value': 'amp'}, {'code': '200368', 'value': 'Appear.in'}, {'code': '200369', 'value': 'ares'}, {'code': '200370', 'value': 'ARKSurvivalEvolved'}, {'code': '200371', 'value': 'ARMA3Server'}, {'code': '200372', 'value': 'ARMA2Server'}, {'code': '200373', 'value': 'AvastSecureDNS'}, {'code': '200374', 'value': 'azureus'}, {'code': '200375', 'value': 'backweb'}, {'code': '200376', 'value': 'BadBaidu'}, {'code': '200377', 'value': 'baofeng'}, {'code': '200378', 'value': 'bitext'}, {'code': '200379', 'value': 'BlackDesertOnline'}, {'code': '200380', 'value': 'Blizzard'}, {'code': '200381', 'value': 'bmdp'}, {'code': '200382', 'value': 'bncs'}, {'code': '200383', 'value': 'btdht'}, {'code': '200384', 'value': 'btsync'}, {'code': '200385', 'value': 'cacaoweb'}, {'code': '200386', 'value': 'chatango'}, {'code': '200387', 'value': 'chivalry'}, {'code': '200388', 'value': 'cirn'}, {'code': '200389', 'value': 'cisco_sslvpn'}, {'code': '200390', 'value': 'clash_of_clans'}, {'code': '200391', 'value': 'Clubbox'}, {'code': '200392', 'value': 'cod'}, {'code': '200393', 'value': 'cod_waw'}, {'code': '200394', 'value': 'combatarms'}, {'code': '200395', 'value': 'combatarms_p2p'}, {'code': '200396', 'value': 'ConquerOnline'}, {'code': '200397', 'value': 'Counterstrike1.6'}, {'code': '200398', 'value': 'Checkpoint_RDP'}, {'code': '200399', 'value': 'crashplan'}, {'code': '200400', 'value': 'crossout'}, {'code': '200401', 'value': 'cryptic'}, {'code': '200402', 'value': 'cvs'}, {'code': '200403', 'value': 'dash'}, {'code': '200404', 'value': 'dc'}, {'code': '200405', 'value': 'db2'}, {'code': '200406', 'value': 'dell_backup'}, {'code': '200407', 'value': 'Demonware'}, {'code': '200408', 'value': 'destiny'}, {'code': '200409', 'value': 'diablo2'}, {'code': '200410', 'value': 'isakmp'}, {'code': '200411', 'value': 'jedi'}, {'code': '200412', 'value': 'jedi_academy'}, {'code': '200413', 'value': 'jx3online'}, {'code': '200414', 'value': 'kankan'}, {'code': '200415', 'value': 'kaseya'}, {'code': '200416', 'value': 'kazaa'}, {'code': '200417', 'value': 'kuaibo'}, {'code': '200418', 'value': 'lifeforge'}, {'code': '200419', 'value': 'linkproof'}, {'code': '200420', 'value': 'litecoin'}, {'code': '200421', 'value': 'maxicloud'}, {'code': '200422', 'value': 'merakicloud'}, {'code': '200423', 'value': 'minecraft'}, {'code': '200424', 'value': 'mongo'}, {'code': '200425', 'value': 'msoffice_mac'}, {'code': '200426', 'value': 'munin'}, {'code': '200427', 'value': 'mzinga'}, {'code': '200428', 'value': 'n2ping'}, {'code': '200429', 'value': 'ncsoft'}, {'code': '200430', 'value': 'netcat_cctv'}, {'code': '200431', 'value': 'neverwinter'}, {'code': '200432', 'value': 'newerth'}, {'code': '200433', 'value': 'nintendo'}, {'code': '200434', 'value': 'nntps'}, {'code': '200435', 'value': 'noction'}, {'code': '200436', 'value': 'noe'}, {'code': '200437', 'value': 'norton_backup'}, {'code': '200438', 'value': 'omegle'}, {'code': '200439', 'value': 'opaserv'}, {'code': '200440', 'value': 'orbit'}, {'code': '200441', 'value': 'ourworld'}, {'code': '200442', 'value': 'overwatch'}, {'code': '200443', 'value': 'diablo3'}, {'code': '200444', 'value': 'dianping'}, {'code': '200445', 'value': 'dianshijia'}, {'code': '200446', 'value': 'discord'}, {'code': '200447', 'value': 'dogecoin'}, {'code': '200448', 'value': 'dota2'}, {'code': '200449', 'value': 'douyu_chat'}, {'code': '200450', 'value': 'doyo'}, {'code': '200451', 'value': 'driveshare'}, {'code': '200452', 'value': 'dtls'}, {'code': '200453', 'value': 'dueling_network'}, {'code': '200454', 'value': 'dvrns'}, {'code': '200455', 'value': 'dxp'}, {'code': '200456', 'value': 'ea_games'}, {'code': '200457', 'value': 'epson'}, {'code': '200458', 'value': 'eso'}, {'code': '200459', 'value': 'etrust'}, {'code': '200460', 'value': 'fasp'}, {'code': '200461', 'value': 'finalfantasy_xiv'}, {'code': '200462', 'value': 'flash'}, {'code': '200463', 'value': 'fliggy'}, {'code': '200464', 'value': 'fortinet'}, {'code': '200465', 'value': 'foscam'}, {'code': '200466', 'value': 'freechal'}, {'code': '200467', 'value': 'fring'}, {'code': '200468', 'value': 'fuckcoin'}, {'code': '200469', 'value': 'gamespy'}, {'code': '200470', 'value': 'gangsofspace'}, {'code': '200471', 'value': 'garena'}, {'code': '200472', 'value': 'gearsofwar'}, {'code': '200473', 'value': 'giop'}, {'code': '200474', 'value': 'git'}, {'code': '200475', 'value': 'glupteba'}, {'code': '200476', 'value': 'gnutella2'}, {'code': '200477', 'value': 'gokuchat'}, {'code': '200478', 'value': 'google_hangouts'}, {'code': '200479', 'value': 'gotomeeting'}, {'code': '200480', 'value': 'gprs_tunnel'}, {'code': '200481', 'value': 'graal_online_era'}, {'code': '200482', 'value': 'gsm'}, {'code': '200483', 'value': 'h1z1'}, {'code': '200484', 'value': 'halo_online'}, {'code': '200485', 'value': 'hamachi'}, {'code': '200486', 'value': 'harveys'}, {'code': '200487', 'value': 'hearthstone'}, {'code': '200488', 'value': 'heroes_generals'}, {'code': '200489', 'value': 'hots'}, {'code': '200490', 'value': 'icp'}, {'code': '200491', 'value': 'icq'}, {'code': '200492', 'value': 'id'}, {'code': '200493', 'value': 'idrive_sync'}, {'code': '200494', 'value': 'ipmsg'}, {'code': '200495', 'value': 'ipop'}, {'code': '200496', 'value': 'ipsharkk'}, {'code': '200497', 'value': 'palringo'}, {'code': '200498', 'value': 'paltalk'}, {'code': '200499', 'value': 'pando'}, {'code': '200500', 'value': 'panipani'}, {'code': '200501', 'value': 'pdbox'}, {'code': '200502', 'value': 'planetside2'}, {'code': '200503', 'value': 'portmap_rpc'}, {'code': '200504', 'value': 'ps4_remoteplay'}, {'code': '200505', 'value': 'psn'}, {'code': '200506', 'value': 'psn_store'}, {'code': '200507', 'value': 'punkbuster'}, {'code': '200508', 'value': 'pyzor'}, {'code': '200509', 'value': 'qcloud_ilvb'}, {'code': '200510', 'value': 'qqpcmgr'}, {'code': '200511', 'value': 'ramsey_dash'}, {'code': '200512', 'value': 'razor'}, {'code': '200513', 'value': 'rbls'}, {'code': '200514', 'value': 'realvnc'}, {'code': '200515', 'value': 'relay'}, {'code': '200516', 'value': 'revolver_nblbt'}, {'code': '200517', 'value': 'rising_storm'}, {'code': '200518', 'value': 'roblox'}, {'code': '200519', 'value': 'robocraft'}, {'code': '200520', 'value': 'rpc_scan'}, {'code': '200521', 'value': 'runescape'}, {'code': '200522', 'value': 'sanandreas'}, {'code': '200523', 'value': 'saprouter'}, {'code': '200524', 'value': 'secondlife'}, {'code': '200525', 'value': 'serialnumberd'}, {'code': '200526', 'value': 'silkroadonline'}, {'code': '200527', 'value': 'smite'}, {'code': '200528', 'value': 'snapvpn'}, {'code': '200529', 'value': 'spamfighter'}, {'code': '200530', 'value': 'speedin'}, {'code': '200531', 'value': 'speedtest'}, {'code': '200532', 'value': 'spotify_broadcast'}, {'code': '200533', 'value': 'sqlexp'}, {'code': '200534', 'value': 'starcitizen'}, {'code': '200535', 'value': 'starcraft'}, {'code': '200536', 'value': 'starleaf'}, {'code': '200537', 'value': 'steam_friends'}, {'code': '200538', 'value': 'storm_worm'}, {'code': '200539', 'value': 'stratum'}, {'code': '200540', 'value': 'supl'}, {'code': '200541', 'value': 'svn'}, {'code': '200542', 'value': 'talesrunner'}, {'code': '200543', 'value': 'tankix'}, {'code': '200544', 'value': 'telecomkey'}, {'code': '200545', 'value': 'telnet_exploit'}, {'code': '200546', 'value': 'tencent_games'}, {'code': '200547', 'value': 'tenfivecoin'}, {'code': '200548', 'value': 'tensafe'}, {'code': '200549', 'value': 'tera'}, {'code': '200550', 'value': 'tetrisonline'}, {'code': '200551', 'value': 'thq'}, {'code': '200552', 'value': 'tip'}, {'code': '200553', 'value': 'torchlight2'}, {'code': '200554', 'value': 'traceroute'}, {'code': '200555', 'value': 'trackmania'}, {'code': '200556', 'value': 'tremulous'}, {'code': '200557', 'value': 'trion'}, {'code': '200558', 'value': 'trojan_zeroaccess'}, {'code': '200559', 'value': 'twitcasting'}, {'code': '200560', 'value': 'twitch_irc'}, {'code': '200561', 'value': 'ubisoft_games'}, {'code': '200562', 'value': 'umeye'}, {'code': '200563', 'value': 'vainglory'}, {'code': '200564', 'value': 'ventrilo'}, {'code': '200565', 'value': 'vivox'}, {'code': '200566', 'value': 'vodlocker'}, {'code': '200567', 'value': 'vpnrobot'}, {'code': '200568', 'value': 'vpn_unlimited'}, {'code': '200569', 'value': 'vxworks_exploit'}, {'code': '200570', 'value': 'warthunder'}, {'code': '200571', 'value': 'weblogic'}, {'code': '200572', 'value': 'web_junk'}, {'code': '200573', 'value': 'weiqi'}, {'code': '200574', 'value': 'win_message'}, {'code': '200575', 'value': 'wizard101'}, {'code': '200576', 'value': 'wns'}, {'code': '200577', 'value': 'wolf_et'}, {'code': '200578', 'value': 'worm_22105'}, {'code': '200579', 'value': 'wuala'}, {'code': '200580', 'value': 'xfire_p2p'}, {'code': '200581', 'value': 'xiami'}, {'code': '200582', 'value': 'xunlei'}, {'code': '200583', 'value': 'xunlei_accel'}, {'code': '200584', 'value': 'xunlei_jsq'}, {'code': '200585', 'value': 'xunyou'}, {'code': '200586', 'value': 'xymon'}, {'code': '200587', 'value': 'yahoo_error'}, {'code': '200588', 'value': 'yahoo_games'}, {'code': '200589', 'value': 'yahoo_webcam'}, {'code': '200590', 'value': 'zabbix'}, {'code': '200591', 'value': 'zeroaccess'}, {'code': '200592', 'value': 'zoom'}, {'code': '200593', 'value': 'zynga'}, {'code': '200594', 'value': 'ICMP_Flood'}, {'code': '200595', 'value': 'IPFRAG_Flood'}, {'code': '200596', 'value': 'SYN_Flood'}, {'code': '200597', 'value': 'ACK_Flood'}, {'code': '200598', 'value': 'RST_Flood'}, {'code': '200599', 'value': 'DNS_Flood'}, {'code': '200600', 'value': 'NTP_Flood'}, {'code': '200601', 'value': 'UDP_Flood'}, {'code': '200602', 'value': 'HTTP_Flood'}, {'code': '200603', 'value': 'SSDP_Flood'}, {'code': '200604', 'value': 'baiduP2P'}, {'code': '200605', 'value': 'CSGlobalOffensive'}, {'code': '200606', 'value': 'AllSeeingEye'}, {'code': '200607', 'value': 'Bittorrent_Extension'}, {'code': '200608', 'value': 'BitTorrentSync'}, {'code': '200609', 'value': 'Call_of_Duty'}, {'code': '200612', 'value': 'CitrixICA'}, {'code': '200613', 'value': 'Citrix_Jedi'}, {'code': '200614', 'value': 'ClashOfClans'}, {'code': '200615', 'value': 'Canon_BJNP'}, {'code': '200617', 'value': 'DoyoP2P'}, {'code': '200618', 'value': 'FortiClientSSLVPN'}, {'code': '200619', 'value': 'GTA_SanAndreas_Multiplayer'}, {'code': '200620', 'value': 'HalfLife'}, {'code': '200621', 'value': 'IBM-DB2'}, {'code': '200622', 'value': 'Flash_Player'}, {'code': '200623', 'value': 'Kugou'}, {'code': '200624', 'value': 'LeagueOfLegends'}, {'code': '200625', 'value': 'GluptebaBackdoor'}, {'code': '200626', 'value': 'MedalOfHonor'}, {'code': '200628', 'value': 'MultiTheftAuto'}, {'code': '200631', 'value': 'NetcoreScan'}, {'code': '200632', 'value': 'NeverwinterNights'}, {'code': '200633', 'value': 'NoctionIRP'}, {'code': '200634', 'value': 'JavaObjectSerialised'}, {'code': '200635', 'value': 'RealPlayer'}, {'code': '200636', 'value': 'TeamFortress2'}, {'code': '200637', 'value': 'TheCrew'}, {'code': '200638', 'value': 'TurboVPN'}, {'code': '200639', 'value': 'MSN_Voice'}, {'code': '200640', 'value': 'MaplestoryChina'}, {'code': '200641', 'value': 'Message4U'}, {'code': '200642', 'value': 'MongoDB'}, {'code': '200643', 'value': 'NDTThroughput'}, {'code': '200644', 'value': 'NET-MFP'}, {'code': '200645', 'value': 'WindowsMessenger'}, {'code': '200646', 'value': 'WolfensteinEnemyTerritory'}, {'code': '200647', 'value': 'XboxLive'}, {'code': '200649', 'value': 'RBL'}, {'code': '200650', 'value': 'RPC_Exploit'}, {'code': '200651', 'value': 'Rejection'}, {'code': '200655', 'value': 'Silverplatter_DXP'}, {'code': '200659', 'value': 'TencentWNS'}, {'code': '200660', 'value': 'TrionGames'}, {'code': '200661', 'value': 'Trojan.Win32.Generic!SB'}, {'code': '200666', 'value': 'WorldOfWarcraft'}, {'code': '200667', 'value': 'YY'}, {'code': '200669', 'value': 'nopayload'}, {'code': '200670', 'value': 'No_FirstPkt'}, {'code': '200671', 'value': 'Invalid'}], 'visibility': 'disabled'}, 'label': 'Application ID'}, {'name': 'common_protocol_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '10000', 'value': 'NOT SPECIFIED'}, {'code': '10001', 'value': 'TCP'}, {'code': '10002', 'value': 'UDP'}, {'code': '10003', 'value': 'DNS'}, {'code': '10004', 'value': 'FTP'}, {'code': '10005', 'value': 'FTPS'}, {'code': '10006', 'value': 'GRE'}, {'code': '10007', 'value': 'HTTP'}, {'code': '10008', 'value': 'HTTPS'}, {'code': '10009', 'value': 'ICMP'}, {'code': '10010', 'value': 'IKE'}, {'code': '10011', 'value': 'IMAP'}, {'code': '10012', 'value': 'IMAPS'}, {'code': '10013', 'value': 'IPSEC'}, {'code': '10014', 'value': 'XMPP'}, {'code': '10015', 'value': 'L2TP'}, {'code': '10016', 'value': 'NTP'}, {'code': '10017', 'value': 'POP3'}, {'code': '10018', 'value': 'POP3 SSL'}, {'code': '10019', 'value': 'PPTP'}, {'code': '10020', 'value': 'Quic'}, {'code': '10021', 'value': 'SIP'}, {'code': '10022', 'value': 'smb'}, {'code': '10023', 'value': 'SMTP'}, {'code': '10024', 'value': 'SMTPS'}, {'code': '10025', 'value': 'SPDY'}, {'code': '10028', 'value': 'SSH'}, {'code': '10029', 'value': 'SSL'}, {'code': '10030', 'value': 'SOCKS'}, {'code': '10031', 'value': 'BITTORRENT'}, {'code': '10032', 'value': 'RTSP'}, {'code': '10033', 'value': 'TELNET'}, {'code': '10034', 'value': 'UTP'}, {'code': '10035', 'value': 'FASTTRACK'}, {'code': '10036', 'value': 'SKINNY'}, {'code': '10037', 'value': 'IAX'}, {'code': '10038', 'value': 'MGCP'}, {'code': '10039', 'value': 'RTCP'}, {'code': '10040', 'value': 'RTP'}, {'code': '10041', 'value': 'VNC'}, {'code': '10042', 'value': 'XDMCP'}, {'code': '10043', 'value': 'RDP'}, {'code': '10044', 'value': 'AIMINI'}, {'code': '10045', 'value': 'IPP'}, {'code': '10046', 'value': 'NFS'}, {'code': '10047', 'value': 'TFTP'}, {'code': '10048', 'value': 'BGP'}, {'code': '10049', 'value': 'DHCP'}, {'code': '10050', 'value': 'DHCPV6'}, {'code': '10051', 'value': 'FINGER'}, {'code': '10052', 'value': 'KERBEROS'}, {'code': '10053', 'value': 'LDAP'}, {'code': '10054', 'value': 'MDNS'}, {'code': '10055', 'value': 'NNTP'}, {'code': '10056', 'value': 'SNMP'}, {'code': '10057', 'value': 'SSDP'}, {'code': '10058', 'value': 'SYSLOG'}, {'code': '10059', 'value': 'WHOIS'}, {'code': '10060', 'value': 'RADIUS'}, {'code': '10061', 'value': 'OPENVPN'}, {'code': '10062', 'value': 'STUN'}, {'code': '10063', 'value': 'TEREDO'}, {'code': '10064', 'value': 'GTP'}, {'code': '10065', 'value': 'RTMP'}, {'code': '10066', 'value': 'chargen_tcp_udp'}, {'code': '10067', 'value': 'llmnr_udp'}, {'code': '10068', 'value': 'nbns_udp'}, {'code': '10069', 'value': 'NETBIOS'}, {'code': '10070', 'value': 'DirectDownloadLink'}, {'code': '10071', 'value': 'I23V5'}, {'code': '10072', 'value': 'DirectConnect'}, {'code': '10073', 'value': 'OFF'}, {'code': '10074', 'value': 'OGG'}, {'code': '10075', 'value': 'MPEG'}, {'code': '10076', 'value': 'IRC'}, {'code': '10077', 'value': 'Jabber'}, {'code': '10078', 'value': 'VRRP'}, {'code': '10079', 'value': 'IGMP'}, {'code': '10080', 'value': 'EGP'}, {'code': '10081', 'value': 'SCTP'}, {'code': '10082', 'value': 'OSPF'}, {'code': '10083', 'value': 'IP in IP'}, {'code': '10084', 'value': 'ICMPv6'}, {'code': '10085', 'value': 'DCE RPC'}, {'code': '10086', 'value': 'NetFlow_IPFIX'}, {'code': '10087', 'value': 'sFlow'}, {'code': '10088', 'value': 'HTTP Connect (SSL over HTTP)'}, {'code': '10089', 'value': 'SAP'}, {'code': '10090', 'value': 'UPnP'}, {'code': '10091', 'value': 'H323'}, {'code': '10092', 'value': 'Megaco'}, {'code': '10094', 'value': 'bacnet'}, {'code': '10096', 'value': 'bjnp'}, {'code': '10097', 'value': 'cgp'}, {'code': '10098', 'value': 'dahua'}, {'code': '10099', 'value': 'dcc'}, {'code': '10100', 'value': 'kademlia'}, {'code': '10101', 'value': 'lansync'}, {'code': '10102', 'value': 'ldap_ad'}, {'code': '10103', 'value': 'llp2p'}, {'code': '10104', 'value': 'mfnp'}, {'code': '10105', 'value': 'mp2p'}, {'code': '10106', 'value': 'msn_cache'}, {'code': '10107', 'value': 'msn_video'}, {'code': '10108', 'value': 'msnc'}, {'code': '10109', 'value': 'netflow'}, {'code': '10110', 'value': 'notes_rpc'}, {'code': '10111', 'value': 'esp'}, {'code': '10112', 'value': 'fbcdn_ssl'}, {'code': '10113', 'value': 'forticlient_sslvpn'}, {'code': '10114', 'value': 'rfb'}, {'code': '10115', 'value': 'rtmfp'}, {'code': '10117', 'value': 'slp'}, {'code': '10118', 'value': 'steam_inhomebroadcast'}, {'code': '10119', 'value': 'steam_localbroadcast'}, {'code': '10120', 'value': 'tpkt'}, {'code': '10121', 'value': 'xmpps'}, {'code': '10122', 'value': 'S7COMM'}, {'code': '10123', 'value': 'CitrixCGP'}, {'code': '10124', 'value': 'ID_Protocol'}, {'code': '10125', 'value': 'SMTP_Secure'}, {'code': '10126', 'value': 'NAT-PMP'}], 'visibility': 'disabled'}, 'label': 'Protocol ID'}, {'name': 'common_start_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'Start Time'}, {'name': 'common_end_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'End Time'}, {'name': 'common_establish_latency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Establish Latency(ms)'}, {'name': 'common_con_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Duration(ms)'}, {'name': 'common_stream_dir', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'c2s'}, {'code': '2', 'value': 's2c'}, {'code': '3', 'value': 'double'}]}, 'label': 'Stream Direction'}, {'name': 'common_address_list', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Address List'}, {'name': 'common_has_dup_traffic', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}], 'visibility': 'hidden'}, 'label': 'Duplication Traffic'}, {'name': 'common_stream_error', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Stream Error'}, {'name': 'common_stream_trace_id', 'type': 'long', 'doc': {'allow_query': 'true'}, 'label': 'Session ID'}, {'name': 'http_url', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'URL'}, {'name': 'http_host', 'type': 'string', 'doc': {'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'Host'}, {'name': 'http_domain', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Domain'}, {'name': 'http_request_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Request Line'}, {'name': 'http_response_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Response Line'}, {'name': 'http_request_header', 'type': 'string', 'label': 'Request Headers'}, {'name': 'http_response_header', 'type': 'string', 'label': 'Response Headers'}, {'name': 'http_request_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Request Body'}, {'name': 'http_response_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Response Body'}, {'name': 'http_request_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Request Body Key'}, {'name': 'http_response_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Response Body Key'}, {'name': 'http_proxy_flag', 'type': 'int', 'label': 'Proxy Flag'}, {'name': 'http_sequence', 'type': 'int', 'label': 'Sequence'}, {'name': 'http_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Http Snapshot'}, {'name': 'http_cookie', 'type': 'string', 'label': 'Cookie'}, {'name': 'http_referer', 'type': 'string', 'label': 'Referer'}, {'name': 'http_user_agent', 'type': 'string', 'label': 'User Agent'}, {'name': 'http_content_length', 'type': 'string', 'label': 'Content Length'}, {'name': 'http_content_type', 'type': 'string', 'label': 'Content Type'}, {'name': 'http_set_cookie', 'type': 'string', 'label': 'Set Cookie'}, {'name': 'http_version', 'type': 'string', 'label': 'Version'}, {'name': 'http_response_lantency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Response Latency(ms)'}, {'name': 'http_session_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Session Duration(ms)'}, {'name': 'mail_protocol_type', 'type': 'string', 'label': 'Protocol Type'}, {'name': 'mail_account', 'type': 'string', 'label': 'Account'}, {'name': 'mail_from_cmd', 'type': 'string', 'label': 'From CMD'}, {'name': 'mail_to_cmd', 'type': 'string', 'label': 'To CMD'}, {'name': 'mail_from', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'From'}, {'name': 'mail_to', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'To'}, {'name': 'mail_cc', 'type': 'string', 'label': 'CC'}, {'name': 'mail_bcc', 'type': 'string', 'label': 'BCC'}, {'name': 'mail_subject', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_subject_charset'}}, 'label': 'Subject'}, {'name': 'mail_subject_charset', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Subject Charset'}, {'name': 'mail_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content'}, {'name': 'mail_content_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content Charset'}, {'name': 'mail_attachment_name', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_attachment_name_charset'}}, 'label': 'Attachment'}, {'name': 'mail_attachment_name_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Charset'}, {'name': 'mail_attachment_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Content'}, {'name': 'mail_eml_file', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'EML File'}, {'name': 'mail_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Snapshot'}, {'name': 'dns_message_id', 'type': 'int', 'label': 'Message ID'}, {'name': 'dns_qr', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'REESPONSE'}]}, 'label': 'QR'}, {'name': 'dns_opcode', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'IQUERY'}, {'code': '2', 'value': 'STATUS'}, {'code': '5', 'value': 'UPDATE'}]}, 'label': 'OPCODE'}, {'name': 'dns_aa', 'type': 'int', 'label': 'AA'}, {'name': 'dns_tc', 'type': 'int', 'label': 'TC'}, {'name': 'dns_rd', 'type': 'int', 'label': 'RD'}, {'name': 'dns_ra', 'type': 'int', 'label': 'RA'}, {'name': 'dns_rcode', 'type': 'int', 'label': 'RCODE'}, {'name': 'dns_qdcount', 'type': 'int', 'label': 'QDCOUNT'}, {'name': 'dns_ancount', 'type': 'int', 'label': 'ANCOUNT'}, {'name': 'dns_nscount', 'type': 'int', 'label': 'NSCOUNT'}, {'name': 'dns_arcount', 'type': 'int', 'label': 'ARCOUNT'}, {'name': 'dns_qname', 'type': 'string', 'label': 'QNAME'}, {'name': 'dns_qtype', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'A'}, {'code': '2', 'value': 'NS'}, {'code': '5', 'value': 'CNAME'}, {'code': '6', 'value': 'SOA'}, {'code': '11', 'value': 'WKS'}, {'code': '12', 'value': 'PTR'}, {'code': '13', 'value': 'HINFO'}, {'code': '11', 'value': 'WKS'}, {'code': '15', 'value': 'MX'}, {'code': '28', 'value': 'AAAA'}]}, 'label': 'QTYPE'}, {'name': 'dns_qclass', 'type': 'int', 'label': 'QCLASS'}, {'name': 'dns_cname', 'type': 'string', 'label': 'CNAME'}, {'name': 'dns_sub', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'DNS'}, {'code': '2', 'value': 'DNSSEC'}]}, 'label': 'SUB'}, {'name': 'dns_rr', 'type': 'string', 'label': 'RR'}, {'name': 'ssl_version', 'type': 'string', 'label': 'Version'}, {'name': 'ssl_sni', 'type': 'string', 'doc': {'allow_query': 'true', 'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'SNI'}, {'name': 'ssl_san', 'type': 'string', 'label': 'SAN'}, {'name': 'ssl_cn', 'type': 'string', 'label': 'CN'}, {'name': 'ssl_pinningst', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Not Pinning'}, {'code': '1', 'value': 'Pinning'}, {'code': '2', 'value': 'Maybe Pinning'}]}, 'label': 'Pinning'}, {'name': 'ssl_intercept_state', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Passthrough'}, {'code': '1', 'value': 'Intercept'}, {'code': '2', 'value': 'Shutdown'}]}, 'label': 'Intercept State'}, {'name': 'ssl_server_side_latency', 'type': 'int', 'label': 'Server Side Latency(ms)'}, {'name': 'ssl_client_side_latency', 'type': 'int', 'label': 'Client Side Latency(ms)'}, {'name': 'ssl_server_side_version', 'type': 'string', 'label': 'Server Side Version'}, {'name': 'ssl_client_side_version', 'type': 'string', 'label': 'Client Side Version'}, {'name': 'ssl_cert_verify', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}]}, 'label': 'Certificate Verify'}, {'name': 'ssl_error', 'type': 'string', 'label': 'Error'}, {'name': 'ssl_con_latency_ms', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Connection Latency(ms)'}, {'name': 'ftp_account', 'type': 'string', 'label': 'Account'}, {'name': 'ftp_url', 'type': 'string', 'label': 'URL'}, {'name': 'ftp_content', 'type': 'string', 'label': 'Content'}, {'name': 'bgp_type', 'type': 'int', 'label': 'Type'}, {'name': 'bgp_as_num', 'type': 'string', 'label': 'AS Number'}, {'name': 'bgp_route', 'type': 'string', 'label': 'Route'}, {'name': 'voip_calling_account', 'type': 'string', 'label': 'Calling Account'}, {'name': 'voip_called_account', 'type': 'string', 'label': 'Called Account'}, {'name': 'voip_calling_number', 'type': 'string', 'label': 'Calling Number'}, {'name': 'voip_called_number', 'type': 'string', 'label': 'Called Number'}, {'name': 'streaming_media_url', 'type': 'string', 'label': 'Media URL'}, {'name': 'streaming_media_protocol', 'type': 'string', 'label': 'Media Protocol'}]} Evaluates the given expression in Python and returns the results. json.dumps(eval(str(${LogSchemaResponse.body['data']['fields']}))) json ${field} ${field} = [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "com... Logs the given message with the given level. ${field} [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}] Returns the given values which can then be assigned to a variables. 30 ${pageSize} ${pageSize} = 30 Returns the given values which can then be assigned to a variables. 1 ${pageNo} ${pageNo} = 1 Returns the given values which can then be assigned to a variables. [{"value":["${startTime}","${endTime}"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ${condition} ${condition} = [{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] Returns the given values which can then be assigned to a variables. {"pageNo":${pageNo},"pageSize":${pageSize},"logType":"${logname}","fields":${field},"start_common_recv_time":"${startTime}","end_common_recv_time":"${endTime}","conditions":${condition} ,"common_client_ips":"${client_ip}","common_policy_ids":"${policy_id}"} ${logCondition} ${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function... Logs the given message with the given level. this time query condition:${logCondition} this time query condition:{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:22:12","end_common_recv_time":"2020-04-01 12:23:04","conditions":[{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"77"} ${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function... Logs the given message with the given level. ${logCondition} {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:22:12","end_common_recv_time":"2020-04-01 12:23:04","conditions":[{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"77"} /log/list ${logCondition} ${LogListResponse} Creates and returns a dictionary based on the given ``items``. Content-Type=application/json Authorization=${token} ${header} ${header} = {'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'} Create Session: create a HTTP session to a server api http://${host}:${port}/${version} headers=${header} Creating Session using : alias=api, url=http://192.168.40.120:8080/v1, headers={'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a POST request on the session object found using the given `alias` api ${url} data=${data} headers=${header} ${remoteResponse} POST Request using : uri=/log/list, params=None, files=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'} data={"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:22:12","end_common_recv_time":"2020-04-01 12:23:04","conditions":[{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"77"} json=None ${remoteResponse} = <Response [200]> ${LogListResponse} = <Response [200]> Fails if objects are unequal after converting them to strings. ${LogListResponse.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${LogListResponse.content} ${returnData} To JSON using : content={ "code":200, "data":{ "list":[], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } To JSON using : pretty_print=False ${returnData} = {'code': 200, 'data': {'list': [], 'pageNo': 1, 'pageSize': 30, 'pages': 0, 'total': 0}, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${returnData} code ${responseCode} ${responseCode} = 200 Logs the given message with the given level. ${responseCode} 200 Fails if the given objects are unequal. ${responseCode} ${200} security_event_log \ \ test query list failed Logs the given message with the given level. this time request security_event_log \ table logRecord \ : ${LogListResponse.content} this time request security_event_log table logRecord : { "code":200, "data":{ "list":[], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Returns the given values which can then be assigned to a variables. this time request security_event_log \ table logRecord \ : ${LogListResponse.content} ${a} ${a} = this time request security_event_log table logRecord : { "code":200, "data":{ "list":[], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Logs the given message with the given level. ${a} this time request security_event_log table logRecord : { "code":200, "data":{ "list":[], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Returns the given values which can then be assigned to a variables. ${LogListResponse.json()}[data][list] ${log} ${log} = [] Logs the given message with the given level. ${logs} [] Logs the given message with the given level. %%%%%%%%%%%%%%%%%%%%%%%%${logs} %%%%%%%%%%%%%%%%%%%%%%%%[] Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${client_ip} '[]""' does not contain '192.168.50.43' ${policyIds} ${objectids} Logs the given message with the given level. toDeletePolicy_DeletePolicyAndObject toDeletePolicy_DeletePolicyAndObject Returns and logs the length of the given item as an integer. ${policyids} ${listlenth} Length is 2 ${listlenth} = 2 Logs the given message with the given level. ${var} 0 ${policyids}[${var}] Logs the given message with the given level. toDeletePolicy_DeletePolicyDeletePolicy toDeletePolicy_DeletePolicyDeletePolicy /v1/policy/compile ${body} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"policyType":"tsg_security","policyIds":[76]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Logs the given message with the given level. ${var} 1 ${policyids}[${var}] Logs the given message with the given level. toDeletePolicy_DeletePolicyDeletePolicy toDeletePolicy_DeletePolicyDeletePolicy /v1/policy/compile ${body} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"policyType":"tsg_security","policyIds":[77]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Logs the given message with the given level. todeleteobj_DeletePolicyAndObject todeleteobj_DeletePolicyAndObject ${objectids} Logs the given message with the given level. todeleteobj todeleteobj /v1/policy/object {"objectIds":[${objectids}]} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"objectIds":[472,473]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Allow Category DENY HTTP SubID tsg_adc tsg_security '[]""' does not contain '192.168.50.43' {"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn","objectSubType":"","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00001_FQDN_xiaozhu","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["*.xiaozhu.com"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[]}} ${rescodeip} ${object_FQDN_Id} /v1/policy/object body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.253226 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*.xiaozhu.com'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, ... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "objectList": [ { "addItemList": [ { "itemId": "", "keywordArray": [ "*.xiaozhu.com" ], "isHexbin": 0 } ], "deleteItemIds": [], "isExclusion": 0, "isInitialize": 0, "isValid": 1, "objectDesc": "", "objectId": 474, "objectName": "SecurityPolicy-Allow-Http-00001_FQDN_xiaozhu", "objectSubType": "", "objectType": "fqdn", "opTime": "2020-04-01 12:23:04", "opUser": 981, "subObjectIds": [], "updateItemList": [] } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*.xiaozhu.com'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objec... ${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*.xiaozhu.com'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objec... Returns the given values which can then be assigned to a variables. ${response['data']['objectList'][0]['objectId']} ${objectId} ${objectId} = 474 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescodeReturn} ${rescodeReturn} = 200 ${rescodeip} = 200 ${object_FQDN_Id} = 474 Logs the given message with the given level. ${object_FQDN_Id} 474 Returns the given values which can then be assigned to a variables. ${object_FQDN_Id} ${objectids} ${objectids} = 474 Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po... Runs the given keyword with the given arguments, if ``condition`` is true. '${addTestClentIPFlag}'=='1' set variable {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po... Logs the given message with the given level. ${addPolicyStr} {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":470,"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":474,"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${rescode} ${policyId1} /v1/policy/compile body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.240316 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 62.0, 'evalu... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "policyList": [ { "action": "deny", "appObjectIdArray": [ 2 ], "doLog": 1, "evaluationLayer": "session_layer", "evaluationOrder": 62.0, "evaluationStage": 1, "isValid": 1, "newSrcIpObjName": "autotestLocalIPObject_192.168.50.43", "opTime": "2020-04-01 12:23:04", "opUser": 981, "policyDesc": "autotest", "policyId": 78, "policyName": "SecurityPolicy-Allow-Http-00001_Deny", "policyType": "tsg_security", "protocol": "HTTP", "referenceObject": [], "scheduleId": [], "userRegion": { "protocol": "HTTP", "method": "drop" }, "userTags": "" } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 62.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp... ${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 62.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp... Returns the given values which can then be assigned to a variables. ${response['data']['policyList'][0]['policyId']} ${policyId} ${policyId} = 78 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescode} ${rescode} = 200 ${rescode} = 200 ${policyId1} = 78 Logs the given message with the given level. ${policyId1} 78 Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId1}]} ${policyIds} ${policyIds} = {"policyType":"tsg_security","policyIds":[78]} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy... Runs the given keyword with the given arguments, if ``condition`` is true. '${addTestClentIPFlag}'=='1' set variable {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} Returns the given values which can then be assigned to a variables. {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}} ${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy... ${addPolicyStr} ${rescode} ${policyId2} /v1/policy/compile body=${body} ${response} settings *Sets new request headers or updates the existing.* {"Authorization":"${token}","Content-Type":"application/json"} http *Sends a POST request to the endpoint.* ${apistr} ${body} &{httpResponse} &{httpResponse} = { seconds=0.28247000000000005 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': ... I/O *Outputs JSON to terminal or a file.* response body { "code": 200, "data": { "policyList": [ { "action": "allow", "appObjectIdArray": [ 2 ], "doLog": 1, "evaluationLayer": "session_layer", "evaluationOrder": 63.0, "evaluationStage": 1, "isValid": 1, "newSrcIpObjName": "autotestLocalIPObject_192.168.50.43", "opTime": "2020-04-01 12:23:05", "opUser": 981, "policyDesc": "autotest", "policyId": 79, "policyName": "SecurityPolicy-Allow-Http-00001", "policyType": "tsg_security", "protocol": "HTTP", "referenceObject": [], "scheduleId": [], "userRegion": { "protocol": "HTTP" }, "userTags": "" } ] }, "msg": "Success", "success": true } assertions *Asserts the field as JSON object.* response body Returns the given values which can then be assigned to a variables. ${httpResponse.body} ${response} ${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 63.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI... ${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 63.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI... Returns the given values which can then be assigned to a variables. ${response['data']['policyList'][0]['policyId']} ${policyId} ${policyId} = 79 Returns the given values which can then be assigned to a variables. ${response['code']} ${rescode} ${rescode} = 200 ${rescode} = 200 ${policyId2} = 79 Logs the given message with the given level. ${policyId2} 79 Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId2}]} ${policyIds2} ${policyIds2} = {"policyType":"tsg_security","policyIds":[79]} Returns the given values which can then be assigned to a variables. {"policyType":"tsg_security","policyIds":[${policyId1}]} ${policyIds1} ${policyIds1} = {"policyType":"tsg_security","policyIds":[78]} Returns a list containing given items. ${policyIds1} ${policyIds2} ${policyIds} ${policyIds} = ['{"policyType":"tsg_security","policyIds":[78]}', '{"policyType":"tsg_security","policyIds":[79]}'] Returns the given time in the requested format. ${starttime} ${starttime} = 2020-04-01 12:23:06 Pauses the test executed for the given time. ${policyVerificationSleepSeconds}s Slept 20 seconds Runs the given command in the system and returns the output. curl -I \ -m \ 10 \ -o \ /dev/null \ -s \ -w \ \ \%{http_code} \ \ http://www.xiaozhu.com/ ${commandreturn} Running command 'curl -I -m 10 -o /dev/null -s -w %{http_code} http://www.xiaozhu.com/ 2>&1'. ${commandreturn} = 200 Fails if ``container`` does not contain ``item`` one or more times. ${commandreturn} 200 Pauses the test executed for the given time. ${policyLogVerificationSleepSeconds}s Slept 50 seconds Returns the given time in the requested format. ${endtime} ${endtime} = 2020-04-01 12:24:26 Converts the given item to a Unicode string. ${policyId2} ${s} ${s} = 79 security_event_log ${starttime} ${endtime} ${testClentIP} ${s} http_host .xiaozhu.com ${logType} ${startTime} ${endTime} ${client_ip} ${policy_id} ${logCondition} settings *Sets new request headers or updates the existing.* {"Content-Type":"application/x-www-form-urlencoded","Authorization":"${token}"} http *Sends a GET request to the endpoint.* /v1/log/schema?logType=${logname} &{LogSchemaResponse} &{LogSchemaResponse} = { seconds=0.182528 | status=200 | body={'code': 200, 'data': {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'co... Logs the given message with the given level. ${logname} security_event_log I/O *Outputs JSON Schema to terminal or a file.* response body { "type": "object", "properties": { "code": { "type": "integer", "default": 200 }, "data": { "type": "object", "properties": { "doc": { "type": "object", "properties": { "schema_query": { "type": "object", "properties": { "dimensions": { "type": "array", "items": { "type": "string" }, "default": [ "common_server_ip", "common_client_ip", "common_policy_id", "common_action", "common_sled_ip", "common_server_location", "common_subscriber_id", "http_domain" ] }, "metrics": { "type": "array", "items": { "type": "string" }, "default": [ "common_server_ip", "common_client_ip", "common_subscriber_id", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num" ] }, "filters": { "type": "array", "items": { "type": "string" }, "default": [ "common_policy_id", "common_action", "common_address_type", "common_server_ip", "common_client_ip", "common_server_port", "common_server_location", "common_subscriber_id", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "http_domain", "http_content_type", "ssl_sni", "ssl_pinningst", "ssl_intercept_state" ] } }, "required": [ "dimensions", "filters", "metrics" ] }, "schema_type": { "type": "object", "properties": { "BASE": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "HTTP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "http_url", "http_host", "http_domain", "http_request_line", "http_response_line", "http_request_header", "http_response_header", "http_request_body", "http_response_body", "http_request_body_key", "http_response_body_key", "http_proxy_flag", "http_sequence", "http_snapshot", "http_cookie", "http_referer", "http_user_agent", "http_content_length", "http_content_type", "http_set_cookie", "http_version", "http_response_lantency_ms", "http_session_duration_ms" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "http_url", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "MAIL": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "mail_protocol_type", "mail_account", "mail_from_cmd", "mail_to_cmd", "mail_from", "mail_to", "mail_cc", "mail_bcc", "mail_subject", "mail_subject_charset", "mail_content", "mail_content_charset", "mail_attachment_name", "mail_attachment_name_charset", "mail_attachment_content", "mail_eml_file", "mail_snapshot" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "mail_from", "mail_to", "mail_subject" ] } }, "required": [ "columns", "default_columns" ] }, "DNS": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "dns_message_id", "dns_qr", "dns_opcode", "dns_aa", "dns_tc", "dns_rd", "dns_ra", "dns_rcode", "dns_qdcount", "dns_ancount", "dns_nscount", "dns_arcount", "dns_qname", "dns_qtype", "dns_qclass", "dns_cname", "dns_sub", "dns_rr" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_client_ip", "dns_qr", "dns_qname", "dns_qtype" ] } }, "required": [ "columns", "default_columns" ] }, "SSL": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "ssl_sni", "ssl_san", "ssl_cn", "ssl_pinningst", "ssl_intercept_state", "ssl_server_side_latency", "ssl_client_side_latency", "ssl_server_side_version", "ssl_client_side_version", "ssl_cert_verify", "ssl_error", "ssl_con_latency_ms" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "ssl_sni", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "FTP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "ftp_account", "ftp_url", "ftp_content" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "ftp_url", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "BGP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "bgp_type", "bgp_as_num", "bgp_route" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "bgp_type", "bgp_as_num", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] }, "VOIP": { "type": "object", "properties": { "columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_client_port", "common_l4_protocol", "common_address_type", "common_server_ip", "common_server_port", "common_action", "common_direction", "common_entrance_id", "common_sled_ip", "common_client_location", "common_client_asn", "common_server_location", "common_server_asn", "common_c2s_pkt_num", "common_s2c_pkt_num", "common_c2s_byte_num", "common_s2c_byte_num", "common_service", "common_schema_type", "common_user_tags", "common_sub_action", "common_user_region", "common_device_id", "common_link_id", "common_isp", "common_encapsulation", "common_app_label", "common_app_id", "common_protocol_id", "common_start_time", "common_end_time", "common_establish_latency_ms", "common_con_duration_ms", "common_stream_dir", "common_address_list", "common_has_dup_traffic", "common_stream_error", "common_stream_trace_id", "voip_calling_account", "voip_called_account", "voip_calling_number", "voip_called_number" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "voip_calling_account", "voip_called_account", "common_server_ip", "common_server_port" ] } }, "required": [ "columns", "default_columns" ] } }, "required": [ "BASE", "BGP", "DNS", "FTP", "HTTP", "MAIL", "SSL", "VOIP" ] }, "default_columns": { "type": "array", "items": { "type": "string" }, "default": [ "common_recv_time", "common_log_id", "common_policy_id", "common_subscriber_id", "common_client_ip", "common_server_ip", "common_server_port", "common_schema_type" ] } }, "required": [ "default_columns", "schema_query", "schema_type" ] }, "fields": { "type": "array", "items": { "type": "object", "properties": { "name": { "type": "string" }, "type": { "type": "string" }, "doc": { "type": "object", "properties": { "allow_query": { "type": "string" }, "constraints": { "type": "object", "properties": { "type": { "type": "string" } }, "required": [ "type" ] }, "format": { "type": "object", "properties": { "functions": { "type": "string" }, "appendTo": { "type": "string" }, "param": { "type": "string" } }, "required": [ "functions" ] }, "data": { "type": "array", "items": { "type": "object", "properties": { "code": { "type": "string" }, "value": { "type": "string" } }, "required": [ "code", "value" ] } }, "visibility": { "type": "string" } } }, "label": { "type": "string" } }, "required": [ "label", "name", "type" ] }, "default": [ { "name": "common_recv_time", "type": "int", "doc": { "allow_query": "true", "constraints": { "type": "timestamp" }, "format": { "functions": "current_timestamp" } }, "label": "Receive Time" }, { "name": "common_log_id", "type": "long", "doc": { "allow_query": "true", "format": { "functions": "snowflake_id" } }, "label": "Log ID" }, { "name": "common_policy_id", "type": "int", "doc": { "allow_query": "true" }, "label": "Policy ID" }, { "name": "common_subscriber_id", "type": "string", "doc": { "allow_query": "true" }, "label": "Subscriber ID" }, { "name": "common_client_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" }, "format": { "functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id" } }, "label": "Client IP" }, { "name": "common_client_port", "type": "int", "label": "Client Port" }, { "name": "common_l4_protocol", "type": "string", "label": "L4 Protocol" }, { "name": "common_address_type", "type": "int", "doc": { "data": [ { "code": "4", "value": "ipv4" }, { "code": "6", "value": "ipv6" } ] }, "label": "Address Type" }, { "name": "common_server_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" }, "format": { "functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn" } }, "label": "Server IP" }, { "name": "common_server_port", "type": "int", "doc": { "allow_query": "true" }, "label": "Server Port" }, { "name": "common_action", "type": "int", "doc": { "allow_query": "true", "data": [ { "code": "0", "value": "None" }, { "code": "1", "value": "Monitor" }, { "code": "2", "value": "Intercept" }, { "code": "16", "value": "Deny" }, { "code": "48", "value": "Manipulation" }, { "code": "128", "value": "Allow" } ] }, "label": "Action" }, { "name": "common_direction", "type": "int", "doc": { "data": [ { "code": "0", "value": "outbound" }, { "code": "1", "value": "inbound" } ] }, "label": "Direction" }, { "name": "common_entrance_id", "type": "int", "doc": { "visibility": "disabled" }, "label": "Entrance ID" }, { "name": "common_sled_ip", "type": "string", "doc": { "allow_query": "true", "constraints": { "type": "ip" } }, "label": "Sled IP" }, { "name": "common_client_location", "type": "string", "label": "Client Location" }, { "name": "common_client_asn", "type": "string", "label": "Client ASN" }, { "name": "common_server_location", "type": "string", "label": "Server Location" }, { "name": "common_server_asn", "type": "string", "label": "Server ASN" }, { "name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent" }, { "name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received" }, { "name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent" }, { "name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received" }, { "name": "common_service", "type": "int", "doc": { "visibility": "disabled" }, "label": "Service" }, { "name": "common_schema_type", "type": "string", "doc": { "data": [ { "code": "BASE", "value": "BASE" }, { "code": "HTTP", "value": "HTTP" }, { "code": "MAIL", "value": "MAIL" }, { "code": "DNS", "value": "DNS" }, { "code": "SSL", "value": "SSL" }, { "code": "FTP", "value": "FTP" }, { "code": "BGP", "value": "BGP" }, { "code": "VOIP", "value": "VOIP" }, { "code": "RADIUS", "value": "RADIUS" } ], "allow_query": "true" }, "label": "Schema Type" }, { "name": "common_user_tags", "type": "string", "doc": { "visibility": "disabled" }, "label": "User Tags" }, { "name": "common_sub_action", "type": "string", "doc": { "visibility": "hidden" }, "label": "Sub Action" }, { "name": "common_user_region", "type": "string", "doc": { "visibility": "hidden" }, "label": "User Region" }, { "name": "common_device_id", "type": "string", "doc": { "visibility": "disabled" }, "label": "Device ID" }, { "name": "common_link_id", "type": "int", "doc": { "visibility": "disabled" }, "label": "Link ID" }, { "name": "common_isp", "type": "string", "doc": { "visibility": "disabled" }, "label": "ISP" }, { "name": "common_encapsulation", "type": "int", "doc": { "data": [ { "code": "0", "value": "Ethernet" }, { "code": "8", "value": "PPP" }, { "code": "12", "value": "CiscoHDLC" } ] }, "label": "Encapsulation" }, { "name": "common_app_label", "type": "string", "doc": { "visibility": "disabled" }, "label": "Application Label" }, { "name": "common_app_id", "type": "int", "doc": { "data": [ { "code": "0", "value": "NOT SPECIFIED" }, { "code": "100001", "value": "Skype" }, { "code": "100101", "value": "Instagram" }, { "code": "100201", "value": "Youtube" }, { "code": "100301", "value": "Facebook" }, { "code": "100401", "value": "What‘s App" }, { "code": "100501", "value": "Periscope" }, { "code": "100601", "value": "Viber" }, { "code": "100701", "value": "Twitter" }, { "code": "100801", "value": "Vkontakte" }, { "code": "100901", "value": "Telegram" }, { "code": "101001", "value": "Odnoklassniki" }, { "code": "101101", "value": "Mail agent" }, { "code": "101201", "value": "FaceTime" }, { "code": "101301", "value": "Snapchat" }, { "code": "101401", "value": "Google" }, { "code": "101501", "value": "Yandex" }, { "code": "101601", "value": "Yandex Browser Turbo" }, { "code": "101701", "value": "Opera" }, { "code": "101702", "value": "Opera Turbo" }, { "code": "101703", "value": "Opera mini" }, { "code": "101801", "value": "AppStore" }, { "code": "101901", "value": "PlayMarket" }, { "code": "102001", "value": "Drugvokrug social networking" }, { "code": "102101", "value": "Badoo social networking" }, { "code": "102201", "value": "WeChat" }, { "code": "102301", "value": "Zello" }, { "code": "102401", "value": "Freegate" }, { "code": "102501", "value": "Psiphon" }, { "code": "102601", "value": "TOR" }, { "code": "102602", "value": "Tor browser" }, { "code": "102603", "value": "Tor mode" }, { "code": "102701", "value": "Orbot" }, { "code": "102801", "value": "Tunnel Bear VPN" }, { "code": "102901", "value": "HotSpot Shield VPN" }, { "code": "103001", "value": "VPN Master" }, { "code": "103101", "value": "Hola VPN" }, { "code": "103201", "value": "HideMyAss VPN" }, { "code": "103301", "value": "Zenmate VPN" }, { "code": "103401", "value": "SignalPrivateMessenger" }, { "code": "200001", "value": "RFA" }, { "code": "200002", "value": "VOA" }, { "code": "200003", "value": "lantern" }, { "code": "200004", "value": "Line" }, { "code": "200005", "value": "voxer" }, { "code": "200006", "value": "ZeroNet" }, { "code": "200007", "value": "Zalo" }, { "code": "200008", "value": "free_browser" }, { "code": "200009", "value": "Diaspora" }, { "code": "200010", "value": "browsec" }, { "code": "200011", "value": "Chrome_plugin_chuguo" }, { "code": "200012", "value": "GoGo_SocksHttp" }, { "code": "200013", "value": "ultrasurf_chrome" }, { "code": "200014", "value": "pinterest" }, { "code": "200015", "value": "Swisscom" }, { "code": "200016", "value": "Threema" }, { "code": "200017", "value": "Circuit_iOS" }, { "code": "200018", "value": "Chrome_plugin_FastsTunnel" }, { "code": "200019", "value": "OoVoo" }, { "code": "200020", "value": "Vine" }, { "code": "200021", "value": "Keek" }, { "code": "200022", "value": "Hi" }, { "code": "200023", "value": "HeyTell" }, { "code": "200024", "value": "HikeMessenger" }, { "code": "200025", "value": "Nonoh" }, { "code": "200026", "value": "Path" }, { "code": "200027", "value": "Kik" }, { "code": "200028", "value": "BBM" }, { "code": "200029", "value": "Talkray" }, { "code": "200030", "value": "HelloTalk" }, { "code": "200031", "value": "Skout" }, { "code": "200032", "value": "MeetMe" }, { "code": "200033", "value": "Nextdoor" }, { "code": "200034", "value": "Shots" }, { "code": "200035", "value": "Zoosk" }, { "code": "200036", "value": "TextPlus" }, { "code": "200037", "value": "Maaii" }, { "code": "200038", "value": "Ustream" }, { "code": "200039", "value": "Yikyak" }, { "code": "200040", "value": "chatsecure" }, { "code": "200041", "value": "freecalls" }, { "code": "200042", "value": "SignalPrivateMessenger" }, { "code": "200043", "value": "USGOV_CIA" }, { "code": "200044", "value": "USGOV_FBI" }, { "code": "200045", "value": "USGOV_DHS" }, { "code": "200046", "value": "shenxun_Secure_Call_android" }, { "code": "200047", "value": "shenxun_Secure_Call_web" }, { "code": "200048", "value": "UProxy" }, { "code": "200049", "value": "soma" }, { "code": "200050", "value": "PlayerUnknown's_Battlegrounds" }, { "code": "200051", "value": "STEAM" }, { "code": "200052", "value": "dalai_lama" }, { "code": "200053", "value": "Steam_forum" }, { "code": "200054", "value": "Microsoft Online Certificate" }, { "code": "200055", "value": "sogou_spider" }, { "code": "200056", "value": "baidu_mobie" }, { "code": "200057", "value": "Apple Push Service" }, { "code": "200058", "value": "IQIYI" }, { "code": "200059", "value": "baidu_spider" }, { "code": "200060", "value": "Weibo" }, { "code": "200061", "value": "Apple captive service" }, { "code": "200062", "value": "Microsoft wns" }, { "code": "200063", "value": "360_safe_pc" }, { "code": "200064", "value": "Sogou Public Service" }, { "code": "200065", "value": "Lenovo app_POST service" }, { "code": "200066", "value": "Apple securityd service" }, { "code": "200067", "value": "Weather pass" }, { "code": "200068", "value": "Apple Service Pack" }, { "code": "200069", "value": "Fast pressure" }, { "code": "200070", "value": "SemrushBot" }, { "code": "200071", "value": "Adrefs_spider" }, { "code": "200072", "value": "AndroidDownloadManager" }, { "code": "200073", "value": "XenderTop" }, { "code": "200074", "value": "microsoft_update" }, { "code": "200075", "value": "Youku" }, { "code": "200076", "value": "Google_spider" }, { "code": "200077", "value": "Microsoft User Experience and Telemetry Components" }, { "code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT" }, { "code": "200079", "value": "Microsoft ncsi" }, { "code": "200080", "value": "Microsoft Privacy Collection Service" }, { "code": "200081", "value": "uTorrent" }, { "code": "200082", "value": "Edge" }, { "code": "200083", "value": "Lenovo Music Store" }, { "code": "200084", "value": "LieBao" }, { "code": "200085", "value": "majesti_spider" }, { "code": "200086", "value": "DotBot" }, { "code": "200087", "value": "Millet Update" }, { "code": "200088", "value": "Today’s headlines" }, { "code": "200089", "value": "Microsoft live" }, { "code": "200090", "value": "Microsoft OneNote" }, { "code": "200091", "value": "Bing_spider" }, { "code": "200092", "value": "Apple location service" }, { "code": "200093", "value": "Kuaishou" }, { "code": "200094", "value": "LeTV video" }, { "code": "200095", "value": "QQ" }, { "code": "200096", "value": "Wps" }, { "code": "200097", "value": "kugou music" }, { "code": "200098", "value": "kuwo music" }, { "code": "200099", "value": "360_common_service" }, { "code": "200100", "value": "Camera360" }, { "code": "200101", "value": "Outlook" }, { "code": "200102", "value": "zhihu" }, { "code": "200103", "value": "Tencent video" }, { "code": "200104", "value": "funshion" }, { "code": "200105", "value": "QQ shared service" }, { "code": "200106", "value": "Microsoft wdcp service" }, { "code": "200107", "value": "Microsoft Media_center_pc" }, { "code": "200108", "value": "360 phone helper" }, { "code": "200109", "value": "Kingsoft Public Service" }, { "code": "200110", "value": "Ios_wifi connection" }, { "code": "200111", "value": "Teamviewer" }, { "code": "200112", "value": "Baidu cloud disk" }, { "code": "200113", "value": "Tencent News" }, { "code": "200114", "value": "Baidu map" }, { "code": "200115", "value": "Panda TV" }, { "code": "200116", "value": "Thunder" }, { "code": "200117", "value": "NetEase cloud music" }, { "code": "200118", "value": "QQ music" }, { "code": "200119", "value": "Itools" }, { "code": "200120", "value": "Jingdong Finance" }, { "code": "200121", "value": "PycURL" }, { "code": "200122", "value": "Yahoo_Spider" }, { "code": "200123", "value": "Himalayan FM" }, { "code": "200124", "value": "Youdao_dict" }, { "code": "200125", "value": "Microsoft_spynet" }, { "code": "200126", "value": "proximicBot" }, { "code": "200127", "value": "Foxit_reader" }, { "code": "200128", "value": "Sohu Video" }, { "code": "200129", "value": "BlueStacks" }, { "code": "200130", "value": "Beauty group" }, { "code": "200131", "value": "Kmplayer" }, { "code": "200132", "value": "TaoBao" }, { "code": "200133", "value": "Exabot" }, { "code": "200134", "value": "Ubuntu_apt_get" }, { "code": "200135", "value": "Oriental Fortune" }, { "code": "200136", "value": "JikeSpider" }, { "code": "200137", "value": "Itunesstored" }, { "code": "200138", "value": "GAD map" }, { "code": "200139", "value": "ifeng News" }, { "code": "200140", "value": "BoardReaderBot" }, { "code": "200141", "value": "AmazonBot" }, { "code": "200142", "value": "Alipay" }, { "code": "200143", "value": "Alipay security controls" }, { "code": "200144", "value": "360 security guards (antivirus)" }, { "code": "200145", "value": "360 logon service" }, { "code": "200146", "value": "BLP_bbot" }, { "code": "200147", "value": "Keep" }, { "code": "200148", "value": "WiFi universal key" }, { "code": "200149", "value": "Baidu Music" }, { "code": "200150", "value": "Vip.com" }, { "code": "200151", "value": "JD.COM" }, { "code": "200152", "value": "sina" }, { "code": "200153", "value": "youdao Public service" }, { "code": "200154", "value": "Jinshan public service" }, { "code": "200155", "value": "Baidu guard" }, { "code": "200156", "value": "Apple system update service" }, { "code": "200157", "value": "momo" }, { "code": "200158", "value": "CNZZ statistics" }, { "code": "200159", "value": "Microsoft one_drive service" }, { "code": "200160", "value": "WindowsStore" }, { "code": "200161", "value": "duba" }, { "code": "200162", "value": "Baidu HD" }, { "code": "200163", "value": "qunar" }, { "code": "200164", "value": "qianxunyingshi" }, { "code": "200165", "value": "KuaiyanKanShuSpider" }, { "code": "200166", "value": "Mail.RU_Bot_Robot" }, { "code": "200167", "value": "MpCommunication" }, { "code": "200168", "value": "Weather forecast" }, { "code": "200169", "value": "Ltx71_spider" }, { "code": "200170", "value": "Ia_archiver" }, { "code": "200171", "value": "Ali Wangwang" }, { "code": "200172", "value": "UC home page (information)" }, { "code": "200173", "value": "Yeti" }, { "code": "200174", "value": "Rtorrent" }, { "code": "200175", "value": "QQPim" }, { "code": "200176", "value": "NetEase News" }, { "code": "200177", "value": "sina sports" }, { "code": "200178", "value": "Exchange of foreign exchange" }, { "code": "200179", "value": "BlueStacks update" }, { "code": "200180", "value": "youdao" }, { "code": "200181", "value": "QQ computer housekeeper" }, { "code": "200182", "value": "UltraEdit" }, { "code": "200183", "value": "EasouSpider" }, { "code": "200184", "value": "QQ Zone" }, { "code": "200185", "value": "Foxmail" }, { "code": "200186", "value": "Pingdom.com" }, { "code": "200187", "value": "Sina Finance" }, { "code": "200188", "value": "QQ one key login" }, { "code": "200189", "value": "Norton" }, { "code": "200190", "value": "Baidu waimai" }, { "code": "200191", "value": "YaCy" }, { "code": "200192", "value": "Haitong e Haitong" }, { "code": "200193", "value": "AdsBot-Google" }, { "code": "200194", "value": "Guangfa Yijin" }, { "code": "200195", "value": "Ali security program" }, { "code": "200196", "value": "Cliqzbot" }, { "code": "200197", "value": "Mobike" }, { "code": "200198", "value": "Kingsoft PowerWord" }, { "code": "200199", "value": "meishij" }, { "code": "200200", "value": "CCB mobile bank" }, { "code": "200201", "value": "Mega SkyDrive" }, { "code": "200202", "value": "douyu" }, { "code": "200203", "value": "Flamingo_SearchEngine" }, { "code": "200204", "value": "Lenovo shop" }, { "code": "200205", "value": "Uc news" }, { "code": "200206", "value": "Volcano small video" }, { "code": "200207", "value": "Meitu Xiu Xiu" }, { "code": "200208", "value": "Kaspersky" }, { "code": "200209", "value": "AcFun" }, { "code": "200210", "value": "Slackbot" }, { "code": "200211", "value": "Snowball" }, { "code": "200212", "value": "SafeDNSBot" }, { "code": "200213", "value": "Great wisdom" }, { "code": "200214", "value": "Mailbox of NetEase" }, { "code": "200215", "value": "peasecod" }, { "code": "200216", "value": "Gold ten data" }, { "code": "200217", "value": "Linkdexbot" }, { "code": "200218", "value": "Sina blog" }, { "code": "200219", "value": "Ginger" }, { "code": "200220", "value": "Microsoft activation verification" }, { "code": "200221", "value": "Facebot" }, { "code": "200222", "value": "Dangdang" }, { "code": "200223", "value": "QQ cyclone" }, { "code": "200224", "value": "Wp_feedbot" }, { "code": "200225", "value": "ICBC" }, { "code": "200226", "value": "Public service" }, { "code": "200227", "value": "Magpie-crawler" }, { "code": "200228", "value": "xianyu" }, { "code": "200229", "value": "GetIntentBot" }, { "code": "200230", "value": "Papers" }, { "code": "200231", "value": "NewsGator" }, { "code": "200232", "value": "RankFlexBot" }, { "code": "200233", "value": "rogerbot" }, { "code": "200234", "value": "SurdotlyBot" }, { "code": "200235", "value": "CheckMarkNetworkBot" }, { "code": "200236", "value": "pyspider" }, { "code": "200237", "value": "spbot" }, { "code": "200238", "value": "Huaxia Bank" }, { "code": "200239", "value": "glory of king" }, { "code": "200240", "value": "msnbot-Products" }, { "code": "200241", "value": "archive.org" }, { "code": "200242", "value": "applebot" }, { "code": "200243", "value": "alicall" }, { "code": "200244", "value": "Superfeedrbot" }, { "code": "200245", "value": "QQ mailbox" }, { "code": "200246", "value": "coccocbot-webBot" }, { "code": "200247", "value": "dingtalk" }, { "code": "200248", "value": "Dragonbot" }, { "code": "200249", "value": "Mediatoolkitbot" }, { "code": "200250", "value": "bitcomet" }, { "code": "200251", "value": "filetopia" }, { "code": "200252", "value": "flashget" }, { "code": "200253", "value": "oracle" }, { "code": "200254", "value": "yyvoice" }, { "code": "200255", "value": "imesh" }, { "code": "200256", "value": "citrix" }, { "code": "200257", "value": "corba" }, { "code": "200258", "value": "dameware" }, { "code": "200259", "value": "pcanywhere" }, { "code": "200260", "value": "qq_rdp" }, { "code": "200261", "value": "poco" }, { "code": "200262", "value": "qqdownload" }, { "code": "200263", "value": "applejuice" }, { "code": "200264", "value": "stealthnet" }, { "code": "200265", "value": "winmx" }, { "code": "200266", "value": "emule" }, { "code": "200267", "value": "emule_decrypt" }, { "code": "200268", "value": "qvod" }, { "code": "200269", "value": "mysql" }, { "code": "200270", "value": "icecast" }, { "code": "200271", "value": "mms" }, { "code": "200272", "value": "pplive" }, { "code": "200273", "value": "ppstream" }, { "code": "200274", "value": "sopcast" }, { "code": "200275", "value": "tvants" }, { "code": "200276", "value": "sohutv" }, { "code": "200277", "value": "iku" }, { "code": "200278", "value": "qqlive" }, { "code": "200279", "value": "rsync" }, { "code": "200280", "value": "xunyou_speedup" }, { "code": "200281", "value": "msn" }, { "code": "200282", "value": "popo" }, { "code": "200283", "value": "sinauc" }, { "code": "200284", "value": "qqbattle" }, { "code": "200285", "value": "quake" }, { "code": "200286", "value": "xbox" }, { "code": "200287", "value": "wow" }, { "code": "200288", "value": "lol" }, { "code": "200289", "value": "PostgreSQL" }, { "code": "200290", "value": "TDS" }, { "code": "200291", "value": "VMware" }, { "code": "200292", "value": "Kontiki" }, { "code": "200293", "value": "OpenFT" }, { "code": "200294", "value": "Gnutella" }, { "code": "200295", "value": "eDonkey" }, { "code": "200296", "value": "AVI" }, { "code": "200297", "value": "RealMedia" }, { "code": "200298", "value": "Windowsmedia" }, { "code": "200299", "value": "MOVE" }, { "code": "200300", "value": "Feidian" }, { "code": "200301", "value": "Zattoo" }, { "code": "200302", "value": "SHOUTCast" }, { "code": "200303", "value": "TVUplayer" }, { "code": "200304", "value": "VeohTV" }, { "code": "200305", "value": "Soulseek" }, { "code": "200306", "value": "GaduGadu" }, { "code": "200307", "value": "Oscar" }, { "code": "200308", "value": "Yahoo" }, { "code": "200309", "value": "Battlefield" }, { "code": "200310", "value": "Halflife2" }, { "code": "200311", "value": "World of Warcraft" }, { "code": "200312", "value": "USENET" }, { "code": "200313", "value": "AFP" }, { "code": "200314", "value": "Truphone" }, { "code": "200315", "value": "Armagetron" }, { "code": "200316", "value": "CrossFire" }, { "code": "200317", "value": "Dofus" }, { "code": "200318", "value": "Fiesta" }, { "code": "200319", "value": "Florensia" }, { "code": "200320", "value": "Guildwars" }, { "code": "200321", "value": "HTTP Application Activesync" }, { "code": "200322", "value": "MapleStory" }, { "code": "200323", "value": "msSQL" }, { "code": "200324", "value": "WARCRAFT3" }, { "code": "200325", "value": "World of Kung Fu" }, { "code": "200326", "value": "MEEBO" }, { "code": "200327", "value": "DropBox" }, { "code": "200328", "value": "HTTP Proxy" }, { "code": "200329", "value": "Netflix" }, { "code": "200330", "value": "CitrixOnline/GotoMeeting" }, { "code": "200331", "value": "Webex" }, { "code": "200332", "value": "Apple iCloud" }, { "code": "200333", "value": "Apple iTunes" }, { "code": "200334", "value": "WindowsUpdate" }, { "code": "200335", "value": "Tuenti" }, { "code": "200336", "value": "LotusNotes" }, { "code": "200337", "value": "RemoteScan" }, { "code": "200338", "value": "Spotify" }, { "code": "200339", "value": "CiscoVPN" }, { "code": "200340", "value": "TeamSpeak" }, { "code": "200341", "value": "UbuntuONE" }, { "code": "200342", "value": "CNN" }, { "code": "200343", "value": "Wikipedia" }, { "code": "200344", "value": "Collectd" }, { "code": "200345", "value": "Redis" }, { "code": "200346", "value": "ZeroMQ" }, { "code": "200347", "value": "Stracraft" }, { "code": "200348", "value": "Simet" }, { "code": "200349", "value": "OpenSignal" }, { "code": "200350", "value": "99Taxi" }, { "code": "200351", "value": "GloboTV" }, { "code": "200352", "value": "Deezer" }, { "code": "200353", "value": "Microsoft cloud services" }, { "code": "200354", "value": "Twitch" }, { "code": "200355", "value": "KakaoTalk Voice and Chat" }, { "code": "200357", "value": "360.cn" }, { "code": "200358", "value": "360Safeguard_P2P" }, { "code": "200359", "value": "4D" }, { "code": "200360", "value": "acercloud" }, { "code": "200361", "value": "acestream" }, { "code": "200362", "value": "airdroid" }, { "code": "200363", "value": "airmedia" }, { "code": "200364", "value": "akamai" }, { "code": "200365", "value": "akamai_transfer" }, { "code": "200366", "value": "amanda" }, { "code": "200367", "value": "amp" }, { "code": "200368", "value": "Appear.in" }, { "code": "200369", "value": "ares" }, { "code": "200370", "value": "ARKSurvivalEvolved" }, { "code": "200371", "value": "ARMA3Server" }, { "code": "200372", "value": "ARMA2Server" }, { "code": "200373", "value": "AvastSecureDNS" }, { "code": "200374", "value": "azureus" }, { "code": "200375", "value": "backweb" }, { "code": "200376", "value": "BadBaidu" }, { "code": "200377", "value": "baofeng" }, { "code": "200378", "value": "bitext" }, { "code": "200379", "value": "BlackDesertOnline" }, { "code": "200380", "value": "Blizzard" }, { "code": "200381", "value": "bmdp" }, { "code": "200382", "value": "bncs" }, { "code": "200383", "value": "btdht" }, { "code": "200384", "value": "btsync" }, { "code": "200385", "value": "cacaoweb" }, { "code": "200386", "value": "chatango" }, { "code": "200387", "value": "chivalry" }, { "code": "200388", "value": "cirn" }, { "code": "200389", "value": "cisco_sslvpn" }, { "code": "200390", "value": "clash_of_clans" }, { "code": "200391", "value": "Clubbox" }, { "code": "200392", "value": "cod" }, { "code": "200393", "value": "cod_waw" }, { "code": "200394", "value": "combatarms" }, { "code": "200395", "value": "combatarms_p2p" }, { "code": "200396", "value": "ConquerOnline" }, { "code": "200397", "value": "Counterstrike1.6" }, { "code": "200398", "value": "Checkpoint_RDP" }, { "code": "200399", "value": "crashplan" }, { "code": "200400", "value": "crossout" }, { "code": "200401", "value": "cryptic" }, { "code": "200402", "value": "cvs" }, { "code": "200403", "value": "dash" }, { "code": "200404", "value": "dc" }, { "code": "200405", "value": "db2" }, { "code": "200406", "value": "dell_backup" }, { "code": "200407", "value": "Demonware" }, { "code": "200408", "value": "destiny" }, { "code": "200409", "value": "diablo2" }, { "code": "200410", "value": "isakmp" }, { "code": "200411", "value": "jedi" }, { "code": "200412", "value": "jedi_academy" }, { "code": "200413", "value": "jx3online" }, { "code": "200414", "value": "kankan" }, { "code": "200415", "value": "kaseya" }, { "code": "200416", "value": "kazaa" }, { "code": "200417", "value": "kuaibo" }, { "code": "200418", "value": "lifeforge" }, { "code": "200419", "value": "linkproof" }, { "code": "200420", "value": "litecoin" }, { "code": "200421", "value": "maxicloud" }, { "code": "200422", "value": "merakicloud" }, { "code": "200423", "value": "minecraft" }, { "code": "200424", "value": "mongo" }, { "code": "200425", "value": "msoffice_mac" }, { "code": "200426", "value": "munin" }, { "code": "200427", "value": "mzinga" }, { "code": "200428", "value": "n2ping" }, { "code": "200429", "value": "ncsoft" }, { "code": "200430", "value": "netcat_cctv" }, { "code": "200431", "value": "neverwinter" }, { "code": "200432", "value": "newerth" }, { "code": "200433", "value": "nintendo" }, { "code": "200434", "value": "nntps" }, { "code": "200435", "value": "noction" }, { "code": "200436", "value": "noe" }, { "code": "200437", "value": "norton_backup" }, { "code": "200438", "value": "omegle" }, { "code": "200439", "value": "opaserv" }, { "code": "200440", "value": "orbit" }, { "code": "200441", "value": "ourworld" }, { "code": "200442", "value": "overwatch" }, { "code": "200443", "value": "diablo3" }, { "code": "200444", "value": "dianping" }, { "code": "200445", "value": "dianshijia" }, { "code": "200446", "value": "discord" }, { "code": "200447", "value": "dogecoin" }, { "code": "200448", "value": "dota2" }, { "code": "200449", "value": "douyu_chat" }, { "code": "200450", "value": "doyo" }, { "code": "200451", "value": "driveshare" }, { "code": "200452", "value": "dtls" }, { "code": "200453", "value": "dueling_network" }, { "code": "200454", "value": "dvrns" }, { "code": "200455", "value": "dxp" }, { "code": "200456", "value": "ea_games" }, { "code": "200457", "value": "epson" }, { "code": "200458", "value": "eso" }, { "code": "200459", "value": "etrust" }, { "code": "200460", "value": "fasp" }, { "code": "200461", "value": "finalfantasy_xiv" }, { "code": "200462", "value": "flash" }, { "code": "200463", "value": "fliggy" }, { "code": "200464", "value": "fortinet" }, { "code": "200465", "value": "foscam" }, { "code": "200466", "value": "freechal" }, { "code": "200467", "value": "fring" }, { "code": "200468", "value": "fuckcoin" }, { "code": "200469", "value": "gamespy" }, { "code": "200470", "value": "gangsofspace" }, { "code": "200471", "value": "garena" }, { "code": "200472", "value": "gearsofwar" }, { "code": "200473", "value": "giop" }, { "code": "200474", "value": "git" }, { "code": "200475", "value": "glupteba" }, { "code": "200476", "value": "gnutella2" }, { "code": "200477", "value": "gokuchat" }, { "code": "200478", "value": "google_hangouts" }, { "code": "200479", "value": "gotomeeting" }, { "code": "200480", "value": "gprs_tunnel" }, { "code": "200481", "value": "graal_online_era" }, { "code": "200482", "value": "gsm" }, { "code": "200483", "value": "h1z1" }, { "code": "200484", "value": "halo_online" }, { "code": "200485", "value": "hamachi" }, { "code": "200486", "value": "harveys" }, { "code": "200487", "value": "hearthstone" }, { "code": "200488", "value": "heroes_generals" }, { "code": "200489", "value": "hots" }, { "code": "200490", "value": "icp" }, { "code": "200491", "value": "icq" }, { "code": "200492", "value": "id" }, { "code": "200493", "value": "idrive_sync" }, { "code": "200494", "value": "ipmsg" }, { "code": "200495", "value": "ipop" }, { "code": "200496", "value": "ipsharkk" }, { "code": "200497", "value": "palringo" }, { "code": "200498", "value": "paltalk" }, { "code": "200499", "value": "pando" }, { "code": "200500", "value": "panipani" }, { "code": "200501", "value": "pdbox" }, { "code": "200502", "value": "planetside2" }, { "code": "200503", "value": "portmap_rpc" }, { "code": "200504", "value": "ps4_remoteplay" }, { "code": "200505", "value": "psn" }, { "code": "200506", "value": "psn_store" }, { "code": "200507", "value": "punkbuster" }, { "code": "200508", "value": "pyzor" }, { "code": "200509", "value": "qcloud_ilvb" }, { "code": "200510", "value": "qqpcmgr" }, { "code": "200511", "value": "ramsey_dash" }, { "code": "200512", "value": "razor" }, { "code": "200513", "value": "rbls" }, { "code": "200514", "value": "realvnc" }, { "code": "200515", "value": "relay" }, { "code": "200516", "value": "revolver_nblbt" }, { "code": "200517", "value": "rising_storm" }, { "code": "200518", "value": "roblox" }, { "code": "200519", "value": "robocraft" }, { "code": "200520", "value": "rpc_scan" }, { "code": "200521", "value": "runescape" }, { "code": "200522", "value": "sanandreas" }, { "code": "200523", "value": "saprouter" }, { "code": "200524", "value": "secondlife" }, { "code": "200525", "value": "serialnumberd" }, { "code": "200526", "value": "silkroadonline" }, { "code": "200527", "value": "smite" }, { "code": "200528", "value": "snapvpn" }, { "code": "200529", "value": "spamfighter" }, { "code": "200530", "value": "speedin" }, { "code": "200531", "value": "speedtest" }, { "code": "200532", "value": "spotify_broadcast" }, { "code": "200533", "value": "sqlexp" }, { "code": "200534", "value": "starcitizen" }, { "code": "200535", "value": "starcraft" }, { "code": "200536", "value": "starleaf" }, { "code": "200537", "value": "steam_friends" }, { "code": "200538", "value": "storm_worm" }, { "code": "200539", "value": "stratum" }, { "code": "200540", "value": "supl" }, { "code": "200541", "value": "svn" }, { "code": "200542", "value": "talesrunner" }, { "code": "200543", "value": "tankix" }, { "code": "200544", "value": "telecomkey" }, { "code": "200545", "value": "telnet_exploit" }, { "code": "200546", "value": "tencent_games" }, { "code": "200547", "value": "tenfivecoin" }, { "code": "200548", "value": "tensafe" }, { "code": "200549", "value": "tera" }, { "code": "200550", "value": "tetrisonline" }, { "code": "200551", "value": "thq" }, { "code": "200552", "value": "tip" }, { "code": "200553", "value": "torchlight2" }, { "code": "200554", "value": "traceroute" }, { "code": "200555", "value": "trackmania" }, { "code": "200556", "value": "tremulous" }, { "code": "200557", "value": "trion" }, { "code": "200558", "value": "trojan_zeroaccess" }, { "code": "200559", "value": "twitcasting" }, { "code": "200560", "value": "twitch_irc" }, { "code": "200561", "value": "ubisoft_games" }, { "code": "200562", "value": "umeye" }, { "code": "200563", "value": "vainglory" }, { "code": "200564", "value": "ventrilo" }, { "code": "200565", "value": "vivox" }, { "code": "200566", "value": "vodlocker" }, { "code": "200567", "value": "vpnrobot" }, { "code": "200568", "value": "vpn_unlimited" }, { "code": "200569", "value": "vxworks_exploit" }, { "code": "200570", "value": "warthunder" }, { "code": "200571", "value": "weblogic" }, { "code": "200572", "value": "web_junk" }, { "code": "200573", "value": "weiqi" }, { "code": "200574", "value": "win_message" }, { "code": "200575", "value": "wizard101" }, { "code": "200576", "value": "wns" }, { "code": "200577", "value": "wolf_et" }, { "code": "200578", "value": "worm_22105" }, { "code": "200579", "value": "wuala" }, { "code": "200580", "value": "xfire_p2p" }, { "code": "200581", "value": "xiami" }, { "code": "200582", "value": "xunlei" }, { "code": "200583", "value": "xunlei_accel" }, { "code": "200584", "value": "xunlei_jsq" }, { "code": "200585", "value": "xunyou" }, { "code": "200586", "value": "xymon" }, { "code": "200587", "value": "yahoo_error" }, { "code": "200588", "value": "yahoo_games" }, { "code": "200589", "value": "yahoo_webcam" }, { "code": "200590", "value": "zabbix" }, { "code": "200591", "value": "zeroaccess" }, { "code": "200592", "value": "zoom" }, { "code": "200593", "value": "zynga" }, { "code": "200594", "value": "ICMP_Flood" }, { "code": "200595", "value": "IPFRAG_Flood" }, { "code": "200596", "value": "SYN_Flood" }, { "code": "200597", "value": "ACK_Flood" }, { "code": "200598", "value": "RST_Flood" }, { "code": "200599", "value": "DNS_Flood" }, { "code": "200600", "value": "NTP_Flood" }, { "code": "200601", "value": "UDP_Flood" }, { "code": "200602", "value": "HTTP_Flood" }, { "code": "200603", "value": "SSDP_Flood" }, { "code": "200604", "value": "baiduP2P" }, { "code": "200605", "value": "CSGlobalOffensive" }, { "code": "200606", "value": "AllSeeingEye" }, { "code": "200607", "value": "Bittorrent_Extension" }, { "code": "200608", "value": "BitTorrentSync" }, { "code": "200609", "value": "Call_of_Duty" }, { "code": "200612", "value": "CitrixICA" }, { "code": "200613", "value": "Citrix_Jedi" }, { "code": "200614", "value": "ClashOfClans" }, { "code": "200615", "value": "Canon_BJNP" }, { "code": "200617", "value": "DoyoP2P" }, { "code": "200618", "value": "FortiClientSSLVPN" }, { "code": "200619", "value": "GTA_SanAndreas_Multiplayer" }, { "code": "200620", "value": "HalfLife" }, { "code": "200621", "value": "IBM-DB2" }, { "code": "200622", "value": "Flash_Player" }, { "code": "200623", "value": "Kugou" }, { "code": "200624", "value": "LeagueOfLegends" }, { "code": "200625", "value": "GluptebaBackdoor" }, { "code": "200626", "value": "MedalOfHonor" }, { "code": "200628", "value": "MultiTheftAuto" }, { "code": "200631", "value": "NetcoreScan" }, { "code": "200632", "value": "NeverwinterNights" }, { "code": "200633", "value": "NoctionIRP" }, { "code": "200634", "value": "JavaObjectSerialised" }, { "code": "200635", "value": "RealPlayer" }, { "code": "200636", "value": "TeamFortress2" }, { "code": "200637", "value": "TheCrew" }, { "code": "200638", "value": "TurboVPN" }, { "code": "200639", "value": "MSN_Voice" }, { "code": "200640", "value": "MaplestoryChina" }, { "code": "200641", "value": "Message4U" }, { "code": "200642", "value": "MongoDB" }, { "code": "200643", "value": "NDTThroughput" }, { "code": "200644", "value": "NET-MFP" }, { "code": "200645", "value": "WindowsMessenger" }, { "code": "200646", "value": "WolfensteinEnemyTerritory" }, { "code": "200647", "value": "XboxLive" }, { "code": "200649", "value": "RBL" }, { "code": "200650", "value": "RPC_Exploit" }, { "code": "200651", "value": "Rejection" }, { "code": "200655", "value": "Silverplatter_DXP" }, { "code": "200659", "value": "TencentWNS" }, { "code": "200660", "value": "TrionGames" }, { "code": "200661", "value": "Trojan.Win32.Generic!SB" }, { "code": "200666", "value": "WorldOfWarcraft" }, { "code": "200667", "value": "YY" }, { "code": "200669", "value": "nopayload" }, { "code": "200670", "value": "No_FirstPkt" }, { "code": "200671", "value": "Invalid" } ], "visibility": "disabled" }, "label": "Application ID" }, { "name": "common_protocol_id", "type": "int", "doc": { "data": [ { "code": "0", "value": "NOT SPECIFIED" }, { "code": "10000", "value": "NOT SPECIFIED" }, { "code": "10001", "value": "TCP" }, { "code": "10002", "value": "UDP" }, { "code": "10003", "value": "DNS" }, { "code": "10004", "value": "FTP" }, { "code": "10005", "value": "FTPS" }, { "code": "10006", "value": "GRE" }, { "code": "10007", "value": "HTTP" }, { "code": "10008", "value": "HTTPS" }, { "code": "10009", "value": "ICMP" }, { "code": "10010", "value": "IKE" }, { "code": "10011", "value": "IMAP" }, { "code": "10012", "value": "IMAPS" }, { "code": "10013", "value": "IPSEC" }, { "code": "10014", "value": "XMPP" }, { "code": "10015", "value": "L2TP" }, { "code": "10016", "value": "NTP" }, { "code": "10017", "value": "POP3" }, { "code": "10018", "value": "POP3 SSL" }, { "code": "10019", "value": "PPTP" }, { "code": "10020", "value": "Quic" }, { "code": "10021", "value": "SIP" }, { "code": "10022", "value": "smb" }, { "code": "10023", "value": "SMTP" }, { "code": "10024", "value": "SMTPS" }, { "code": "10025", "value": "SPDY" }, { "code": "10028", "value": "SSH" }, { "code": "10029", "value": "SSL" }, { "code": "10030", "value": "SOCKS" }, { "code": "10031", "value": "BITTORRENT" }, { "code": "10032", "value": "RTSP" }, { "code": "10033", "value": "TELNET" }, { "code": "10034", "value": "UTP" }, { "code": "10035", "value": "FASTTRACK" }, { "code": "10036", "value": "SKINNY" }, { "code": "10037", "value": "IAX" }, { "code": "10038", "value": "MGCP" }, { "code": "10039", "value": "RTCP" }, { "code": "10040", "value": "RTP" }, { "code": "10041", "value": "VNC" }, { "code": "10042", "value": "XDMCP" }, { "code": "10043", "value": "RDP" }, { "code": "10044", "value": "AIMINI" }, { "code": "10045", "value": "IPP" }, { "code": "10046", "value": "NFS" }, { "code": "10047", "value": "TFTP" }, { "code": "10048", "value": "BGP" }, { "code": "10049", "value": "DHCP" }, { "code": "10050", "value": "DHCPV6" }, { "code": "10051", "value": "FINGER" }, { "code": "10052", "value": "KERBEROS" }, { "code": "10053", "value": "LDAP" }, { "code": "10054", "value": "MDNS" }, { "code": "10055", "value": "NNTP" }, { "code": "10056", "value": "SNMP" }, { "code": "10057", "value": "SSDP" }, { "code": "10058", "value": "SYSLOG" }, { "code": "10059", "value": "WHOIS" }, { "code": "10060", "value": "RADIUS" }, { "code": "10061", "value": "OPENVPN" }, { "code": "10062", "value": "STUN" }, { "code": "10063", "value": "TEREDO" }, { "code": "10064", "value": "GTP" }, { "code": "10065", "value": "RTMP" }, { "code": "10066", "value": "chargen_tcp_udp" }, { "code": "10067", "value": "llmnr_udp" }, { "code": "10068", "value": "nbns_udp" }, { "code": "10069", "value": "NETBIOS" }, { "code": "10070", "value": "DirectDownloadLink" }, { "code": "10071", "value": "I23V5" }, { "code": "10072", "value": "DirectConnect" }, { "code": "10073", "value": "OFF" }, { "code": "10074", "value": "OGG" }, { "code": "10075", "value": "MPEG" }, { "code": "10076", "value": "IRC" }, { "code": "10077", "value": "Jabber" }, { "code": "10078", "value": "VRRP" }, { "code": "10079", "value": "IGMP" }, { "code": "10080", "value": "EGP" }, { "code": "10081", "value": "SCTP" }, { "code": "10082", "value": "OSPF" }, { "code": "10083", "value": "IP in IP" }, { "code": "10084", "value": "ICMPv6" }, { "code": "10085", "value": "DCE RPC" }, { "code": "10086", "value": "NetFlow_IPFIX" }, { "code": "10087", "value": "sFlow" }, { "code": "10088", "value": "HTTP Connect (SSL over HTTP)" }, { "code": "10089", "value": "SAP" }, { "code": "10090", "value": "UPnP" }, { "code": "10091", "value": "H323" }, { "code": "10092", "value": "Megaco" }, { "code": "10094", "value": "bacnet" }, { "code": "10096", "value": "bjnp" }, { "code": "10097", "value": "cgp" }, { "code": "10098", "value": "dahua" }, { "code": "10099", "value": "dcc" }, { "code": "10100", "value": "kademlia" }, { "code": "10101", "value": "lansync" }, { "code": "10102", "value": "ldap_ad" }, { "code": "10103", "value": "llp2p" }, { "code": "10104", "value": "mfnp" }, { "code": "10105", "value": "mp2p" }, { "code": "10106", "value": "msn_cache" }, { "code": "10107", "value": "msn_video" }, { "code": "10108", "value": "msnc" }, { "code": "10109", "value": "netflow" }, { "code": "10110", "value": "notes_rpc" }, { "code": "10111", "value": "esp" }, { "code": "10112", "value": "fbcdn_ssl" }, { "code": "10113", "value": "forticlient_sslvpn" }, { "code": "10114", "value": "rfb" }, { "code": "10115", "value": "rtmfp" }, { "code": "10117", "value": "slp" }, { "code": "10118", "value": "steam_inhomebroadcast" }, { "code": "10119", "value": "steam_localbroadcast" }, { "code": "10120", "value": "tpkt" }, { "code": "10121", "value": "xmpps" }, { "code": "10122", "value": "S7COMM" }, { "code": "10123", "value": "CitrixCGP" }, { "code": "10124", "value": "ID_Protocol" }, { "code": "10125", "value": "SMTP_Secure" }, { "code": "10126", "value": "NAT-PMP" } ], "visibility": "disabled" }, "label": "Protocol ID" }, { "name": "common_start_time", "type": "int", "doc": { "constraints": { "type": "timestamp" }, "visibility": "hidden" }, "label": "Start Time" }, { "name": "common_end_time", "type": "int", "doc": { "constraints": { "type": "timestamp" }, "visibility": "hidden" }, "label": "End Time" }, { "name": "common_establish_latency_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Establish Latency(ms)" }, { "name": "common_con_duration_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Duration(ms)" }, { "name": "common_stream_dir", "type": "int", "doc": { "data": [ { "code": "1", "value": "c2s" }, { "code": "2", "value": "s2c" }, { "code": "3", "value": "double" } ] }, "label": "Stream Direction" }, { "name": "common_address_list", "type": "string", "doc": { "visibility": "hidden" }, "label": "Address List" }, { "name": "common_has_dup_traffic", "type": "int", "doc": { "data": [ { "code": "0", "value": "No" }, { "code": "1", "value": "Yes" } ], "visibility": "hidden" }, "label": "Duplication Traffic" }, { "name": "common_stream_error", "type": "string", "doc": { "visibility": "hidden" }, "label": "Stream Error" }, { "name": "common_stream_trace_id", "type": "long", "doc": { "allow_query": "true" }, "label": "Session ID" }, { "name": "http_url", "type": "string", "doc": { "allow_query": "true" }, "label": "URL" }, { "name": "http_host", "type": "string", "doc": { "format": { "functions": "sub_domain", "appendTo": "http_domain" } }, "label": "Host" }, { "name": "http_domain", "type": "string", "doc": { "allow_query": "true" }, "label": "Domain" }, { "name": "http_request_line", "type": "string", "doc": { "visibility": "hidden" }, "label": "Request Line" }, { "name": "http_response_line", "type": "string", "doc": { "visibility": "hidden" }, "label": "Response Line" }, { "name": "http_request_header", "type": "string", "label": "Request Headers" }, { "name": "http_response_header", "type": "string", "label": "Response Headers" }, { "name": "http_request_body", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "Request Body" }, { "name": "http_response_body", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "Response Body" }, { "name": "http_request_body_key", "type": "string", "doc": { "visibility": "disabled" }, "label": "Request Body Key" }, { "name": "http_response_body_key", "type": "string", "doc": { "visibility": "disabled" }, "label": "Response Body Key" }, { "name": "http_proxy_flag", "type": "int", "label": "Proxy Flag" }, { "name": "http_sequence", "type": "int", "label": "Sequence" }, { "name": "http_snapshot", "type": "string", "doc": { "visibility": "hidden" }, "label": "Http Snapshot" }, { "name": "http_cookie", "type": "string", "label": "Cookie" }, { "name": "http_referer", "type": "string", "label": "Referer" }, { "name": "http_user_agent", "type": "string", "label": "User Agent" }, { "name": "http_content_length", "type": "string", "label": "Content Length" }, { "name": "http_content_type", "type": "string", "label": "Content Type" }, { "name": "http_set_cookie", "type": "string", "label": "Set Cookie" }, { "name": "http_version", "type": "string", "label": "Version" }, { "name": "http_response_lantency_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Response Latency(ms)" }, { "name": "http_session_duration_ms", "type": "int", "doc": { "visibility": "hidden" }, "label": "Session Duration(ms)" }, { "name": "mail_protocol_type", "type": "string", "label": "Protocol Type" }, { "name": "mail_account", "type": "string", "label": "Account" }, { "name": "mail_from_cmd", "type": "string", "label": "From CMD" }, { "name": "mail_to_cmd", "type": "string", "label": "To CMD" }, { "name": "mail_from", "type": "string", "doc": { "constraints": { "type": "email" } }, "label": "From" }, { "name": "mail_to", "type": "string", "doc": { "constraints": { "type": "email" } }, "label": "To" }, { "name": "mail_cc", "type": "string", "label": "CC" }, { "name": "mail_bcc", "type": "string", "label": "BCC" }, { "name": "mail_subject", "type": "string", "doc": { "format": { "functions": "decode_of_base64", "param": "mail_subject_charset" } }, "label": "Subject" }, { "name": "mail_subject_charset", "type": "string", "doc": { "visibility": "disabled" }, "label": "Subject Charset" }, { "name": "mail_content", "type": "string", "doc": { "visibility": "hidden" }, "label": "Content" }, { "name": "mail_content_charset", "type": "string", "doc": { "visibility": "hidden" }, "label": "Content Charset" }, { "name": "mail_attachment_name", "type": "string", "doc": { "format": { "functions": "decode_of_base64", "param": "mail_attachment_name_charset" } }, "label": "Attachment" }, { "name": "mail_attachment_name_charset", "type": "string", "doc": { "visibility": "hidden" }, "label": "Attachment Charset" }, { "name": "mail_attachment_content", "type": "string", "doc": { "visibility": "hidden" }, "label": "Attachment Content" }, { "name": "mail_eml_file", "type": "string", "doc": { "constraints": { "type": "file" } }, "label": "EML File" }, { "name": "mail_snapshot", "type": "string", "doc": { "visibility": "hidden" }, "label": "Snapshot" }, { "name": "dns_message_id", "type": "int", "label": "Message ID" }, { "name": "dns_qr", "type": "int", "doc": { "data": [ { "code": "0", "value": "QUERY" }, { "code": "1", "value": "REESPONSE" } ] }, "label": "QR" }, { "name": "dns_opcode", "type": "int", "doc": { "data": [ { "code": "0", "value": "QUERY" }, { "code": "1", "value": "IQUERY" }, { "code": "2", "value": "STATUS" }, { "code": "5", "value": "UPDATE" } ] }, "label": "OPCODE" }, { "name": "dns_aa", "type": "int", "label": "AA" }, { "name": "dns_tc", "type": "int", "label": "TC" }, { "name": "dns_rd", "type": "int", "label": "RD" }, { "name": "dns_ra", "type": "int", "label": "RA" }, { "name": "dns_rcode", "type": "int", "label": "RCODE" }, { "name": "dns_qdcount", "type": "int", "label": "QDCOUNT" }, { "name": "dns_ancount", "type": "int", "label": "ANCOUNT" }, { "name": "dns_nscount", "type": "int", "label": "NSCOUNT" }, { "name": "dns_arcount", "type": "int", "label": "ARCOUNT" }, { "name": "dns_qname", "type": "string", "label": "QNAME" }, { "name": "dns_qtype", "type": "int", "doc": { "data": [ { "code": "1", "value": "A" }, { "code": "2", "value": "NS" }, { "code": "5", "value": "CNAME" }, { "code": "6", "value": "SOA" }, { "code": "11", "value": "WKS" }, { "code": "12", "value": "PTR" }, { "code": "13", "value": "HINFO" }, { "code": "11", "value": "WKS" }, { "code": "15", "value": "MX" }, { "code": "28", "value": "AAAA" } ] }, "label": "QTYPE" }, { "name": "dns_qclass", "type": "int", "label": "QCLASS" }, { "name": "dns_cname", "type": "string", "label": "CNAME" }, { "name": "dns_sub", "type": "int", "doc": { "data": [ { "code": "1", "value": "DNS" }, { "code": "2", "value": "DNSSEC" } ] }, "label": "SUB" }, { "name": "dns_rr", "type": "string", "label": "RR" }, { "name": "ssl_version", "type": "string", "label": "Version" }, { "name": "ssl_sni", "type": "string", "doc": { "allow_query": "true", "format": { "functions": "sub_domain", "appendTo": "http_domain" } }, "label": "SNI" }, { "name": "ssl_san", "type": "string", "label": "SAN" }, { "name": "ssl_cn", "type": "string", "label": "CN" }, { "name": "ssl_pinningst", "type": "int", "doc": { "data": [ { "code": "0", "value": "Not Pinning" }, { "code": "1", "value": "Pinning" }, { "code": "2", "value": "Maybe Pinning" } ] }, "label": "Pinning" }, { "name": "ssl_intercept_state", "type": "int", "doc": { "data": [ { "code": "0", "value": "Passthrough" }, { "code": "1", "value": "Intercept" }, { "code": "2", "value": "Shutdown" } ] }, "label": "Intercept State" }, { "name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)" }, { "name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)" }, { "name": "ssl_server_side_version", "type": "string", "label": "Server Side Version" }, { "name": "ssl_client_side_version", "type": "string", "label": "Client Side Version" }, { "name": "ssl_cert_verify", "type": "int", "doc": { "data": [ { "code": "0", "value": "No" }, { "code": "1", "value": "Yes" } ] }, "label": "Certificate Verify" }, { "name": "ssl_error", "type": "string", "label": "Error" }, { "name": "ssl_con_latency_ms", "type": "int", "doc": { "visibility": "disabled" }, "label": "Connection Latency(ms)" }, { "name": "ftp_account", "type": "string", "label": "Account" }, { "name": "ftp_url", "type": "string", "label": "URL" }, { "name": "ftp_content", "type": "string", "label": "Content" }, { "name": "bgp_type", "type": "int", "label": "Type" }, { "name": "bgp_as_num", "type": "string", "label": "AS Number" }, { "name": "bgp_route", "type": "string", "label": "Route" }, { "name": "voip_calling_account", "type": "string", "label": "Calling Account" }, { "name": "voip_called_account", "type": "string", "label": "Called Account" }, { "name": "voip_calling_number", "type": "string", "label": "Calling Number" }, { "name": "voip_called_number", "type": "string", "label": "Called Number" }, { "name": "streaming_media_url", "type": "string", "label": "Media URL" }, { "name": "streaming_media_protocol", "type": "string", "label": "Media Protocol" } ] } }, "required": [ "doc", "fields" ] }, "msg": { "type": "string", "default": "Success" }, "success": { "type": "boolean", "default": true } }, "required": [ "code", "data", "msg", "success" ] } assertions *Asserts the field as JSON object.* response body Logs the given message with the given level. ${LogSchemaResponse.body['data']} {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'common_server_location', 'common_subscriber_id', 'http_domain'], 'metrics': ['common_server_ip', 'common_client_ip', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num'], 'filters': ['common_policy_id', 'common_action', 'common_address_type', 'common_server_ip', 'common_client_ip', 'common_server_port', 'common_server_location', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'http_domain', 'http_content_type', 'ssl_sni', 'ssl_pinningst', 'ssl_intercept_state']}, 'schema_type': {'BASE': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port']}, 'HTTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'http_url', 'http_host', 'http_domain', 'http_request_line', 'http_response_line', 'http_request_header', 'http_response_header', 'http_request_body', 'http_response_body', 'http_request_body_key', 'http_response_body_key', 'http_proxy_flag', 'http_sequence', 'http_snapshot', 'http_cookie', 'http_referer', 'http_user_agent', 'http_content_length', 'http_content_type', 'http_set_cookie', 'http_version', 'http_response_lantency_ms', 'http_session_duration_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'http_url', 'common_server_port']}, 'MAIL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'mail_protocol_type', 'mail_account', 'mail_from_cmd', 'mail_to_cmd', 'mail_from', 'mail_to', 'mail_cc', 'mail_bcc', 'mail_subject', 'mail_subject_charset', 'mail_content', 'mail_content_charset', 'mail_attachment_name', 'mail_attachment_name_charset', 'mail_attachment_content', 'mail_eml_file', 'mail_snapshot'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'mail_from', 'mail_to', 'mail_subject']}, 'DNS': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'dns_message_id', 'dns_qr', 'dns_opcode', 'dns_aa', 'dns_tc', 'dns_rd', 'dns_ra', 'dns_rcode', 'dns_qdcount', 'dns_ancount', 'dns_nscount', 'dns_arcount', 'dns_qname', 'dns_qtype', 'dns_qclass', 'dns_cname', 'dns_sub', 'dns_rr'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_client_ip', 'dns_qr', 'dns_qname', 'dns_qtype']}, 'SSL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ssl_sni', 'ssl_san', 'ssl_cn', 'ssl_pinningst', 'ssl_intercept_state', 'ssl_server_side_latency', 'ssl_client_side_latency', 'ssl_server_side_version', 'ssl_client_side_version', 'ssl_cert_verify', 'ssl_error', 'ssl_con_latency_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ssl_sni', 'common_server_ip', 'common_server_port']}, 'FTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ftp_account', 'ftp_url', 'ftp_content'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ftp_url', 'common_server_ip', 'common_server_port']}, 'BGP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'bgp_type', 'bgp_as_num', 'bgp_route'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'bgp_type', 'bgp_as_num', 'common_server_ip', 'common_server_port']}, 'VOIP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'voip_calling_account', 'voip_called_account', 'voip_calling_number', 'voip_called_number'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'voip_calling_account', 'voip_called_account', 'common_server_ip', 'common_server_port']}}, 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port', 'common_schema_type']}, 'fields': [{'name': 'common_recv_time', 'type': 'int', 'doc': {'allow_query': 'true', 'constraints': {'type': 'timestamp'}, 'format': {'functions': 'current_timestamp'}}, 'label': 'Receive Time'}, {'name': 'common_log_id', 'type': 'long', 'doc': {'allow_query': 'true', 'format': {'functions': 'snowflake_id'}}, 'label': 'Log ID'}, {'name': 'common_policy_id', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Policy ID'}, {'name': 'common_subscriber_id', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Subscriber ID'}, {'name': 'common_client_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_detail,geo_asn,radius_match', 'appendTo': 'common_client_location,common_client_asn,common_subscriber_id'}}, 'label': 'Client IP'}, {'name': 'common_client_port', 'type': 'int', 'label': 'Client Port'}, {'name': 'common_l4_protocol', 'type': 'string', 'label': 'L4 Protocol'}, {'name': 'common_address_type', 'type': 'int', 'doc': {'data': [{'code': '4', 'value': 'ipv4'}, {'code': '6', 'value': 'ipv6'}]}, 'label': 'Address Type'}, {'name': 'common_server_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_country,geo_asn', 'appendTo': 'common_server_location,common_server_asn'}}, 'label': 'Server IP'}, {'name': 'common_server_port', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Server Port'}, {'name': 'common_action', 'type': 'int', 'doc': {'allow_query': 'true', 'data': [{'code': '0', 'value': 'None'}, {'code': '1', 'value': 'Monitor'}, {'code': '2', 'value': 'Intercept'}, {'code': '16', 'value': 'Deny'}, {'code': '48', 'value': 'Manipulation'}, {'code': '128', 'value': 'Allow'}]}, 'label': 'Action'}, {'name': 'common_direction', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'outbound'}, {'code': '1', 'value': 'inbound'}]}, 'label': 'Direction'}, {'name': 'common_entrance_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Entrance ID'}, {'name': 'common_sled_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}}, 'label': 'Sled IP'}, {'name': 'common_client_location', 'type': 'string', 'label': 'Client Location'}, {'name': 'common_client_asn', 'type': 'string', 'label': 'Client ASN'}, {'name': 'common_server_location', 'type': 'string', 'label': 'Server Location'}, {'name': 'common_server_asn', 'type': 'string', 'label': 'Server ASN'}, {'name': 'common_c2s_pkt_num', 'type': 'int', 'label': 'Packets Sent'}, {'name': 'common_s2c_pkt_num', 'type': 'int', 'label': 'Packets Received'}, {'name': 'common_c2s_byte_num', 'type': 'int', 'label': 'Bytes Sent'}, {'name': 'common_s2c_byte_num', 'type': 'int', 'label': 'Bytes Received'}, {'name': 'common_service', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Service'}, {'name': 'common_schema_type', 'type': 'string', 'doc': {'data': [{'code': 'BASE', 'value': 'BASE'}, {'code': 'HTTP', 'value': 'HTTP'}, {'code': 'MAIL', 'value': 'MAIL'}, {'code': 'DNS', 'value': 'DNS'}, {'code': 'SSL', 'value': 'SSL'}, {'code': 'FTP', 'value': 'FTP'}, {'code': 'BGP', 'value': 'BGP'}, {'code': 'VOIP', 'value': 'VOIP'}, {'code': 'RADIUS', 'value': 'RADIUS'}], 'allow_query': 'true'}, 'label': 'Schema Type'}, {'name': 'common_user_tags', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'User Tags'}, {'name': 'common_sub_action', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Sub Action'}, {'name': 'common_user_region', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'User Region'}, {'name': 'common_device_id', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Device ID'}, {'name': 'common_link_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Link ID'}, {'name': 'common_isp', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'ISP'}, {'name': 'common_encapsulation', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Ethernet'}, {'code': '8', 'value': 'PPP'}, {'code': '12', 'value': 'CiscoHDLC'}]}, 'label': 'Encapsulation'}, {'name': 'common_app_label', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Application Label'}, {'name': 'common_app_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '100001', 'value': 'Skype'}, {'code': '100101', 'value': 'Instagram'}, {'code': '100201', 'value': 'Youtube'}, {'code': '100301', 'value': 'Facebook'}, {'code': '100401', 'value': 'What‘s App'}, {'code': '100501', 'value': 'Periscope'}, {'code': '100601', 'value': 'Viber'}, {'code': '100701', 'value': 'Twitter'}, {'code': '100801', 'value': 'Vkontakte'}, {'code': '100901', 'value': 'Telegram'}, {'code': '101001', 'value': 'Odnoklassniki'}, {'code': '101101', 'value': 'Mail agent'}, {'code': '101201', 'value': 'FaceTime'}, {'code': '101301', 'value': 'Snapchat'}, {'code': '101401', 'value': 'Google'}, {'code': '101501', 'value': 'Yandex'}, {'code': '101601', 'value': 'Yandex Browser Turbo'}, {'code': '101701', 'value': 'Opera'}, {'code': '101702', 'value': 'Opera Turbo'}, {'code': '101703', 'value': 'Opera mini'}, {'code': '101801', 'value': 'AppStore'}, {'code': '101901', 'value': 'PlayMarket'}, {'code': '102001', 'value': 'Drugvokrug social networking'}, {'code': '102101', 'value': 'Badoo social networking'}, {'code': '102201', 'value': 'WeChat'}, {'code': '102301', 'value': 'Zello'}, {'code': '102401', 'value': 'Freegate'}, {'code': '102501', 'value': 'Psiphon'}, {'code': '102601', 'value': 'TOR'}, {'code': '102602', 'value': 'Tor browser'}, {'code': '102603', 'value': 'Tor mode'}, {'code': '102701', 'value': 'Orbot'}, {'code': '102801', 'value': 'Tunnel Bear VPN'}, {'code': '102901', 'value': 'HotSpot Shield VPN'}, {'code': '103001', 'value': 'VPN Master'}, {'code': '103101', 'value': 'Hola VPN'}, {'code': '103201', 'value': 'HideMyAss VPN'}, {'code': '103301', 'value': 'Zenmate VPN'}, {'code': '103401', 'value': 'SignalPrivateMessenger'}, {'code': '200001', 'value': 'RFA'}, {'code': '200002', 'value': 'VOA'}, {'code': '200003', 'value': 'lantern'}, {'code': '200004', 'value': 'Line'}, {'code': '200005', 'value': 'voxer'}, {'code': '200006', 'value': 'ZeroNet'}, {'code': '200007', 'value': 'Zalo'}, {'code': '200008', 'value': 'free_browser'}, {'code': '200009', 'value': 'Diaspora'}, {'code': '200010', 'value': 'browsec'}, {'code': '200011', 'value': 'Chrome_plugin_chuguo'}, {'code': '200012', 'value': 'GoGo_SocksHttp'}, {'code': '200013', 'value': 'ultrasurf_chrome'}, {'code': '200014', 'value': 'pinterest'}, {'code': '200015', 'value': 'Swisscom'}, {'code': '200016', 'value': 'Threema'}, {'code': '200017', 'value': 'Circuit_iOS'}, {'code': '200018', 'value': 'Chrome_plugin_FastsTunnel'}, {'code': '200019', 'value': 'OoVoo'}, {'code': '200020', 'value': 'Vine'}, {'code': '200021', 'value': 'Keek'}, {'code': '200022', 'value': 'Hi'}, {'code': '200023', 'value': 'HeyTell'}, {'code': '200024', 'value': 'HikeMessenger'}, {'code': '200025', 'value': 'Nonoh'}, {'code': '200026', 'value': 'Path'}, {'code': '200027', 'value': 'Kik'}, {'code': '200028', 'value': 'BBM'}, {'code': '200029', 'value': 'Talkray'}, {'code': '200030', 'value': 'HelloTalk'}, {'code': '200031', 'value': 'Skout'}, {'code': '200032', 'value': 'MeetMe'}, {'code': '200033', 'value': 'Nextdoor'}, {'code': '200034', 'value': 'Shots'}, {'code': '200035', 'value': 'Zoosk'}, {'code': '200036', 'value': 'TextPlus'}, {'code': '200037', 'value': 'Maaii'}, {'code': '200038', 'value': 'Ustream'}, {'code': '200039', 'value': 'Yikyak'}, {'code': '200040', 'value': 'chatsecure'}, {'code': '200041', 'value': 'freecalls'}, {'code': '200042', 'value': 'SignalPrivateMessenger'}, {'code': '200043', 'value': 'USGOV_CIA'}, {'code': '200044', 'value': 'USGOV_FBI'}, {'code': '200045', 'value': 'USGOV_DHS'}, {'code': '200046', 'value': 'shenxun_Secure_Call_android'}, {'code': '200047', 'value': 'shenxun_Secure_Call_web'}, {'code': '200048', 'value': 'UProxy'}, {'code': '200049', 'value': 'soma'}, {'code': '200050', 'value': "PlayerUnknown's_Battlegrounds"}, {'code': '200051', 'value': 'STEAM'}, {'code': '200052', 'value': 'dalai_lama'}, {'code': '200053', 'value': 'Steam_forum'}, {'code': '200054', 'value': 'Microsoft Online Certificate'}, {'code': '200055', 'value': 'sogou_spider'}, {'code': '200056', 'value': 'baidu_mobie'}, {'code': '200057', 'value': 'Apple Push Service'}, {'code': '200058', 'value': 'IQIYI'}, {'code': '200059', 'value': 'baidu_spider'}, {'code': '200060', 'value': 'Weibo'}, {'code': '200061', 'value': 'Apple captive service'}, {'code': '200062', 'value': 'Microsoft wns'}, {'code': '200063', 'value': '360_safe_pc'}, {'code': '200064', 'value': 'Sogou Public Service'}, {'code': '200065', 'value': 'Lenovo app_POST service'}, {'code': '200066', 'value': 'Apple securityd service'}, {'code': '200067', 'value': 'Weather pass'}, {'code': '200068', 'value': 'Apple Service Pack'}, {'code': '200069', 'value': 'Fast pressure'}, {'code': '200070', 'value': 'SemrushBot'}, {'code': '200071', 'value': 'Adrefs_spider'}, {'code': '200072', 'value': 'AndroidDownloadManager'}, {'code': '200073', 'value': 'XenderTop'}, {'code': '200074', 'value': 'microsoft_update'}, {'code': '200075', 'value': 'Youku'}, {'code': '200076', 'value': 'Google_spider'}, {'code': '200077', 'value': 'Microsoft User Experience and Telemetry Components'}, {'code': '200078', 'value': 'MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT'}, {'code': '200079', 'value': 'Microsoft ncsi'}, {'code': '200080', 'value': 'Microsoft Privacy Collection Service'}, {'code': '200081', 'value': 'uTorrent'}, {'code': '200082', 'value': 'Edge'}, {'code': '200083', 'value': 'Lenovo Music Store'}, {'code': '200084', 'value': 'LieBao'}, {'code': '200085', 'value': 'majesti_spider'}, {'code': '200086', 'value': 'DotBot'}, {'code': '200087', 'value': 'Millet Update'}, {'code': '200088', 'value': 'Today’s headlines'}, {'code': '200089', 'value': 'Microsoft live'}, {'code': '200090', 'value': 'Microsoft OneNote'}, {'code': '200091', 'value': 'Bing_spider'}, {'code': '200092', 'value': 'Apple location service'}, {'code': '200093', 'value': 'Kuaishou'}, {'code': '200094', 'value': 'LeTV video'}, {'code': '200095', 'value': 'QQ'}, {'code': '200096', 'value': 'Wps'}, {'code': '200097', 'value': 'kugou music'}, {'code': '200098', 'value': 'kuwo music'}, {'code': '200099', 'value': '360_common_service'}, {'code': '200100', 'value': 'Camera360'}, {'code': '200101', 'value': 'Outlook'}, {'code': '200102', 'value': 'zhihu'}, {'code': '200103', 'value': 'Tencent video'}, {'code': '200104', 'value': 'funshion'}, {'code': '200105', 'value': 'QQ shared service'}, {'code': '200106', 'value': 'Microsoft wdcp service'}, {'code': '200107', 'value': 'Microsoft Media_center_pc'}, {'code': '200108', 'value': '360 phone helper'}, {'code': '200109', 'value': 'Kingsoft Public Service'}, {'code': '200110', 'value': 'Ios_wifi connection'}, {'code': '200111', 'value': 'Teamviewer'}, {'code': '200112', 'value': 'Baidu cloud disk'}, {'code': '200113', 'value': 'Tencent News'}, {'code': '200114', 'value': 'Baidu map'}, {'code': '200115', 'value': 'Panda TV'}, {'code': '200116', 'value': 'Thunder'}, {'code': '200117', 'value': 'NetEase cloud music'}, {'code': '200118', 'value': 'QQ music'}, {'code': '200119', 'value': 'Itools'}, {'code': '200120', 'value': 'Jingdong Finance'}, {'code': '200121', 'value': 'PycURL'}, {'code': '200122', 'value': 'Yahoo_Spider'}, {'code': '200123', 'value': 'Himalayan FM'}, {'code': '200124', 'value': 'Youdao_dict'}, {'code': '200125', 'value': 'Microsoft_spynet'}, {'code': '200126', 'value': 'proximicBot'}, {'code': '200127', 'value': 'Foxit_reader'}, {'code': '200128', 'value': 'Sohu Video'}, {'code': '200129', 'value': 'BlueStacks'}, {'code': '200130', 'value': 'Beauty group'}, {'code': '200131', 'value': 'Kmplayer'}, {'code': '200132', 'value': 'TaoBao'}, {'code': '200133', 'value': 'Exabot'}, {'code': '200134', 'value': 'Ubuntu_apt_get'}, {'code': '200135', 'value': 'Oriental Fortune'}, {'code': '200136', 'value': 'JikeSpider'}, {'code': '200137', 'value': 'Itunesstored'}, {'code': '200138', 'value': 'GAD map'}, {'code': '200139', 'value': 'ifeng News'}, {'code': '200140', 'value': 'BoardReaderBot'}, {'code': '200141', 'value': 'AmazonBot'}, {'code': '200142', 'value': 'Alipay'}, {'code': '200143', 'value': 'Alipay security controls'}, {'code': '200144', 'value': '360 security guards (antivirus)'}, {'code': '200145', 'value': '360 logon service'}, {'code': '200146', 'value': 'BLP_bbot'}, {'code': '200147', 'value': 'Keep'}, {'code': '200148', 'value': 'WiFi universal key'}, {'code': '200149', 'value': 'Baidu Music'}, {'code': '200150', 'value': 'Vip.com'}, {'code': '200151', 'value': 'JD.COM'}, {'code': '200152', 'value': 'sina'}, {'code': '200153', 'value': 'youdao Public service'}, {'code': '200154', 'value': 'Jinshan public service'}, {'code': '200155', 'value': 'Baidu guard'}, {'code': '200156', 'value': 'Apple system update service'}, {'code': '200157', 'value': 'momo'}, {'code': '200158', 'value': 'CNZZ statistics'}, {'code': '200159', 'value': 'Microsoft one_drive service'}, {'code': '200160', 'value': 'WindowsStore'}, {'code': '200161', 'value': 'duba'}, {'code': '200162', 'value': 'Baidu HD'}, {'code': '200163', 'value': 'qunar'}, {'code': '200164', 'value': 'qianxunyingshi'}, {'code': '200165', 'value': 'KuaiyanKanShuSpider'}, {'code': '200166', 'value': 'Mail.RU_Bot_Robot'}, {'code': '200167', 'value': 'MpCommunication'}, {'code': '200168', 'value': 'Weather forecast'}, {'code': '200169', 'value': 'Ltx71_spider'}, {'code': '200170', 'value': 'Ia_archiver'}, {'code': '200171', 'value': 'Ali Wangwang'}, {'code': '200172', 'value': 'UC home page (information)'}, {'code': '200173', 'value': 'Yeti'}, {'code': '200174', 'value': 'Rtorrent'}, {'code': '200175', 'value': 'QQPim'}, {'code': '200176', 'value': 'NetEase News'}, {'code': '200177', 'value': 'sina sports'}, {'code': '200178', 'value': 'Exchange of foreign exchange'}, {'code': '200179', 'value': 'BlueStacks update'}, {'code': '200180', 'value': 'youdao'}, {'code': '200181', 'value': 'QQ computer housekeeper'}, {'code': '200182', 'value': 'UltraEdit'}, {'code': '200183', 'value': 'EasouSpider'}, {'code': '200184', 'value': 'QQ Zone'}, {'code': '200185', 'value': 'Foxmail'}, {'code': '200186', 'value': 'Pingdom.com'}, {'code': '200187', 'value': 'Sina Finance'}, {'code': '200188', 'value': 'QQ one key login'}, {'code': '200189', 'value': 'Norton'}, {'code': '200190', 'value': 'Baidu waimai'}, {'code': '200191', 'value': 'YaCy'}, {'code': '200192', 'value': 'Haitong e Haitong'}, {'code': '200193', 'value': 'AdsBot-Google'}, {'code': '200194', 'value': 'Guangfa Yijin'}, {'code': '200195', 'value': 'Ali security program'}, {'code': '200196', 'value': 'Cliqzbot'}, {'code': '200197', 'value': 'Mobike'}, {'code': '200198', 'value': 'Kingsoft PowerWord'}, {'code': '200199', 'value': 'meishij'}, {'code': '200200', 'value': 'CCB mobile bank'}, {'code': '200201', 'value': 'Mega SkyDrive'}, {'code': '200202', 'value': 'douyu'}, {'code': '200203', 'value': 'Flamingo_SearchEngine'}, {'code': '200204', 'value': 'Lenovo shop'}, {'code': '200205', 'value': 'Uc news'}, {'code': '200206', 'value': 'Volcano small video'}, {'code': '200207', 'value': 'Meitu Xiu Xiu'}, {'code': '200208', 'value': 'Kaspersky'}, {'code': '200209', 'value': 'AcFun'}, {'code': '200210', 'value': 'Slackbot'}, {'code': '200211', 'value': 'Snowball'}, {'code': '200212', 'value': 'SafeDNSBot'}, {'code': '200213', 'value': 'Great wisdom'}, {'code': '200214', 'value': 'Mailbox of NetEase'}, {'code': '200215', 'value': 'peasecod'}, {'code': '200216', 'value': 'Gold ten data'}, {'code': '200217', 'value': 'Linkdexbot'}, {'code': '200218', 'value': 'Sina blog'}, {'code': '200219', 'value': 'Ginger'}, {'code': '200220', 'value': 'Microsoft activation verification'}, {'code': '200221', 'value': 'Facebot'}, {'code': '200222', 'value': 'Dangdang'}, {'code': '200223', 'value': 'QQ cyclone'}, {'code': '200224', 'value': 'Wp_feedbot'}, {'code': '200225', 'value': 'ICBC'}, {'code': '200226', 'value': 'Public service'}, {'code': '200227', 'value': 'Magpie-crawler'}, {'code': '200228', 'value': 'xianyu'}, {'code': '200229', 'value': 'GetIntentBot'}, {'code': '200230', 'value': 'Papers'}, {'code': '200231', 'value': 'NewsGator'}, {'code': '200232', 'value': 'RankFlexBot'}, {'code': '200233', 'value': 'rogerbot'}, {'code': '200234', 'value': 'SurdotlyBot'}, {'code': '200235', 'value': 'CheckMarkNetworkBot'}, {'code': '200236', 'value': 'pyspider'}, {'code': '200237', 'value': 'spbot'}, {'code': '200238', 'value': 'Huaxia Bank'}, {'code': '200239', 'value': 'glory of king'}, {'code': '200240', 'value': 'msnbot-Products'}, {'code': '200241', 'value': 'archive.org'}, {'code': '200242', 'value': 'applebot'}, {'code': '200243', 'value': 'alicall'}, {'code': '200244', 'value': 'Superfeedrbot'}, {'code': '200245', 'value': 'QQ mailbox'}, {'code': '200246', 'value': 'coccocbot-webBot'}, {'code': '200247', 'value': 'dingtalk'}, {'code': '200248', 'value': 'Dragonbot'}, {'code': '200249', 'value': 'Mediatoolkitbot'}, {'code': '200250', 'value': 'bitcomet'}, {'code': '200251', 'value': 'filetopia'}, {'code': '200252', 'value': 'flashget'}, {'code': '200253', 'value': 'oracle'}, {'code': '200254', 'value': 'yyvoice'}, {'code': '200255', 'value': 'imesh'}, {'code': '200256', 'value': 'citrix'}, {'code': '200257', 'value': 'corba'}, {'code': '200258', 'value': 'dameware'}, {'code': '200259', 'value': 'pcanywhere'}, {'code': '200260', 'value': 'qq_rdp'}, {'code': '200261', 'value': 'poco'}, {'code': '200262', 'value': 'qqdownload'}, {'code': '200263', 'value': 'applejuice'}, {'code': '200264', 'value': 'stealthnet'}, {'code': '200265', 'value': 'winmx'}, {'code': '200266', 'value': 'emule'}, {'code': '200267', 'value': 'emule_decrypt'}, {'code': '200268', 'value': 'qvod'}, {'code': '200269', 'value': 'mysql'}, {'code': '200270', 'value': 'icecast'}, {'code': '200271', 'value': 'mms'}, {'code': '200272', 'value': 'pplive'}, {'code': '200273', 'value': 'ppstream'}, {'code': '200274', 'value': 'sopcast'}, {'code': '200275', 'value': 'tvants'}, {'code': '200276', 'value': 'sohutv'}, {'code': '200277', 'value': 'iku'}, {'code': '200278', 'value': 'qqlive'}, {'code': '200279', 'value': 'rsync'}, {'code': '200280', 'value': 'xunyou_speedup'}, {'code': '200281', 'value': 'msn'}, {'code': '200282', 'value': 'popo'}, {'code': '200283', 'value': 'sinauc'}, {'code': '200284', 'value': 'qqbattle'}, {'code': '200285', 'value': 'quake'}, {'code': '200286', 'value': 'xbox'}, {'code': '200287', 'value': 'wow'}, {'code': '200288', 'value': 'lol'}, {'code': '200289', 'value': 'PostgreSQL'}, {'code': '200290', 'value': 'TDS'}, {'code': '200291', 'value': 'VMware'}, {'code': '200292', 'value': 'Kontiki'}, {'code': '200293', 'value': 'OpenFT'}, {'code': '200294', 'value': 'Gnutella'}, {'code': '200295', 'value': 'eDonkey'}, {'code': '200296', 'value': 'AVI'}, {'code': '200297', 'value': 'RealMedia'}, {'code': '200298', 'value': 'Windowsmedia'}, {'code': '200299', 'value': 'MOVE'}, {'code': '200300', 'value': 'Feidian'}, {'code': '200301', 'value': 'Zattoo'}, {'code': '200302', 'value': 'SHOUTCast'}, {'code': '200303', 'value': 'TVUplayer'}, {'code': '200304', 'value': 'VeohTV'}, {'code': '200305', 'value': 'Soulseek'}, {'code': '200306', 'value': 'GaduGadu'}, {'code': '200307', 'value': 'Oscar'}, {'code': '200308', 'value': 'Yahoo'}, {'code': '200309', 'value': 'Battlefield'}, {'code': '200310', 'value': 'Halflife2'}, {'code': '200311', 'value': 'World of Warcraft'}, {'code': '200312', 'value': 'USENET'}, {'code': '200313', 'value': 'AFP'}, {'code': '200314', 'value': 'Truphone'}, {'code': '200315', 'value': 'Armagetron'}, {'code': '200316', 'value': 'CrossFire'}, {'code': '200317', 'value': 'Dofus'}, {'code': '200318', 'value': 'Fiesta'}, {'code': '200319', 'value': 'Florensia'}, {'code': '200320', 'value': 'Guildwars'}, {'code': '200321', 'value': 'HTTP Application Activesync'}, {'code': '200322', 'value': 'MapleStory'}, {'code': '200323', 'value': 'msSQL'}, {'code': '200324', 'value': 'WARCRAFT3'}, {'code': '200325', 'value': 'World of Kung Fu'}, {'code': '200326', 'value': 'MEEBO'}, {'code': '200327', 'value': 'DropBox'}, {'code': '200328', 'value': 'HTTP Proxy'}, {'code': '200329', 'value': 'Netflix'}, {'code': '200330', 'value': 'CitrixOnline/GotoMeeting'}, {'code': '200331', 'value': 'Webex'}, {'code': '200332', 'value': 'Apple iCloud'}, {'code': '200333', 'value': 'Apple iTunes'}, {'code': '200334', 'value': 'WindowsUpdate'}, {'code': '200335', 'value': 'Tuenti'}, {'code': '200336', 'value': 'LotusNotes'}, {'code': '200337', 'value': 'RemoteScan'}, {'code': '200338', 'value': 'Spotify'}, {'code': '200339', 'value': 'CiscoVPN'}, {'code': '200340', 'value': 'TeamSpeak'}, {'code': '200341', 'value': 'UbuntuONE'}, {'code': '200342', 'value': 'CNN'}, {'code': '200343', 'value': 'Wikipedia'}, {'code': '200344', 'value': 'Collectd'}, {'code': '200345', 'value': 'Redis'}, {'code': '200346', 'value': 'ZeroMQ'}, {'code': '200347', 'value': 'Stracraft'}, {'code': '200348', 'value': 'Simet'}, {'code': '200349', 'value': 'OpenSignal'}, {'code': '200350', 'value': '99Taxi'}, {'code': '200351', 'value': 'GloboTV'}, {'code': '200352', 'value': 'Deezer'}, {'code': '200353', 'value': 'Microsoft cloud services'}, {'code': '200354', 'value': 'Twitch'}, {'code': '200355', 'value': 'KakaoTalk Voice and Chat'}, {'code': '200357', 'value': '360.cn'}, {'code': '200358', 'value': '360Safeguard_P2P'}, {'code': '200359', 'value': '4D'}, {'code': '200360', 'value': 'acercloud'}, {'code': '200361', 'value': 'acestream'}, {'code': '200362', 'value': 'airdroid'}, {'code': '200363', 'value': 'airmedia'}, {'code': '200364', 'value': 'akamai'}, {'code': '200365', 'value': 'akamai_transfer'}, {'code': '200366', 'value': 'amanda'}, {'code': '200367', 'value': 'amp'}, {'code': '200368', 'value': 'Appear.in'}, {'code': '200369', 'value': 'ares'}, {'code': '200370', 'value': 'ARKSurvivalEvolved'}, {'code': '200371', 'value': 'ARMA3Server'}, {'code': '200372', 'value': 'ARMA2Server'}, {'code': '200373', 'value': 'AvastSecureDNS'}, {'code': '200374', 'value': 'azureus'}, {'code': '200375', 'value': 'backweb'}, {'code': '200376', 'value': 'BadBaidu'}, {'code': '200377', 'value': 'baofeng'}, {'code': '200378', 'value': 'bitext'}, {'code': '200379', 'value': 'BlackDesertOnline'}, {'code': '200380', 'value': 'Blizzard'}, {'code': '200381', 'value': 'bmdp'}, {'code': '200382', 'value': 'bncs'}, {'code': '200383', 'value': 'btdht'}, {'code': '200384', 'value': 'btsync'}, {'code': '200385', 'value': 'cacaoweb'}, {'code': '200386', 'value': 'chatango'}, {'code': '200387', 'value': 'chivalry'}, {'code': '200388', 'value': 'cirn'}, {'code': '200389', 'value': 'cisco_sslvpn'}, {'code': '200390', 'value': 'clash_of_clans'}, {'code': '200391', 'value': 'Clubbox'}, {'code': '200392', 'value': 'cod'}, {'code': '200393', 'value': 'cod_waw'}, {'code': '200394', 'value': 'combatarms'}, {'code': '200395', 'value': 'combatarms_p2p'}, {'code': '200396', 'value': 'ConquerOnline'}, {'code': '200397', 'value': 'Counterstrike1.6'}, {'code': '200398', 'value': 'Checkpoint_RDP'}, {'code': '200399', 'value': 'crashplan'}, {'code': '200400', 'value': 'crossout'}, {'code': '200401', 'value': 'cryptic'}, {'code': '200402', 'value': 'cvs'}, {'code': '200403', 'value': 'dash'}, {'code': '200404', 'value': 'dc'}, {'code': '200405', 'value': 'db2'}, {'code': '200406', 'value': 'dell_backup'}, {'code': '200407', 'value': 'Demonware'}, {'code': '200408', 'value': 'destiny'}, {'code': '200409', 'value': 'diablo2'}, {'code': '200410', 'value': 'isakmp'}, {'code': '200411', 'value': 'jedi'}, {'code': '200412', 'value': 'jedi_academy'}, {'code': '200413', 'value': 'jx3online'}, {'code': '200414', 'value': 'kankan'}, {'code': '200415', 'value': 'kaseya'}, {'code': '200416', 'value': 'kazaa'}, {'code': '200417', 'value': 'kuaibo'}, {'code': '200418', 'value': 'lifeforge'}, {'code': '200419', 'value': 'linkproof'}, {'code': '200420', 'value': 'litecoin'}, {'code': '200421', 'value': 'maxicloud'}, {'code': '200422', 'value': 'merakicloud'}, {'code': '200423', 'value': 'minecraft'}, {'code': '200424', 'value': 'mongo'}, {'code': '200425', 'value': 'msoffice_mac'}, {'code': '200426', 'value': 'munin'}, {'code': '200427', 'value': 'mzinga'}, {'code': '200428', 'value': 'n2ping'}, {'code': '200429', 'value': 'ncsoft'}, {'code': '200430', 'value': 'netcat_cctv'}, {'code': '200431', 'value': 'neverwinter'}, {'code': '200432', 'value': 'newerth'}, {'code': '200433', 'value': 'nintendo'}, {'code': '200434', 'value': 'nntps'}, {'code': '200435', 'value': 'noction'}, {'code': '200436', 'value': 'noe'}, {'code': '200437', 'value': 'norton_backup'}, {'code': '200438', 'value': 'omegle'}, {'code': '200439', 'value': 'opaserv'}, {'code': '200440', 'value': 'orbit'}, {'code': '200441', 'value': 'ourworld'}, {'code': '200442', 'value': 'overwatch'}, {'code': '200443', 'value': 'diablo3'}, {'code': '200444', 'value': 'dianping'}, {'code': '200445', 'value': 'dianshijia'}, {'code': '200446', 'value': 'discord'}, {'code': '200447', 'value': 'dogecoin'}, {'code': '200448', 'value': 'dota2'}, {'code': '200449', 'value': 'douyu_chat'}, {'code': '200450', 'value': 'doyo'}, {'code': '200451', 'value': 'driveshare'}, {'code': '200452', 'value': 'dtls'}, {'code': '200453', 'value': 'dueling_network'}, {'code': '200454', 'value': 'dvrns'}, {'code': '200455', 'value': 'dxp'}, {'code': '200456', 'value': 'ea_games'}, {'code': '200457', 'value': 'epson'}, {'code': '200458', 'value': 'eso'}, {'code': '200459', 'value': 'etrust'}, {'code': '200460', 'value': 'fasp'}, {'code': '200461', 'value': 'finalfantasy_xiv'}, {'code': '200462', 'value': 'flash'}, {'code': '200463', 'value': 'fliggy'}, {'code': '200464', 'value': 'fortinet'}, {'code': '200465', 'value': 'foscam'}, {'code': '200466', 'value': 'freechal'}, {'code': '200467', 'value': 'fring'}, {'code': '200468', 'value': 'fuckcoin'}, {'code': '200469', 'value': 'gamespy'}, {'code': '200470', 'value': 'gangsofspace'}, {'code': '200471', 'value': 'garena'}, {'code': '200472', 'value': 'gearsofwar'}, {'code': '200473', 'value': 'giop'}, {'code': '200474', 'value': 'git'}, {'code': '200475', 'value': 'glupteba'}, {'code': '200476', 'value': 'gnutella2'}, {'code': '200477', 'value': 'gokuchat'}, {'code': '200478', 'value': 'google_hangouts'}, {'code': '200479', 'value': 'gotomeeting'}, {'code': '200480', 'value': 'gprs_tunnel'}, {'code': '200481', 'value': 'graal_online_era'}, {'code': '200482', 'value': 'gsm'}, {'code': '200483', 'value': 'h1z1'}, {'code': '200484', 'value': 'halo_online'}, {'code': '200485', 'value': 'hamachi'}, {'code': '200486', 'value': 'harveys'}, {'code': '200487', 'value': 'hearthstone'}, {'code': '200488', 'value': 'heroes_generals'}, {'code': '200489', 'value': 'hots'}, {'code': '200490', 'value': 'icp'}, {'code': '200491', 'value': 'icq'}, {'code': '200492', 'value': 'id'}, {'code': '200493', 'value': 'idrive_sync'}, {'code': '200494', 'value': 'ipmsg'}, {'code': '200495', 'value': 'ipop'}, {'code': '200496', 'value': 'ipsharkk'}, {'code': '200497', 'value': 'palringo'}, {'code': '200498', 'value': 'paltalk'}, {'code': '200499', 'value': 'pando'}, {'code': '200500', 'value': 'panipani'}, {'code': '200501', 'value': 'pdbox'}, {'code': '200502', 'value': 'planetside2'}, {'code': '200503', 'value': 'portmap_rpc'}, {'code': '200504', 'value': 'ps4_remoteplay'}, {'code': '200505', 'value': 'psn'}, {'code': '200506', 'value': 'psn_store'}, {'code': '200507', 'value': 'punkbuster'}, {'code': '200508', 'value': 'pyzor'}, {'code': '200509', 'value': 'qcloud_ilvb'}, {'code': '200510', 'value': 'qqpcmgr'}, {'code': '200511', 'value': 'ramsey_dash'}, {'code': '200512', 'value': 'razor'}, {'code': '200513', 'value': 'rbls'}, {'code': '200514', 'value': 'realvnc'}, {'code': '200515', 'value': 'relay'}, {'code': '200516', 'value': 'revolver_nblbt'}, {'code': '200517', 'value': 'rising_storm'}, {'code': '200518', 'value': 'roblox'}, {'code': '200519', 'value': 'robocraft'}, {'code': '200520', 'value': 'rpc_scan'}, {'code': '200521', 'value': 'runescape'}, {'code': '200522', 'value': 'sanandreas'}, {'code': '200523', 'value': 'saprouter'}, {'code': '200524', 'value': 'secondlife'}, {'code': '200525', 'value': 'serialnumberd'}, {'code': '200526', 'value': 'silkroadonline'}, {'code': '200527', 'value': 'smite'}, {'code': '200528', 'value': 'snapvpn'}, {'code': '200529', 'value': 'spamfighter'}, {'code': '200530', 'value': 'speedin'}, {'code': '200531', 'value': 'speedtest'}, {'code': '200532', 'value': 'spotify_broadcast'}, {'code': '200533', 'value': 'sqlexp'}, {'code': '200534', 'value': 'starcitizen'}, {'code': '200535', 'value': 'starcraft'}, {'code': '200536', 'value': 'starleaf'}, {'code': '200537', 'value': 'steam_friends'}, {'code': '200538', 'value': 'storm_worm'}, {'code': '200539', 'value': 'stratum'}, {'code': '200540', 'value': 'supl'}, {'code': '200541', 'value': 'svn'}, {'code': '200542', 'value': 'talesrunner'}, {'code': '200543', 'value': 'tankix'}, {'code': '200544', 'value': 'telecomkey'}, {'code': '200545', 'value': 'telnet_exploit'}, {'code': '200546', 'value': 'tencent_games'}, {'code': '200547', 'value': 'tenfivecoin'}, {'code': '200548', 'value': 'tensafe'}, {'code': '200549', 'value': 'tera'}, {'code': '200550', 'value': 'tetrisonline'}, {'code': '200551', 'value': 'thq'}, {'code': '200552', 'value': 'tip'}, {'code': '200553', 'value': 'torchlight2'}, {'code': '200554', 'value': 'traceroute'}, {'code': '200555', 'value': 'trackmania'}, {'code': '200556', 'value': 'tremulous'}, {'code': '200557', 'value': 'trion'}, {'code': '200558', 'value': 'trojan_zeroaccess'}, {'code': '200559', 'value': 'twitcasting'}, {'code': '200560', 'value': 'twitch_irc'}, {'code': '200561', 'value': 'ubisoft_games'}, {'code': '200562', 'value': 'umeye'}, {'code': '200563', 'value': 'vainglory'}, {'code': '200564', 'value': 'ventrilo'}, {'code': '200565', 'value': 'vivox'}, {'code': '200566', 'value': 'vodlocker'}, {'code': '200567', 'value': 'vpnrobot'}, {'code': '200568', 'value': 'vpn_unlimited'}, {'code': '200569', 'value': 'vxworks_exploit'}, {'code': '200570', 'value': 'warthunder'}, {'code': '200571', 'value': 'weblogic'}, {'code': '200572', 'value': 'web_junk'}, {'code': '200573', 'value': 'weiqi'}, {'code': '200574', 'value': 'win_message'}, {'code': '200575', 'value': 'wizard101'}, {'code': '200576', 'value': 'wns'}, {'code': '200577', 'value': 'wolf_et'}, {'code': '200578', 'value': 'worm_22105'}, {'code': '200579', 'value': 'wuala'}, {'code': '200580', 'value': 'xfire_p2p'}, {'code': '200581', 'value': 'xiami'}, {'code': '200582', 'value': 'xunlei'}, {'code': '200583', 'value': 'xunlei_accel'}, {'code': '200584', 'value': 'xunlei_jsq'}, {'code': '200585', 'value': 'xunyou'}, {'code': '200586', 'value': 'xymon'}, {'code': '200587', 'value': 'yahoo_error'}, {'code': '200588', 'value': 'yahoo_games'}, {'code': '200589', 'value': 'yahoo_webcam'}, {'code': '200590', 'value': 'zabbix'}, {'code': '200591', 'value': 'zeroaccess'}, {'code': '200592', 'value': 'zoom'}, {'code': '200593', 'value': 'zynga'}, {'code': '200594', 'value': 'ICMP_Flood'}, {'code': '200595', 'value': 'IPFRAG_Flood'}, {'code': '200596', 'value': 'SYN_Flood'}, {'code': '200597', 'value': 'ACK_Flood'}, {'code': '200598', 'value': 'RST_Flood'}, {'code': '200599', 'value': 'DNS_Flood'}, {'code': '200600', 'value': 'NTP_Flood'}, {'code': '200601', 'value': 'UDP_Flood'}, {'code': '200602', 'value': 'HTTP_Flood'}, {'code': '200603', 'value': 'SSDP_Flood'}, {'code': '200604', 'value': 'baiduP2P'}, {'code': '200605', 'value': 'CSGlobalOffensive'}, {'code': '200606', 'value': 'AllSeeingEye'}, {'code': '200607', 'value': 'Bittorrent_Extension'}, {'code': '200608', 'value': 'BitTorrentSync'}, {'code': '200609', 'value': 'Call_of_Duty'}, {'code': '200612', 'value': 'CitrixICA'}, {'code': '200613', 'value': 'Citrix_Jedi'}, {'code': '200614', 'value': 'ClashOfClans'}, {'code': '200615', 'value': 'Canon_BJNP'}, {'code': '200617', 'value': 'DoyoP2P'}, {'code': '200618', 'value': 'FortiClientSSLVPN'}, {'code': '200619', 'value': 'GTA_SanAndreas_Multiplayer'}, {'code': '200620', 'value': 'HalfLife'}, {'code': '200621', 'value': 'IBM-DB2'}, {'code': '200622', 'value': 'Flash_Player'}, {'code': '200623', 'value': 'Kugou'}, {'code': '200624', 'value': 'LeagueOfLegends'}, {'code': '200625', 'value': 'GluptebaBackdoor'}, {'code': '200626', 'value': 'MedalOfHonor'}, {'code': '200628', 'value': 'MultiTheftAuto'}, {'code': '200631', 'value': 'NetcoreScan'}, {'code': '200632', 'value': 'NeverwinterNights'}, {'code': '200633', 'value': 'NoctionIRP'}, {'code': '200634', 'value': 'JavaObjectSerialised'}, {'code': '200635', 'value': 'RealPlayer'}, {'code': '200636', 'value': 'TeamFortress2'}, {'code': '200637', 'value': 'TheCrew'}, {'code': '200638', 'value': 'TurboVPN'}, {'code': '200639', 'value': 'MSN_Voice'}, {'code': '200640', 'value': 'MaplestoryChina'}, {'code': '200641', 'value': 'Message4U'}, {'code': '200642', 'value': 'MongoDB'}, {'code': '200643', 'value': 'NDTThroughput'}, {'code': '200644', 'value': 'NET-MFP'}, {'code': '200645', 'value': 'WindowsMessenger'}, {'code': '200646', 'value': 'WolfensteinEnemyTerritory'}, {'code': '200647', 'value': 'XboxLive'}, {'code': '200649', 'value': 'RBL'}, {'code': '200650', 'value': 'RPC_Exploit'}, {'code': '200651', 'value': 'Rejection'}, {'code': '200655', 'value': 'Silverplatter_DXP'}, {'code': '200659', 'value': 'TencentWNS'}, {'code': '200660', 'value': 'TrionGames'}, {'code': '200661', 'value': 'Trojan.Win32.Generic!SB'}, {'code': '200666', 'value': 'WorldOfWarcraft'}, {'code': '200667', 'value': 'YY'}, {'code': '200669', 'value': 'nopayload'}, {'code': '200670', 'value': 'No_FirstPkt'}, {'code': '200671', 'value': 'Invalid'}], 'visibility': 'disabled'}, 'label': 'Application ID'}, {'name': 'common_protocol_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '10000', 'value': 'NOT SPECIFIED'}, {'code': '10001', 'value': 'TCP'}, {'code': '10002', 'value': 'UDP'}, {'code': '10003', 'value': 'DNS'}, {'code': '10004', 'value': 'FTP'}, {'code': '10005', 'value': 'FTPS'}, {'code': '10006', 'value': 'GRE'}, {'code': '10007', 'value': 'HTTP'}, {'code': '10008', 'value': 'HTTPS'}, {'code': '10009', 'value': 'ICMP'}, {'code': '10010', 'value': 'IKE'}, {'code': '10011', 'value': 'IMAP'}, {'code': '10012', 'value': 'IMAPS'}, {'code': '10013', 'value': 'IPSEC'}, {'code': '10014', 'value': 'XMPP'}, {'code': '10015', 'value': 'L2TP'}, {'code': '10016', 'value': 'NTP'}, {'code': '10017', 'value': 'POP3'}, {'code': '10018', 'value': 'POP3 SSL'}, {'code': '10019', 'value': 'PPTP'}, {'code': '10020', 'value': 'Quic'}, {'code': '10021', 'value': 'SIP'}, {'code': '10022', 'value': 'smb'}, {'code': '10023', 'value': 'SMTP'}, {'code': '10024', 'value': 'SMTPS'}, {'code': '10025', 'value': 'SPDY'}, {'code': '10028', 'value': 'SSH'}, {'code': '10029', 'value': 'SSL'}, {'code': '10030', 'value': 'SOCKS'}, {'code': '10031', 'value': 'BITTORRENT'}, {'code': '10032', 'value': 'RTSP'}, {'code': '10033', 'value': 'TELNET'}, {'code': '10034', 'value': 'UTP'}, {'code': '10035', 'value': 'FASTTRACK'}, {'code': '10036', 'value': 'SKINNY'}, {'code': '10037', 'value': 'IAX'}, {'code': '10038', 'value': 'MGCP'}, {'code': '10039', 'value': 'RTCP'}, {'code': '10040', 'value': 'RTP'}, {'code': '10041', 'value': 'VNC'}, {'code': '10042', 'value': 'XDMCP'}, {'code': '10043', 'value': 'RDP'}, {'code': '10044', 'value': 'AIMINI'}, {'code': '10045', 'value': 'IPP'}, {'code': '10046', 'value': 'NFS'}, {'code': '10047', 'value': 'TFTP'}, {'code': '10048', 'value': 'BGP'}, {'code': '10049', 'value': 'DHCP'}, {'code': '10050', 'value': 'DHCPV6'}, {'code': '10051', 'value': 'FINGER'}, {'code': '10052', 'value': 'KERBEROS'}, {'code': '10053', 'value': 'LDAP'}, {'code': '10054', 'value': 'MDNS'}, {'code': '10055', 'value': 'NNTP'}, {'code': '10056', 'value': 'SNMP'}, {'code': '10057', 'value': 'SSDP'}, {'code': '10058', 'value': 'SYSLOG'}, {'code': '10059', 'value': 'WHOIS'}, {'code': '10060', 'value': 'RADIUS'}, {'code': '10061', 'value': 'OPENVPN'}, {'code': '10062', 'value': 'STUN'}, {'code': '10063', 'value': 'TEREDO'}, {'code': '10064', 'value': 'GTP'}, {'code': '10065', 'value': 'RTMP'}, {'code': '10066', 'value': 'chargen_tcp_udp'}, {'code': '10067', 'value': 'llmnr_udp'}, {'code': '10068', 'value': 'nbns_udp'}, {'code': '10069', 'value': 'NETBIOS'}, {'code': '10070', 'value': 'DirectDownloadLink'}, {'code': '10071', 'value': 'I23V5'}, {'code': '10072', 'value': 'DirectConnect'}, {'code': '10073', 'value': 'OFF'}, {'code': '10074', 'value': 'OGG'}, {'code': '10075', 'value': 'MPEG'}, {'code': '10076', 'value': 'IRC'}, {'code': '10077', 'value': 'Jabber'}, {'code': '10078', 'value': 'VRRP'}, {'code': '10079', 'value': 'IGMP'}, {'code': '10080', 'value': 'EGP'}, {'code': '10081', 'value': 'SCTP'}, {'code': '10082', 'value': 'OSPF'}, {'code': '10083', 'value': 'IP in IP'}, {'code': '10084', 'value': 'ICMPv6'}, {'code': '10085', 'value': 'DCE RPC'}, {'code': '10086', 'value': 'NetFlow_IPFIX'}, {'code': '10087', 'value': 'sFlow'}, {'code': '10088', 'value': 'HTTP Connect (SSL over HTTP)'}, {'code': '10089', 'value': 'SAP'}, {'code': '10090', 'value': 'UPnP'}, {'code': '10091', 'value': 'H323'}, {'code': '10092', 'value': 'Megaco'}, {'code': '10094', 'value': 'bacnet'}, {'code': '10096', 'value': 'bjnp'}, {'code': '10097', 'value': 'cgp'}, {'code': '10098', 'value': 'dahua'}, {'code': '10099', 'value': 'dcc'}, {'code': '10100', 'value': 'kademlia'}, {'code': '10101', 'value': 'lansync'}, {'code': '10102', 'value': 'ldap_ad'}, {'code': '10103', 'value': 'llp2p'}, {'code': '10104', 'value': 'mfnp'}, {'code': '10105', 'value': 'mp2p'}, {'code': '10106', 'value': 'msn_cache'}, {'code': '10107', 'value': 'msn_video'}, {'code': '10108', 'value': 'msnc'}, {'code': '10109', 'value': 'netflow'}, {'code': '10110', 'value': 'notes_rpc'}, {'code': '10111', 'value': 'esp'}, {'code': '10112', 'value': 'fbcdn_ssl'}, {'code': '10113', 'value': 'forticlient_sslvpn'}, {'code': '10114', 'value': 'rfb'}, {'code': '10115', 'value': 'rtmfp'}, {'code': '10117', 'value': 'slp'}, {'code': '10118', 'value': 'steam_inhomebroadcast'}, {'code': '10119', 'value': 'steam_localbroadcast'}, {'code': '10120', 'value': 'tpkt'}, {'code': '10121', 'value': 'xmpps'}, {'code': '10122', 'value': 'S7COMM'}, {'code': '10123', 'value': 'CitrixCGP'}, {'code': '10124', 'value': 'ID_Protocol'}, {'code': '10125', 'value': 'SMTP_Secure'}, {'code': '10126', 'value': 'NAT-PMP'}], 'visibility': 'disabled'}, 'label': 'Protocol ID'}, {'name': 'common_start_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'Start Time'}, {'name': 'common_end_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'End Time'}, {'name': 'common_establish_latency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Establish Latency(ms)'}, {'name': 'common_con_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Duration(ms)'}, {'name': 'common_stream_dir', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'c2s'}, {'code': '2', 'value': 's2c'}, {'code': '3', 'value': 'double'}]}, 'label': 'Stream Direction'}, {'name': 'common_address_list', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Address List'}, {'name': 'common_has_dup_traffic', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}], 'visibility': 'hidden'}, 'label': 'Duplication Traffic'}, {'name': 'common_stream_error', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Stream Error'}, {'name': 'common_stream_trace_id', 'type': 'long', 'doc': {'allow_query': 'true'}, 'label': 'Session ID'}, {'name': 'http_url', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'URL'}, {'name': 'http_host', 'type': 'string', 'doc': {'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'Host'}, {'name': 'http_domain', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Domain'}, {'name': 'http_request_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Request Line'}, {'name': 'http_response_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Response Line'}, {'name': 'http_request_header', 'type': 'string', 'label': 'Request Headers'}, {'name': 'http_response_header', 'type': 'string', 'label': 'Response Headers'}, {'name': 'http_request_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Request Body'}, {'name': 'http_response_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Response Body'}, {'name': 'http_request_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Request Body Key'}, {'name': 'http_response_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Response Body Key'}, {'name': 'http_proxy_flag', 'type': 'int', 'label': 'Proxy Flag'}, {'name': 'http_sequence', 'type': 'int', 'label': 'Sequence'}, {'name': 'http_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Http Snapshot'}, {'name': 'http_cookie', 'type': 'string', 'label': 'Cookie'}, {'name': 'http_referer', 'type': 'string', 'label': 'Referer'}, {'name': 'http_user_agent', 'type': 'string', 'label': 'User Agent'}, {'name': 'http_content_length', 'type': 'string', 'label': 'Content Length'}, {'name': 'http_content_type', 'type': 'string', 'label': 'Content Type'}, {'name': 'http_set_cookie', 'type': 'string', 'label': 'Set Cookie'}, {'name': 'http_version', 'type': 'string', 'label': 'Version'}, {'name': 'http_response_lantency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Response Latency(ms)'}, {'name': 'http_session_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Session Duration(ms)'}, {'name': 'mail_protocol_type', 'type': 'string', 'label': 'Protocol Type'}, {'name': 'mail_account', 'type': 'string', 'label': 'Account'}, {'name': 'mail_from_cmd', 'type': 'string', 'label': 'From CMD'}, {'name': 'mail_to_cmd', 'type': 'string', 'label': 'To CMD'}, {'name': 'mail_from', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'From'}, {'name': 'mail_to', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'To'}, {'name': 'mail_cc', 'type': 'string', 'label': 'CC'}, {'name': 'mail_bcc', 'type': 'string', 'label': 'BCC'}, {'name': 'mail_subject', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_subject_charset'}}, 'label': 'Subject'}, {'name': 'mail_subject_charset', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Subject Charset'}, {'name': 'mail_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content'}, {'name': 'mail_content_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content Charset'}, {'name': 'mail_attachment_name', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_attachment_name_charset'}}, 'label': 'Attachment'}, {'name': 'mail_attachment_name_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Charset'}, {'name': 'mail_attachment_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Content'}, {'name': 'mail_eml_file', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'EML File'}, {'name': 'mail_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Snapshot'}, {'name': 'dns_message_id', 'type': 'int', 'label': 'Message ID'}, {'name': 'dns_qr', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'REESPONSE'}]}, 'label': 'QR'}, {'name': 'dns_opcode', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'IQUERY'}, {'code': '2', 'value': 'STATUS'}, {'code': '5', 'value': 'UPDATE'}]}, 'label': 'OPCODE'}, {'name': 'dns_aa', 'type': 'int', 'label': 'AA'}, {'name': 'dns_tc', 'type': 'int', 'label': 'TC'}, {'name': 'dns_rd', 'type': 'int', 'label': 'RD'}, {'name': 'dns_ra', 'type': 'int', 'label': 'RA'}, {'name': 'dns_rcode', 'type': 'int', 'label': 'RCODE'}, {'name': 'dns_qdcount', 'type': 'int', 'label': 'QDCOUNT'}, {'name': 'dns_ancount', 'type': 'int', 'label': 'ANCOUNT'}, {'name': 'dns_nscount', 'type': 'int', 'label': 'NSCOUNT'}, {'name': 'dns_arcount', 'type': 'int', 'label': 'ARCOUNT'}, {'name': 'dns_qname', 'type': 'string', 'label': 'QNAME'}, {'name': 'dns_qtype', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'A'}, {'code': '2', 'value': 'NS'}, {'code': '5', 'value': 'CNAME'}, {'code': '6', 'value': 'SOA'}, {'code': '11', 'value': 'WKS'}, {'code': '12', 'value': 'PTR'}, {'code': '13', 'value': 'HINFO'}, {'code': '11', 'value': 'WKS'}, {'code': '15', 'value': 'MX'}, {'code': '28', 'value': 'AAAA'}]}, 'label': 'QTYPE'}, {'name': 'dns_qclass', 'type': 'int', 'label': 'QCLASS'}, {'name': 'dns_cname', 'type': 'string', 'label': 'CNAME'}, {'name': 'dns_sub', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'DNS'}, {'code': '2', 'value': 'DNSSEC'}]}, 'label': 'SUB'}, {'name': 'dns_rr', 'type': 'string', 'label': 'RR'}, {'name': 'ssl_version', 'type': 'string', 'label': 'Version'}, {'name': 'ssl_sni', 'type': 'string', 'doc': {'allow_query': 'true', 'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'SNI'}, {'name': 'ssl_san', 'type': 'string', 'label': 'SAN'}, {'name': 'ssl_cn', 'type': 'string', 'label': 'CN'}, {'name': 'ssl_pinningst', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Not Pinning'}, {'code': '1', 'value': 'Pinning'}, {'code': '2', 'value': 'Maybe Pinning'}]}, 'label': 'Pinning'}, {'name': 'ssl_intercept_state', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Passthrough'}, {'code': '1', 'value': 'Intercept'}, {'code': '2', 'value': 'Shutdown'}]}, 'label': 'Intercept State'}, {'name': 'ssl_server_side_latency', 'type': 'int', 'label': 'Server Side Latency(ms)'}, {'name': 'ssl_client_side_latency', 'type': 'int', 'label': 'Client Side Latency(ms)'}, {'name': 'ssl_server_side_version', 'type': 'string', 'label': 'Server Side Version'}, {'name': 'ssl_client_side_version', 'type': 'string', 'label': 'Client Side Version'}, {'name': 'ssl_cert_verify', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}]}, 'label': 'Certificate Verify'}, {'name': 'ssl_error', 'type': 'string', 'label': 'Error'}, {'name': 'ssl_con_latency_ms', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Connection Latency(ms)'}, {'name': 'ftp_account', 'type': 'string', 'label': 'Account'}, {'name': 'ftp_url', 'type': 'string', 'label': 'URL'}, {'name': 'ftp_content', 'type': 'string', 'label': 'Content'}, {'name': 'bgp_type', 'type': 'int', 'label': 'Type'}, {'name': 'bgp_as_num', 'type': 'string', 'label': 'AS Number'}, {'name': 'bgp_route', 'type': 'string', 'label': 'Route'}, {'name': 'voip_calling_account', 'type': 'string', 'label': 'Calling Account'}, {'name': 'voip_called_account', 'type': 'string', 'label': 'Called Account'}, {'name': 'voip_calling_number', 'type': 'string', 'label': 'Calling Number'}, {'name': 'voip_called_number', 'type': 'string', 'label': 'Called Number'}, {'name': 'streaming_media_url', 'type': 'string', 'label': 'Media URL'}, {'name': 'streaming_media_protocol', 'type': 'string', 'label': 'Media Protocol'}]} Evaluates the given expression in Python and returns the results. json.dumps(eval(str(${LogSchemaResponse.body['data']['fields']}))) json ${field} ${field} = [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "com... Logs the given message with the given level. ${field} [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}] Returns the given values which can then be assigned to a variables. 30 ${pageSize} ${pageSize} = 30 Returns the given values which can then be assigned to a variables. 1 ${pageNo} ${pageNo} = 1 Returns the given values which can then be assigned to a variables. [{"value":["${startTime}","${endTime}"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ${condition} ${condition} = [{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] Returns the given values which can then be assigned to a variables. {"pageNo":${pageNo},"pageSize":${pageSize},"logType":"${logname}","fields":${field},"start_common_recv_time":"${startTime}","end_common_recv_time":"${endTime}","conditions":${condition} ,"common_client_ips":"${client_ip}","common_policy_ids":"${policy_id}"} ${logCondition} ${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function... Logs the given message with the given level. this time query condition:${logCondition} this time query condition:{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:23:06","end_common_recv_time":"2020-04-01 12:24:26","conditions":[{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"79"} ${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function... Logs the given message with the given level. ${logCondition} {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:23:06","end_common_recv_time":"2020-04-01 12:24:26","conditions":[{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"79"} /log/list ${logCondition} ${LogListResponse} Creates and returns a dictionary based on the given ``items``. Content-Type=application/json Authorization=${token} ${header} ${header} = {'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'} Create Session: create a HTTP session to a server api http://${host}:${port}/${version} headers=${header} Creating Session using : alias=api, url=http://192.168.40.120:8080/v1, headers={'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a POST request on the session object found using the given `alias` api ${url} data=${data} headers=${header} ${remoteResponse} POST Request using : uri=/log/list, params=None, files=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&'} data={"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:23:06","end_common_recv_time":"2020-04-01 12:24:26","conditions":[{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"79"} json=None ${remoteResponse} = <Response [200]> ${LogListResponse} = <Response [200]> Fails if objects are unequal after converting them to strings. ${LogListResponse.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${LogListResponse.content} ${returnData} To JSON using : content={ "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:23:34", "common_log_id":"48583713115473920", "common_policy_id":"79", "common_subscriber_id":"", "common_client_ip":"192.168.50.43", "common_client_port":"57791", "common_l4_protocol":"IPv4_TCP", "common_address_type":"4", "common_server_ip":"140.210.66.234", "common_server_port":"80", "common_action":"128", "common_direction":"0", "common_entrance_id":"0", "common_sled_ip":"192.168.40.161", "common_client_location":"Private IP", "common_client_asn":"N/A", "common_server_location":"China", "common_server_asn":"23724,4808", "common_c2s_pkt_num":"4", "common_s2c_pkt_num":"4", "common_c2s_byte_num":"80", "common_s2c_byte_num":"506", "common_service":"0", "common_schema_type":"HTTP", "common_user_tags":"", "common_sub_action":"", "common_user_region":"", "common_device_id":"", "common_link_id":"0", "common_isp":"", "common_encapsulation":"0", "common_app_label":"", "common_app_id":"0", "common_protocol_id":"0", "common_start_time":"2020-04-01 12:22:36", "common_end_time":"2020-04-01 12:22:45", "common_establish_latency_ms":"0", "common_con_duration_ms":"9000", "common_stream_dir":"3", "common_address_list":"57791-80-192.168.50.43-140.210.66.234", "common_has_dup_traffic":"0", "common_stream_error":"", "common_stream_trace_id":"7980242613032", "http_url":"", "http_host":"www.xiaozhu.com", "http_domain":"xiaozhu.com", "http_request_line":"", "http_response_line":"", "http_request_header":"", "http_response_header":"", "http_request_body":"", "http_response_body":"", "http_request_body_key":"", "http_response_body_key":"", "http_proxy_flag":"0", "http_sequence":"0", "http_snapshot":"", "http_cookie":"", "http_referer":"", "http_user_agent":"", "http_content_length":"", "http_content_type":"", "http_set_cookie":"", "http_version":"", "http_response_lantency_ms":"0", "http_session_duration_ms":"0", "mail_protocol_type":"", "mail_account":"", "mail_from_cmd":"", "mail_to_cmd":"", "mail_from":"", "mail_to":"", "mail_cc":"", "mail_bcc":"", "mail_subject":"", "mail_subject_charset":"", "mail_content":"", "mail_content_charset":"", "mail_attachment_name":"", "mail_attachment_name_charset":"", "mail_attachment_content":"", "mail_eml_file":"", "mail_snapshot":"", "dns_message_id":"0", "dns_aa":"0", "dns_tc":"0", "dns_rd":"0", "dns_ra":"0", "dns_rcode":"0", "dns_qdcount":"0", "dns_ancount":"0", "dns_nscount":"0", "dns_arcount":"0", "dns_qname":"", "dns_qtype":"0", "dns_qclass":"0", "dns_cname":"", "dns_sub":"0", "dns_rr":"", "ssl_version":"", "ssl_sni":"", "ssl_san":"", "ssl_cn":"", "ssl_server_side_latency":"0", "ssl_client_side_latency":"0", "ssl_server_side_version":"", "ssl_client_side_version":"", "ssl_error":"", "ssl_con_latency_ms":"0", "ftp_account":"", "ftp_url":"", "ftp_content":"", "bgp_type":"0", "bgp_as_num":"", "bgp_route":"", "voip_calling_account":"", "voip_called_account":"", "voip_calling_number":"", "voip_called_number":"", "streaming_media_url":"", "streaming_media_protocol":"" } ], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } To JSON using : pretty_print=False ${returnData} = {'code': 200, 'data': {'list': [{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.... Returns a value from the given ``dictionary`` based on the given ``key``. ${returnData} code ${responseCode} ${responseCode} = 200 Logs the given message with the given level. ${responseCode} 200 Fails if the given objects are unequal. ${responseCode} ${200} security_event_log \ \ test query list failed Logs the given message with the given level. this time request security_event_log \ table logRecord \ : ${LogListResponse.content} this time request security_event_log table logRecord : { "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:23:34", "common_log_id":"48583713115473920", "common_policy_id":"79", "common_subscriber_id":"", "common_client_ip":"192.168.50.43", "common_client_port":"57791", "common_l4_protocol":"IPv4_TCP", "common_address_type":"4", "common_server_ip":"140.210.66.234", "common_server_port":"80", "common_action":"128", "common_direction":"0", "common_entrance_id":"0", "common_sled_ip":"192.168.40.161", "common_client_location":"Private IP", "common_client_asn":"N/A", "common_server_location":"China", "common_server_asn":"23724,4808", "common_c2s_pkt_num":"4", "common_s2c_pkt_num":"4", "common_c2s_byte_num":"80", "common_s2c_byte_num":"506", "common_service":"0", "common_schema_type":"HTTP", "common_user_tags":"", "common_sub_action":"", "common_user_region":"", "common_device_id":"", "common_link_id":"0", "common_isp":"", "common_encapsulation":"0", "common_app_label":"", "common_app_id":"0", "common_protocol_id":"0", "common_start_time":"2020-04-01 12:22:36", "common_end_time":"2020-04-01 12:22:45", "common_establish_latency_ms":"0", "common_con_duration_ms":"9000", "common_stream_dir":"3", "common_address_list":"57791-80-192.168.50.43-140.210.66.234", "common_has_dup_traffic":"0", "common_stream_error":"", "common_stream_trace_id":"7980242613032", "http_url":"", "http_host":"www.xiaozhu.com", "http_domain":"xiaozhu.com", "http_request_line":"", "http_response_line":"", "http_request_header":"", "http_response_header":"", "http_request_body":"", "http_response_body":"", "http_request_body_key":"", "http_response_body_key":"", "http_proxy_flag":"0", "http_sequence":"0", "http_snapshot":"", "http_cookie":"", "http_referer":"", "http_user_agent":"", "http_content_length":"", "http_content_type":"", "http_set_cookie":"", "http_version":"", "http_response_lantency_ms":"0", "http_session_duration_ms":"0", "mail_protocol_type":"", "mail_account":"", "mail_from_cmd":"", "mail_to_cmd":"", "mail_from":"", "mail_to":"", "mail_cc":"", "mail_bcc":"", "mail_subject":"", "mail_subject_charset":"", "mail_content":"", "mail_content_charset":"", "mail_attachment_name":"", "mail_attachment_name_charset":"", "mail_attachment_content":"", "mail_eml_file":"", "mail_snapshot":"", "dns_message_id":"0", "dns_aa":"0", "dns_tc":"0", "dns_rd":"0", "dns_ra":"0", "dns_rcode":"0", "dns_qdcount":"0", "dns_ancount":"0", "dns_nscount":"0", "dns_arcount":"0", "dns_qname":"", "dns_qtype":"0", "dns_qclass":"0", "dns_cname":"", "dns_sub":"0", "dns_rr":"", "ssl_version":"", "ssl_sni":"", "ssl_san":"", "ssl_cn":"", "ssl_server_side_latency":"0", "ssl_client_side_latency":"0", "ssl_server_side_version":"", "ssl_client_side_version":"", "ssl_error":"", "ssl_con_latency_ms":"0", "ftp_account":"", "ftp_url":"", "ftp_content":"", "bgp_type":"0", "bgp_as_num":"", "bgp_route":"", "voip_calling_account":"", "voip_called_account":"", "voip_calling_number":"", "voip_called_number":"", "streaming_media_url":"", "streaming_media_protocol":"" } ], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Returns the given values which can then be assigned to a variables. this time request security_event_log \ table logRecord \ : ${LogListResponse.content} ${a} ${a} = this time request security_event_log table logRecord : { "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:23:34", "common_log_id":"48583713115473920", "common_pol... Logs the given message with the given level. ${a} this time request security_event_log table logRecord : { "code":200, "data":{ "list":[ { "common_recv_time":"2020-04-01 12:23:34", "common_log_id":"48583713115473920", "common_policy_id":"79", "common_subscriber_id":"", "common_client_ip":"192.168.50.43", "common_client_port":"57791", "common_l4_protocol":"IPv4_TCP", "common_address_type":"4", "common_server_ip":"140.210.66.234", "common_server_port":"80", "common_action":"128", "common_direction":"0", "common_entrance_id":"0", "common_sled_ip":"192.168.40.161", "common_client_location":"Private IP", "common_client_asn":"N/A", "common_server_location":"China", "common_server_asn":"23724,4808", "common_c2s_pkt_num":"4", "common_s2c_pkt_num":"4", "common_c2s_byte_num":"80", "common_s2c_byte_num":"506", "common_service":"0", "common_schema_type":"HTTP", "common_user_tags":"", "common_sub_action":"", "common_user_region":"", "common_device_id":"", "common_link_id":"0", "common_isp":"", "common_encapsulation":"0", "common_app_label":"", "common_app_id":"0", "common_protocol_id":"0", "common_start_time":"2020-04-01 12:22:36", "common_end_time":"2020-04-01 12:22:45", "common_establish_latency_ms":"0", "common_con_duration_ms":"9000", "common_stream_dir":"3", "common_address_list":"57791-80-192.168.50.43-140.210.66.234", "common_has_dup_traffic":"0", "common_stream_error":"", "common_stream_trace_id":"7980242613032", "http_url":"", "http_host":"www.xiaozhu.com", "http_domain":"xiaozhu.com", "http_request_line":"", "http_response_line":"", "http_request_header":"", "http_response_header":"", "http_request_body":"", "http_response_body":"", "http_request_body_key":"", "http_response_body_key":"", "http_proxy_flag":"0", "http_sequence":"0", "http_snapshot":"", "http_cookie":"", "http_referer":"", "http_user_agent":"", "http_content_length":"", "http_content_type":"", "http_set_cookie":"", "http_version":"", "http_response_lantency_ms":"0", "http_session_duration_ms":"0", "mail_protocol_type":"", "mail_account":"", "mail_from_cmd":"", "mail_to_cmd":"", "mail_from":"", "mail_to":"", "mail_cc":"", "mail_bcc":"", "mail_subject":"", "mail_subject_charset":"", "mail_content":"", "mail_content_charset":"", "mail_attachment_name":"", "mail_attachment_name_charset":"", "mail_attachment_content":"", "mail_eml_file":"", "mail_snapshot":"", "dns_message_id":"0", "dns_aa":"0", "dns_tc":"0", "dns_rd":"0", "dns_ra":"0", "dns_rcode":"0", "dns_qdcount":"0", "dns_ancount":"0", "dns_nscount":"0", "dns_arcount":"0", "dns_qname":"", "dns_qtype":"0", "dns_qclass":"0", "dns_cname":"", "dns_sub":"0", "dns_rr":"", "ssl_version":"", "ssl_sni":"", "ssl_san":"", "ssl_cn":"", "ssl_server_side_latency":"0", "ssl_client_side_latency":"0", "ssl_server_side_version":"", "ssl_client_side_version":"", "ssl_error":"", "ssl_con_latency_ms":"0", "ftp_account":"", "ftp_url":"", "ftp_content":"", "bgp_type":"0", "bgp_as_num":"", "bgp_route":"", "voip_calling_account":"", "voip_called_account":"", "voip_calling_number":"", "voip_called_number":"", "streaming_media_url":"", "streaming_media_protocol":"" } ], "pageNo":1, "pageSize":30, "pages":0, "total":0 }, "msg":"Success", "success":true } Returns the given values which can then be assigned to a variables. ${LogListResponse.json()}[data][list] ${log} ${log} = [{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '577... Logs the given message with the given level. ${logs} [{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57791', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '140.210.66.234', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '23724,4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '506', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:22:36', 'common_end_time': '2020-04-01 12:22:45', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '9000', 'common_stream_dir': '3', 'common_address_list': '57791-80-192.168.50.43-140.210.66.234', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980242613032', 'http_url': '', 'http_host': 'www.xiaozhu.com', 'http_domain': 'xiaozhu.com', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}] Logs the given message with the given level. %%%%%%%%%%%%%%%%%%%%%%%%${logs} %%%%%%%%%%%%%%%%%%%%%%%%[{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57791', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '140.210.66.234', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '23724,4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '506', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:22:36', 'common_end_time': '2020-04-01 12:22:45', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '9000', 'common_stream_dir': '3', 'common_address_list': '57791-80-192.168.50.43-140.210.66.234', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980242613032', 'http_url': '', 'http_host': 'www.xiaozhu.com', 'http_domain': 'xiaozhu.com', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}] Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${client_ip} Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${policy_id} Fails if ``container`` does not contain ``item`` one or more times. ${logs}"" ${parmkey} Fails if ``container`` does not contain ``item`` one or more times. ${logs}"${parmkey}" ${parmvalue} ${policyIds} ${objectids} Logs the given message with the given level. toDeletePolicy_DeletePolicyAndObject toDeletePolicy_DeletePolicyAndObject Returns and logs the length of the given item as an integer. ${policyids} ${listlenth} Length is 2 ${listlenth} = 2 Logs the given message with the given level. ${var} 0 ${policyids}[${var}] Logs the given message with the given level. toDeletePolicy_DeletePolicyDeletePolicy toDeletePolicy_DeletePolicyDeletePolicy /v1/policy/compile ${body} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"policyType":"tsg_security","policyIds":[78]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Logs the given message with the given level. ${var} 1 ${policyids}[${var}] Logs the given message with the given level. toDeletePolicy_DeletePolicyDeletePolicy toDeletePolicy_DeletePolicyDeletePolicy /v1/policy/compile ${body} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"policyType":"tsg_security","policyIds":[79]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Logs the given message with the given level. todeleteobj_DeletePolicyAndObject todeleteobj_DeletePolicyAndObject ${objectids} Logs the given message with the given level. todeleteobj todeleteobj /v1/policy/object {"objectIds":[${objectids}]} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"objectIds":[474]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Returns a value from the given ``dictionary`` based on the given ``key``. ${response} code ${response_code} ${response_code} = 200 Fails if objects are unequal after converting them to strings. ${response_code} 200 Argument types are: <class 'int'> <type 'unicode'> Converts the given item to a Unicode string. ${response} ${response} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Allow DENY FQDN HTTP IP tsg_adc tsg_security Runs the given keyword with the given arguments, if ``condition`` is true. '${loginType}' == 'api' ApiLogoutAndDelLocalIP aa ELSE IF '${loginType}' == 'cli' CliLogout ELSE UiLogoutAndDelLocalIP bb aa Logs the given message with the given level. ApiLogoutAndDelLocalIP${tempparm} ApiLogoutAndDelLocalIPaa Logs the given message with the given level. to_LogoutAndDelLocalIP_LogoutAndDelLocalIP to_LogoutAndDelLocalIP_LogoutAndDelLocalIP Runs the given keyword with the given arguments, if ``condition`` is true. ${addTestClentIPFlag}==1 DelLocalIPObject Logs the given message with the given level. to_DelLocalIPObject to_DelLocalIPObject /v1/policy/object {"objectIds":[${testClentID}]} ${response} Returns the given values which can then be assigned to a variables. {"Authorization":"${token}","Content-Type":"application/json"} ${headers} ${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&981&","Content-Type":"application/json"} Create Session: create a HTTP session to a server api http://${host}:${port} ${headers} Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 Send a DELETE request on the session object found using the given `alias` api ${requestUri} data=${data} ${response} DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&981&', 'Content-Type': 'application/json'} data={"objectIds":[470]} json=None ${response} = <Response [200]> Logs the given message with the given level. return data =${response} return data =<Response [200]> Fails if objects are unequal after converting them to strings. ${response.status_code} 200 Argument types are: <class 'int'> <type 'unicode'> Convert a string to a JSON object ${response.content} ${response} To JSON using : content={ "code":200, "msg":"Success", "success":true } To JSON using : pretty_print=False ${response} = {'code': 200, 'msg': 'Success', 'success': True} ${response} = {'code': 200, 'msg': 'Success', 'success': True} Fails if objects are unequal after converting them to strings. ${response} {'code': 200, 'msg': 'Success', 'success': True} Argument types are: <class 'dict'> <type 'unicode'> Makes a variable available globally in all tests and suites. ${testClentID} ${EMPTY} ${testClentID} = http *Sends a POST request to the endpoint.* /v1/user/logout headers=${headers} assertions *Asserts the field as JSON object.* response body assertions *Asserts the field as JSON integer.* $.code 200 assertions *Asserts the field as JSON integer.* $.code ${rescode} ${rescode} = [200] Critical Tests All Tests Allow Category DENY FQDN HTTP IP SubID tsg_adc tsg_security Tsg Autotest Tsg Autotest.01-TestCase Tsg Autotest.01-TestCase.Tsg Adc Tsg Autotest.01-TestCase.Tsg Adc.Api Security Tsg Autotest.01-TestCase.Tsg Adc.Api Security.AllowHttpTests