gfwleak/dongxiaoyan-tsg-autotest
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
This repository has been archived on 2025-09-14. You can view files and clone it, but cannot push or open issues or pull requests.
Files
dd3d3d5cda53ea4d3e213e2cf7a4e4235ad50a4a
dongxiaoyan-tsg-autotest/output.xml
dongxiaoyan acc676857b first init project code
2020-04-01 12:42:05 +08:00

21946 lines
1.7 MiB
Raw Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

<?xml version="1.0" encoding="UTF-8"?>
<robot generator="Robot 3.1.2 (Python 3.6.8 on win32)" generated="20200401 12:20:35.633" rpa="false">
<suite id="s1" name="Tsg Autotest" source="E:\auto_git\tsg_autotest">
<kw name="LoginAndAddLocalIP" library="LoginAndLogoutTypeSwitch" type="setup">
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>'${loginType}' == 'api'</arg>
<arg>ApiLoginAndAddLocalIP</arg>
<arg>aa</arg>
<arg>ELSE IF</arg>
<arg>'${loginType}' == 'cli'</arg>
<arg>CliLogin</arg>
<arg>ELSE</arg>
<arg>UiLoginAndAaddLocalIP</arg>
<arg>bb</arg>
</arguments>
<kw name="ApiLoginAndAddLocalIP" library="LoginLogout">
<arguments>
<arg>aa</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>ApiLoginAndAddLocalIP${tempparm}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.382" level="INFO">ApiLoginAndAddLocalIPaa</msg>
<status status="PASS" starttime="20200401 12:20:36.382" endtime="20200401 12:20:36.382"></status>
</kw>
<kw name="Login" library="LoginLogout">
<kw name="Get" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a GET request to the endpoint.*</doc>
<arguments>
<arg>/v1/user/encryptpwd?password=${password}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.383" endtime="20200401 12:20:36.476"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.477" endtime="20200401 12:20:36.478"></status>
</kw>
<kw name="Integer" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON integer.*</doc>
<arguments>
<arg>$.code</arg>
<arg>200</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.478" endtime="20200401 12:20:36.505"></status>
</kw>
<kw name="String" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON string.*</doc>
<arguments>
<arg>$.data.encryptpwd</arg>
</arguments>
<assign>
<var>${pwd}</var>
</assign>
<msg timestamp="20200401 12:20:36.529" level="INFO">${pwd} = ['Gg1Etyh7fs1y/v/K2XOJDg==']</msg>
<status status="PASS" starttime="20200401 12:20:36.506" endtime="20200401 12:20:36.529"></status>
</kw>
<kw name="Get From List" library="Collections">
<doc>Returns the value specified with an ``index`` from ``list``.</doc>
<arguments>
<arg>${pwd}</arg>
<arg>0</arg>
</arguments>
<assign>
<var>${pwdstr}</var>
</assign>
<msg timestamp="20200401 12:20:36.530" level="INFO">${pwdstr} = Gg1Etyh7fs1y/v/K2XOJDg==</msg>
<status status="PASS" starttime="20200401 12:20:36.530" endtime="20200401 12:20:36.530"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${pwdstr}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.531" level="INFO">Gg1Etyh7fs1y/v/K2XOJDg==</msg>
<status status="PASS" starttime="20200401 12:20:36.530" endtime="20200401 12:20:36.531"></status>
</kw>
<kw name="Set Global Variable" library="BuiltIn">
<doc>Makes a variable available globally in all tests and suites.</doc>
<arguments>
<arg>${encodePassword}</arg>
<arg>${pwdstr}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.532" level="INFO">${encodePassword} = Gg1Etyh7fs1y/v/K2XOJDg==</msg>
<status status="PASS" starttime="20200401 12:20:36.531" endtime="20200401 12:20:36.532"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${encodePassword}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.532" level="INFO">Gg1Etyh7fs1y/v/K2XOJDg==</msg>
<status status="PASS" starttime="20200401 12:20:36.532" endtime="20200401 12:20:36.532"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>/v1/user/login?username=${username}&amp;password=${encodePassword}&amp;authMode=${authmode}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.533" endtime="20200401 12:20:36.556"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.557" endtime="20200401 12:20:36.558"></status>
</kw>
<kw name="Integer" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON integer.*</doc>
<arguments>
<arg>$.code</arg>
<arg>200</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.558" endtime="20200401 12:20:36.580"></status>
</kw>
<kw name="Integer" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON integer.*</doc>
<arguments>
<arg>$.code</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:20:36.604" level="INFO">${rescode} = [200]</msg>
<status status="PASS" starttime="20200401 12:20:36.581" endtime="20200401 12:20:36.604"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${rescode}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.605" level="INFO">[200]</msg>
<status status="PASS" starttime="20200401 12:20:36.604" endtime="20200401 12:20:36.605"></status>
</kw>
<kw name="String" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON string.*</doc>
<arguments>
<arg>$.data.token</arg>
</arguments>
<assign>
<var>${tokenGlobal}</var>
</assign>
<msg timestamp="20200401 12:20:36.630" level="INFO">${tokenGlobal} = ['3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;']</msg>
<status status="PASS" starttime="20200401 12:20:36.605" endtime="20200401 12:20:36.630"></status>
</kw>
<kw name="Get From List" library="Collections">
<doc>Returns the value specified with an ``index`` from ``list``.</doc>
<arguments>
<arg>${tokenGlobal}</arg>
<arg>0</arg>
</arguments>
<assign>
<var>${tokenStr}</var>
</assign>
<msg timestamp="20200401 12:20:36.631" level="INFO">${tokenStr} = 3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;</msg>
<status status="PASS" starttime="20200401 12:20:36.630" endtime="20200401 12:20:36.631"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${tokenStr}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.632" level="INFO">3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;</msg>
<status status="PASS" starttime="20200401 12:20:36.631" endtime="20200401 12:20:36.632"></status>
</kw>
<kw name="Set Global Variable" library="BuiltIn">
<doc>Makes a variable available globally in all tests and suites.</doc>
<arguments>
<arg>${token}</arg>
<arg>${tokenStr}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.632" level="INFO">${token} = 3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;</msg>
<status status="PASS" starttime="20200401 12:20:36.632" endtime="20200401 12:20:36.633"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${token}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.633" level="INFO">3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;</msg>
<status status="PASS" starttime="20200401 12:20:36.633" endtime="20200401 12:20:36.633"></status>
</kw>
<kw name="Set Global Variable" library="BuiltIn">
<doc>Makes a variable available globally in all tests and suites.</doc>
<arguments>
<arg>${headers}</arg>
<arg>{"Contest-Type":"application/json","Authorization":"${token}"}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.635" level="INFO">${headers} = {"Contest-Type":"application/json","Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;"}</msg>
<status status="PASS" starttime="20200401 12:20:36.634" endtime="20200401 12:20:36.635"></status>
</kw>
<status status="PASS" starttime="20200401 12:20:36.383" endtime="20200401 12:20:36.635"></status>
</kw>
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>${addTestClentIPFlag}==1</arg>
<arg>AddLocalIPObject</arg>
</arguments>
<kw name="AddLocalIPObject" library="PolicyObject">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>to_AddLocalIPObject</arg>
</arguments>
<msg timestamp="20200401 12:20:36.637" level="INFO">to_AddLocalIPObject</msg>
<status status="PASS" starttime="20200401 12:20:36.636" endtime="20200401 12:20:36.637"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"objectList":{"objectType":"ip","objectSubType":"endpoint","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"autotestLocalIPObject_${testClentIP}","objectDesc":"LocalIPObject_${testClentIP}自动化测试机IP","subObjectIds":[],"addItemList":[{"addrType":4,"protocol":0,"direction":0,"isSession":"endpoint","clientIp1":"${testClentIP}","clientIp2":"${testClentIP}","clientIpFormat":"range","clientPortFormat":"range","clientPort1":0,"clientPort2":0,"serverIpFormat":"range","serverIp1":"","serverIp2":"","serverPortFormat":"range","serverPort1":0,"serverPort2":0}],"updateItemList":[],"deleteItemIds":[]}}</arg>
</arguments>
<assign>
<var>${localIP}</var>
</assign>
<msg timestamp="20200401 12:20:36.637" level="INFO">${localIP} = {"opAction":"add","returnData":1,"objectList":{"objectType":"ip","objectSubType":"endpoint","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"autotestLocalIPObject_192.168.50.43","objectDesc"...</msg>
<status status="PASS" starttime="20200401 12:20:36.637" endtime="20200401 12:20:36.638"></status>
</kw>
<kw name="AddObject" library="PolicyObject">
<arguments>
<arg>${localIP}</arg>
</arguments>
<assign>
<var>${rescodeip}</var>
<var>${objidip}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.639" endtime="20200401 12:20:36.639"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:20:36.876" level="INFO">&amp;{httpResponse} = { seconds=0.231005 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'clientIp2': '192.168.50.43', 'clientIpFormat': 'range', 'serverIpFormat': 'range', 'isSession': 'endpoin...</msg>
<status status="PASS" starttime="20200401 12:20:36.639" endtime="20200401 12:20:36.876"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:20:36.878" level="INFO">
{
"code": 200,
"data": {
"objectList": [
{
"addItemList": [
{
"clientIp2": "192.168.50.43",
"clientIpFormat": "range",
"serverIpFormat": "range",
"isSession": "endpoint",
"serverPortFormat": "range",
"protocol": 0,
"serverIp2": "",
"clientPortFormat": "range",
"clientPort1": 0,
"clientPort2": 0,
"serverIp1": "",
"serverPort2": 0,
"clientIp1": "192.168.50.43",
"serverPort1": 0,
"addrType": 4,
"direction": 0
}
],
"deleteItemIds": [],
"isExclusion": 0,
"isInitialize": 0,
"isValid": 1,
"objectDesc": "LocalIPObject_192.168.50.43自动化测试机IP",
"objectId": 470,
"objectName": "autotestLocalIPObject_192.168.50.43",
"objectSubType": "endpoint",
"objectType": "ip",
"opTime": "2020-04-01 12:20:35",
"opUser": 981,
"subObjectIds": [],
"updateItemList": []
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:20:36.877" endtime="20200401 12:20:36.888"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.888" endtime="20200401 12:20:36.891"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:20:36.892" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'clientIp2': '192.168.50.43', 'clientIpFormat': 'range', 'serverIpFormat': 'range', 'isSession': 'endpoint', 'serverPortFormat': 'range', 'proto...</msg>
<status status="PASS" starttime="20200401 12:20:36.891" endtime="20200401 12:20:36.892"></status>
</kw>
<msg timestamp="20200401 12:20:36.892" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'clientIp2': '192.168.50.43', 'clientIpFormat': 'range', 'serverIpFormat': 'range', 'isSession': 'endpoint', 'serverPortFormat': 'range', 'proto...</msg>
<status status="PASS" starttime="20200401 12:20:36.638" endtime="20200401 12:20:36.892"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['objectList'][0]['objectId']}</arg>
</arguments>
<assign>
<var>${objectId}</var>
</assign>
<msg timestamp="20200401 12:20:36.893" level="INFO">${objectId} = 470</msg>
<status status="PASS" starttime="20200401 12:20:36.893" endtime="20200401 12:20:36.894"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescodeReturn}</var>
</assign>
<msg timestamp="20200401 12:20:36.894" level="INFO">${rescodeReturn} = 200</msg>
<status status="PASS" starttime="20200401 12:20:36.894" endtime="20200401 12:20:36.895"></status>
</kw>
<msg timestamp="20200401 12:20:36.895" level="INFO">${rescodeip} = 200</msg>
<msg timestamp="20200401 12:20:36.895" level="INFO">${objidip} = 470</msg>
<status status="PASS" starttime="20200401 12:20:36.638" endtime="20200401 12:20:36.895"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${rescodeip}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.896" level="INFO">200</msg>
<status status="PASS" starttime="20200401 12:20:36.896" endtime="20200401 12:20:36.897"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>LocalIP：${objidip}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.897" level="INFO">LocalIP：470</msg>
<status status="PASS" starttime="20200401 12:20:36.897" endtime="20200401 12:20:36.898"></status>
</kw>
<kw name="Set Global Variable" library="BuiltIn">
<doc>Makes a variable available globally in all tests and suites.</doc>
<arguments>
<arg>${testClentID}</arg>
<arg>${objidip}</arg>
</arguments>
<msg timestamp="20200401 12:20:36.899" level="INFO">${testClentID} = 470</msg>
<status status="PASS" starttime="20200401 12:20:36.898" endtime="20200401 12:20:36.899"></status>
</kw>
<status status="PASS" starttime="20200401 12:20:36.636" endtime="20200401 12:20:36.899"></status>
</kw>
<status status="PASS" starttime="20200401 12:20:36.635" endtime="20200401 12:20:36.900"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>ApiLoginAndAddLocalIP</arg>
</arguments>
<msg timestamp="20200401 12:20:36.901" level="INFO">ApiLoginAndAddLocalIP</msg>
<status status="PASS" starttime="20200401 12:20:36.900" endtime="20200401 12:20:36.901"></status>
</kw>
<status status="PASS" starttime="20200401 12:20:36.381" endtime="20200401 12:20:36.901"></status>
</kw>
<status status="PASS" starttime="20200401 12:20:36.381" endtime="20200401 12:20:36.901"></status>
</kw>
<status status="PASS" starttime="20200401 12:20:36.379" endtime="20200401 12:20:36.902"></status>
</kw>
<suite id="s1-s1" name="01-TestCase" source="E:\auto_git\tsg_autotest\01-TestCase">
<suite id="s1-s1-s1" name="Tsg Adc" source="E:\auto_git\tsg_autotest\01-TestCase\tsg_adc">
<suite id="s1-s1-s1-s1" name="Api Security" source="E:\auto_git\tsg_autotest\01-TestCase\tsg_adc\api_security">
<suite id="s1-s1-s1-s1-s1" name="AllowHttpTests" source="E:\auto_git\tsg_autotest\01-TestCase\tsg_adc\api_security\AllowHttpTests.robot">
<test id="s1-s1-s1-s1-s1-t1" name="SecurityPolicy-Allow-Http-00001">
<kw name="AddObject" library="PolicyObject">
<arguments>
<arg>{"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn","objectSubType":"","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00001_FQDN_icbc","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["$www.icbc.com.cn"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[]}}</arg>
</arguments>
<assign>
<var>${rescodeip}</var>
<var>${object_FQDN_Id}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:36.950" endtime="20200401 12:20:36.950"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:20:37.116" level="INFO">&amp;{httpResponse} = { seconds=0.16222999999999999 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$www.icbc.com.cn'], 'isHexbin': 0}], 'deleteItemIds': [], 'isE...</msg>
<status status="PASS" starttime="20200401 12:20:36.951" endtime="20200401 12:20:37.116"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:20:37.117" level="INFO">
{
"code": 200,
"data": {
"objectList": [
{
"addItemList": [
{
"itemId": "",
"keywordArray": [
"$www.icbc.com.cn"
],
"isHexbin": 0
}
],
"deleteItemIds": [],
"isExclusion": 0,
"isInitialize": 0,
"isValid": 1,
"objectDesc": "",
"objectId": 471,
"objectName": "SecurityPolicy-Allow-Http-00001_FQDN_icbc",
"objectSubType": "",
"objectType": "fqdn",
"opTime": "2020-04-01 12:20:35",
"opUser": 981,
"subObjectIds": [],
"updateItemList": []
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:20:37.117" endtime="20200401 12:20:37.118"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.118" endtime="20200401 12:20:37.120"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:20:37.121" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$www.icbc.com.cn'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'ob...</msg>
<status status="PASS" starttime="20200401 12:20:37.120" endtime="20200401 12:20:37.121"></status>
</kw>
<msg timestamp="20200401 12:20:37.121" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$www.icbc.com.cn'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'ob...</msg>
<status status="PASS" starttime="20200401 12:20:36.949" endtime="20200401 12:20:37.122"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['objectList'][0]['objectId']}</arg>
</arguments>
<assign>
<var>${objectId}</var>
</assign>
<msg timestamp="20200401 12:20:37.122" level="INFO">${objectId} = 471</msg>
<status status="PASS" starttime="20200401 12:20:37.122" endtime="20200401 12:20:37.122"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescodeReturn}</var>
</assign>
<msg timestamp="20200401 12:20:37.123" level="INFO">${rescodeReturn} = 200</msg>
<status status="PASS" starttime="20200401 12:20:37.123" endtime="20200401 12:20:37.123"></status>
</kw>
<msg timestamp="20200401 12:20:37.123" level="INFO">${rescodeip} = 200</msg>
<msg timestamp="20200401 12:20:37.123" level="INFO">${object_FQDN_Id} = 471</msg>
<status status="PASS" starttime="20200401 12:20:36.949" endtime="20200401 12:20:37.124"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${object_FQDN_Id}</arg>
</arguments>
<msg timestamp="20200401 12:20:37.124" level="INFO">471</msg>
<status status="PASS" starttime="20200401 12:20:37.124" endtime="20200401 12:20:37.124"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${object_FQDN_Id}</arg>
</arguments>
<assign>
<var>${objectids}</var>
</assign>
<msg timestamp="20200401 12:20:37.125" level="INFO">${objectids} = 471</msg>
<status status="PASS" starttime="20200401 12:20:37.124" endtime="20200401 12:20:37.125"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<msg timestamp="20200401 12:20:37.126" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po...</msg>
<status status="PASS" starttime="20200401 12:20:37.125" endtime="20200401 12:20:37.126"></status>
</kw>
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>'${addTestClentIPFlag}'=='1'</arg>
<arg>set variable</arg>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.126" endtime="20200401 12:20:37.127"></status>
</kw>
<msg timestamp="20200401 12:20:37.127" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po...</msg>
<status status="PASS" starttime="20200401 12:20:37.126" endtime="20200401 12:20:37.127"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<msg timestamp="20200401 12:20:37.127" level="INFO">{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":470,"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":471,"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</msg>
<status status="PASS" starttime="20200401 12:20:37.127" endtime="20200401 12:20:37.128"></status>
</kw>
<kw name="AddPolicy" library="PolicyObject">
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${policyId1}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.129" endtime="20200401 12:20:37.129"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:20:37.363" level="INFO">&amp;{httpResponse} = { seconds=0.225723 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 58.0, 'evalu...</msg>
<status status="PASS" starttime="20200401 12:20:37.129" endtime="20200401 12:20:37.363"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:20:37.366" level="INFO">
{
"code": 200,
"data": {
"policyList": [
{
"action": "deny",
"appObjectIdArray": [
2
],
"doLog": 1,
"evaluationLayer": "session_layer",
"evaluationOrder": 58.0,
"evaluationStage": 1,
"isValid": 1,
"newSrcIpObjName": "autotestLocalIPObject_192.168.50.43",
"opTime": "2020-04-01 12:20:36",
"opUser": 981,
"policyDesc": "autotest",
"policyId": 74,
"policyName": "SecurityPolicy-Allow-Http-00001_Deny",
"policyType": "tsg_security",
"protocol": "HTTP",
"referenceObject": [],
"scheduleId": [],
"userRegion": {
"protocol": "HTTP",
"method": "drop"
},
"userTags": ""
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:20:37.365" endtime="20200401 12:20:37.370"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.371" endtime="20200401 12:20:37.375"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:20:37.377" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 58.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp...</msg>
<status status="PASS" starttime="20200401 12:20:37.376" endtime="20200401 12:20:37.378"></status>
</kw>
<msg timestamp="20200401 12:20:37.378" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 58.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp...</msg>
<status status="PASS" starttime="20200401 12:20:37.128" endtime="20200401 12:20:37.379"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['policyList'][0]['policyId']}</arg>
</arguments>
<assign>
<var>${policyId}</var>
</assign>
<msg timestamp="20200401 12:20:37.380" level="INFO">${policyId} = 74</msg>
<status status="PASS" starttime="20200401 12:20:37.379" endtime="20200401 12:20:37.380"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:20:37.381" level="INFO">${rescode} = 200</msg>
<status status="PASS" starttime="20200401 12:20:37.380" endtime="20200401 12:20:37.381"></status>
</kw>
<msg timestamp="20200401 12:20:37.382" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:20:37.382" level="INFO">${policyId1} = 74</msg>
<status status="PASS" starttime="20200401 12:20:37.128" endtime="20200401 12:20:37.382"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${policyId1}</arg>
</arguments>
<msg timestamp="20200401 12:20:37.383" level="INFO">74</msg>
<status status="PASS" starttime="20200401 12:20:37.383" endtime="20200401 12:20:37.384"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId1}]}</arg>
</arguments>
<assign>
<var>${policyIds}</var>
</assign>
<msg timestamp="20200401 12:20:37.385" level="INFO">${policyIds} = {"policyType":"tsg_security","policyIds":[74]}</msg>
<status status="PASS" starttime="20200401 12:20:37.384" endtime="20200401 12:20:37.385"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<msg timestamp="20200401 12:20:37.386" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy...</msg>
<status status="PASS" starttime="20200401 12:20:37.385" endtime="20200401 12:20:37.386"></status>
</kw>
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>'${addTestClentIPFlag}'=='1'</arg>
<arg>set variable</arg>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.387" endtime="20200401 12:20:37.387"></status>
</kw>
<msg timestamp="20200401 12:20:37.388" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy...</msg>
<status status="PASS" starttime="20200401 12:20:37.386" endtime="20200401 12:20:37.388"></status>
</kw>
<kw name="AddPolicy" library="PolicyObject">
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${policyId2}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.390" endtime="20200401 12:20:37.391"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:20:37.642" level="INFO">&amp;{httpResponse} = { seconds=0.246545 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 59.0, 'eval...</msg>
<status status="PASS" starttime="20200401 12:20:37.391" endtime="20200401 12:20:37.642"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:20:37.643" level="INFO">
{
"code": 200,
"data": {
"policyList": [
{
"action": "allow",
"appObjectIdArray": [
2
],
"doLog": 1,
"evaluationLayer": "session_layer",
"evaluationOrder": 59.0,
"evaluationStage": 1,
"isValid": 1,
"newSrcIpObjName": "autotestLocalIPObject_192.168.50.43",
"opTime": "2020-04-01 12:20:36",
"opUser": 981,
"policyDesc": "autotest",
"policyId": 75,
"policyName": "SecurityPolicy-Allow-Http-00001",
"policyType": "tsg_security",
"protocol": "HTTP",
"referenceObject": [],
"scheduleId": [],
"userRegion": {
"protocol": "HTTP"
},
"userTags": ""
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:20:37.642" endtime="20200401 12:20:37.644"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:20:37.644" endtime="20200401 12:20:37.646"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:20:37.646" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 59.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI...</msg>
<status status="PASS" starttime="20200401 12:20:37.646" endtime="20200401 12:20:37.647"></status>
</kw>
<msg timestamp="20200401 12:20:37.647" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 59.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI...</msg>
<status status="PASS" starttime="20200401 12:20:37.389" endtime="20200401 12:20:37.647"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['policyList'][0]['policyId']}</arg>
</arguments>
<assign>
<var>${policyId}</var>
</assign>
<msg timestamp="20200401 12:20:37.648" level="INFO">${policyId} = 75</msg>
<status status="PASS" starttime="20200401 12:20:37.647" endtime="20200401 12:20:37.648"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:20:37.649" level="INFO">${rescode} = 200</msg>
<status status="PASS" starttime="20200401 12:20:37.648" endtime="20200401 12:20:37.649"></status>
</kw>
<msg timestamp="20200401 12:20:37.649" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:20:37.649" level="INFO">${policyId2} = 75</msg>
<status status="PASS" starttime="20200401 12:20:37.388" endtime="20200401 12:20:37.649"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${policyId2}</arg>
</arguments>
<msg timestamp="20200401 12:20:37.650" level="INFO">75</msg>
<status status="PASS" starttime="20200401 12:20:37.649" endtime="20200401 12:20:37.650"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId2}]}</arg>
</arguments>
<assign>
<var>${policyIds2}</var>
</assign>
<msg timestamp="20200401 12:20:37.650" level="INFO">${policyIds2} = {"policyType":"tsg_security","policyIds":[75]}</msg>
<status status="PASS" starttime="20200401 12:20:37.650" endtime="20200401 12:20:37.651"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId1}]}</arg>
</arguments>
<assign>
<var>${policyIds1}</var>
</assign>
<msg timestamp="20200401 12:20:37.651" level="INFO">${policyIds1} = {"policyType":"tsg_security","policyIds":[74]}</msg>
<status status="PASS" starttime="20200401 12:20:37.651" endtime="20200401 12:20:37.651"></status>
</kw>
<kw name="Create List" library="BuiltIn">
<doc>Returns a list containing given items.</doc>
<arguments>
<arg>${policyIds1}</arg>
<arg>${policyIds2}</arg>
</arguments>
<assign>
<var>${policyIds}</var>
</assign>
<msg timestamp="20200401 12:20:37.652" level="INFO">${policyIds} = ['{"policyType":"tsg_security","policyIds":[74]}', '{"policyType":"tsg_security","policyIds":[75]}']</msg>
<status status="PASS" starttime="20200401 12:20:37.651" endtime="20200401 12:20:37.652"></status>
</kw>
<kw name="Get Time" library="BuiltIn">
<doc>Returns the given time in the requested format.</doc>
<assign>
<var>${starttime}</var>
</assign>
<msg timestamp="20200401 12:20:37.652" level="INFO">${starttime} = 2020-04-01 12:20:37</msg>
<status status="PASS" starttime="20200401 12:20:37.652" endtime="20200401 12:20:37.653"></status>
</kw>
<kw name="Sleep" library="BuiltIn">
<doc>Pauses the test executed for the given time.</doc>
<arguments>
<arg>${policyVerificationSleepSeconds}s</arg>
</arguments>
<msg timestamp="20200401 12:20:57.654" level="INFO">Slept 20 seconds</msg>
<status status="PASS" starttime="20200401 12:20:37.653" endtime="20200401 12:20:57.654"></status>
</kw>
<kw name="Run" library="OperatingSystem">
<doc>Runs the given command in the system and returns the output.</doc>
<arguments>
<arg>curl -I \ -m \ 10 \ -o \ /dev/null \ -s \ -w \ \ \%{http_code} \ \ http://www.icbc.com.cn</arg>
</arguments>
<assign>
<var>${commandreturn}</var>
</assign>
<msg timestamp="20200401 12:20:59.199" level="INFO">Running command 'curl -I -m 10 -o /dev/null -s -w %{http_code} http://www.icbc.com.cn 2&gt;&amp;1'.</msg>
<msg timestamp="20200401 12:21:00.709" level="INFO">${commandreturn} = 200</msg>
<status status="PASS" starttime="20200401 12:20:57.655" endtime="20200401 12:21:00.710"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${commandreturn}</arg>
<arg>200</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:00.710" endtime="20200401 12:21:00.711"></status>
</kw>
<kw name="Sleep" library="BuiltIn">
<doc>Pauses the test executed for the given time.</doc>
<arguments>
<arg>${policyLogVerificationSleepSeconds}s</arg>
</arguments>
<msg timestamp="20200401 12:21:50.713" level="INFO">Slept 50 seconds</msg>
<status status="PASS" starttime="20200401 12:21:00.711" endtime="20200401 12:21:50.713"></status>
</kw>
<kw name="Get Time" library="BuiltIn">
<doc>Returns the given time in the requested format.</doc>
<assign>
<var>${endtime}</var>
</assign>
<msg timestamp="20200401 12:21:50.715" level="INFO">${endtime} = 2020-04-01 12:21:50</msg>
<status status="PASS" starttime="20200401 12:21:50.714" endtime="20200401 12:21:50.715"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${policyId2}</arg>
</arguments>
<assign>
<var>${s}</var>
</assign>
<msg timestamp="20200401 12:21:50.716" level="INFO">${s} = 75</msg>
<status status="PASS" starttime="20200401 12:21:50.716" endtime="20200401 12:21:50.716"></status>
</kw>
<kw name="GetLogList" library="LogVariable">
<arguments>
<arg>security_event_log</arg>
<arg>${starttime}</arg>
<arg>${endtime}</arg>
<arg>${testClentIP}</arg>
<arg>${s}</arg>
<arg>http_host</arg>
<arg>icbc</arg>
</arguments>
<kw name="GetLogCondition" library="LogSchema">
<arguments>
<arg>${logType}</arg>
<arg>${startTime}</arg>
<arg>${endTime}</arg>
<arg>${client_ip}</arg>
<arg>${policy_id}</arg>
</arguments>
<assign>
<var>${logCondition}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Content-Type":"application/x-www-form-urlencoded","Authorization":"${token}"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:50.718" endtime="20200401 12:21:50.719"></status>
</kw>
<kw name="Get" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a GET request to the endpoint.*</doc>
<arguments>
<arg>/v1/log/schema?logType=${logname}</arg>
</arguments>
<assign>
<var>&amp;{LogSchemaResponse}</var>
</assign>
<msg timestamp="20200401 12:21:50.933" level="INFO">&amp;{LogSchemaResponse} = { seconds=0.184733 | status=200 | body={'code': 200, 'data': {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'co...</msg>
<status status="PASS" starttime="20200401 12:21:50.719" endtime="20200401 12:21:50.933"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logname}</arg>
</arguments>
<msg timestamp="20200401 12:21:50.934" level="INFO">security_event_log</msg>
<status status="PASS" starttime="20200401 12:21:50.933" endtime="20200401 12:21:50.934"></status>
</kw>
<kw name="Output Schema" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON Schema to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:21:50.943" level="INFO">
{
"type": "object",
"properties": {
"code": {
"type": "integer",
"default": 200
},
"data": {
"type": "object",
"properties": {
"doc": {
"type": "object",
"properties": {
"schema_query": {
"type": "object",
"properties": {
"dimensions": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_server_ip",
"common_client_ip",
"common_policy_id",
"common_action",
"common_sled_ip",
"common_server_location",
"common_subscriber_id",
"http_domain"
]
},
"metrics": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_server_ip",
"common_client_ip",
"common_subscriber_id",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num"
]
},
"filters": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_policy_id",
"common_action",
"common_address_type",
"common_server_ip",
"common_client_ip",
"common_server_port",
"common_server_location",
"common_subscriber_id",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"http_domain",
"http_content_type",
"ssl_sni",
"ssl_pinningst",
"ssl_intercept_state"
]
}
},
"required": [
"dimensions",
"filters",
"metrics"
]
},
"schema_type": {
"type": "object",
"properties": {
"BASE": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"HTTP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"http_url",
"http_host",
"http_domain",
"http_request_line",
"http_response_line",
"http_request_header",
"http_response_header",
"http_request_body",
"http_response_body",
"http_request_body_key",
"http_response_body_key",
"http_proxy_flag",
"http_sequence",
"http_snapshot",
"http_cookie",
"http_referer",
"http_user_agent",
"http_content_length",
"http_content_type",
"http_set_cookie",
"http_version",
"http_response_lantency_ms",
"http_session_duration_ms"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"http_url",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"MAIL": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"mail_protocol_type",
"mail_account",
"mail_from_cmd",
"mail_to_cmd",
"mail_from",
"mail_to",
"mail_cc",
"mail_bcc",
"mail_subject",
"mail_subject_charset",
"mail_content",
"mail_content_charset",
"mail_attachment_name",
"mail_attachment_name_charset",
"mail_attachment_content",
"mail_eml_file",
"mail_snapshot"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"mail_from",
"mail_to",
"mail_subject"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"DNS": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"dns_message_id",
"dns_qr",
"dns_opcode",
"dns_aa",
"dns_tc",
"dns_rd",
"dns_ra",
"dns_rcode",
"dns_qdcount",
"dns_ancount",
"dns_nscount",
"dns_arcount",
"dns_qname",
"dns_qtype",
"dns_qclass",
"dns_cname",
"dns_sub",
"dns_rr"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_client_ip",
"dns_qr",
"dns_qname",
"dns_qtype"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"SSL": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"ssl_sni",
"ssl_san",
"ssl_cn",
"ssl_pinningst",
"ssl_intercept_state",
"ssl_server_side_latency",
"ssl_client_side_latency",
"ssl_server_side_version",
"ssl_client_side_version",
"ssl_cert_verify",
"ssl_error",
"ssl_con_latency_ms"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"ssl_sni",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"FTP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"ftp_account",
"ftp_url",
"ftp_content"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"ftp_url",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"BGP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"bgp_type",
"bgp_as_num",
"bgp_route"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"bgp_type",
"bgp_as_num",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"VOIP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"voip_calling_account",
"voip_called_account",
"voip_calling_number",
"voip_called_number"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"voip_calling_account",
"voip_called_account",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
}
},
"required": [
"BASE",
"BGP",
"DNS",
"FTP",
"HTTP",
"MAIL",
"SSL",
"VOIP"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_server_ip",
"common_server_port",
"common_schema_type"
]
}
},
"required": [
"default_columns",
"schema_query",
"schema_type"
]
},
"fields": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"type": {
"type": "string"
},
"doc": {
"type": "object",
"properties": {
"allow_query": {
"type": "string"
},
"constraints": {
"type": "object",
"properties": {
"type": {
"type": "string"
}
},
"required": [
"type"
]
},
"format": {
"type": "object",
"properties": {
"functions": {
"type": "string"
},
"appendTo": {
"type": "string"
},
"param": {
"type": "string"
}
},
"required": [
"functions"
]
},
"data": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"value": {
"type": "string"
}
},
"required": [
"code",
"value"
]
}
},
"visibility": {
"type": "string"
}
}
},
"label": {
"type": "string"
}
},
"required": [
"label",
"name",
"type"
]
},
"default": [
{
"name": "common_recv_time",
"type": "int",
"doc": {
"allow_query": "true",
"constraints": {
"type": "timestamp"
},
"format": {
"functions": "current_timestamp"
}
},
"label": "Receive Time"
},
{
"name": "common_log_id",
"type": "long",
"doc": {
"allow_query": "true",
"format": {
"functions": "snowflake_id"
}
},
"label": "Log ID"
},
{
"name": "common_policy_id",
"type": "int",
"doc": {
"allow_query": "true"
},
"label": "Policy ID"
},
{
"name": "common_subscriber_id",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "Subscriber ID"
},
{
"name": "common_client_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
},
"format": {
"functions": "geo_ip_detail,geo_asn,radius_match",
"appendTo": "common_client_location,common_client_asn,common_subscriber_id"
}
},
"label": "Client IP"
},
{
"name": "common_client_port",
"type": "int",
"label": "Client Port"
},
{
"name": "common_l4_protocol",
"type": "string",
"label": "L4 Protocol"
},
{
"name": "common_address_type",
"type": "int",
"doc": {
"data": [
{
"code": "4",
"value": "ipv4"
},
{
"code": "6",
"value": "ipv6"
}
]
},
"label": "Address Type"
},
{
"name": "common_server_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
},
"format": {
"functions": "geo_ip_country,geo_asn",
"appendTo": "common_server_location,common_server_asn"
}
},
"label": "Server IP"
},
{
"name": "common_server_port",
"type": "int",
"doc": {
"allow_query": "true"
},
"label": "Server Port"
},
{
"name": "common_action",
"type": "int",
"doc": {
"allow_query": "true",
"data": [
{
"code": "0",
"value": "None"
},
{
"code": "1",
"value": "Monitor"
},
{
"code": "2",
"value": "Intercept"
},
{
"code": "16",
"value": "Deny"
},
{
"code": "48",
"value": "Manipulation"
},
{
"code": "128",
"value": "Allow"
}
]
},
"label": "Action"
},
{
"name": "common_direction",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "outbound"
},
{
"code": "1",
"value": "inbound"
}
]
},
"label": "Direction"
},
{
"name": "common_entrance_id",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Entrance ID"
},
{
"name": "common_sled_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
}
},
"label": "Sled IP"
},
{
"name": "common_client_location",
"type": "string",
"label": "Client Location"
},
{
"name": "common_client_asn",
"type": "string",
"label": "Client ASN"
},
{
"name": "common_server_location",
"type": "string",
"label": "Server Location"
},
{
"name": "common_server_asn",
"type": "string",
"label": "Server ASN"
},
{
"name": "common_c2s_pkt_num",
"type": "int",
"label": "Packets Sent"
},
{
"name": "common_s2c_pkt_num",
"type": "int",
"label": "Packets Received"
},
{
"name": "common_c2s_byte_num",
"type": "int",
"label": "Bytes Sent"
},
{
"name": "common_s2c_byte_num",
"type": "int",
"label": "Bytes Received"
},
{
"name": "common_service",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Service"
},
{
"name": "common_schema_type",
"type": "string",
"doc": {
"data": [
{
"code": "BASE",
"value": "BASE"
},
{
"code": "HTTP",
"value": "HTTP"
},
{
"code": "MAIL",
"value": "MAIL"
},
{
"code": "DNS",
"value": "DNS"
},
{
"code": "SSL",
"value": "SSL"
},
{
"code": "FTP",
"value": "FTP"
},
{
"code": "BGP",
"value": "BGP"
},
{
"code": "VOIP",
"value": "VOIP"
},
{
"code": "RADIUS",
"value": "RADIUS"
}
],
"allow_query": "true"
},
"label": "Schema Type"
},
{
"name": "common_user_tags",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "User Tags"
},
{
"name": "common_sub_action",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Sub Action"
},
{
"name": "common_user_region",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "User Region"
},
{
"name": "common_device_id",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Device ID"
},
{
"name": "common_link_id",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Link ID"
},
{
"name": "common_isp",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "ISP"
},
{
"name": "common_encapsulation",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Ethernet"
},
{
"code": "8",
"value": "PPP"
},
{
"code": "12",
"value": "CiscoHDLC"
}
]
},
"label": "Encapsulation"
},
{
"name": "common_app_label",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Application Label"
},
{
"name": "common_app_id",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "NOT SPECIFIED"
},
{
"code": "100001",
"value": "Skype"
},
{
"code": "100101",
"value": "Instagram"
},
{
"code": "100201",
"value": "Youtube"
},
{
"code": "100301",
"value": "Facebook"
},
{
"code": "100401",
"value": "What‘s App"
},
{
"code": "100501",
"value": "Periscope"
},
{
"code": "100601",
"value": "Viber"
},
{
"code": "100701",
"value": "Twitter"
},
{
"code": "100801",
"value": "Vkontakte"
},
{
"code": "100901",
"value": "Telegram"
},
{
"code": "101001",
"value": "Odnoklassniki"
},
{
"code": "101101",
"value": "Mail agent"
},
{
"code": "101201",
"value": "FaceTime"
},
{
"code": "101301",
"value": "Snapchat"
},
{
"code": "101401",
"value": "Google"
},
{
"code": "101501",
"value": "Yandex"
},
{
"code": "101601",
"value": "Yandex Browser Turbo"
},
{
"code": "101701",
"value": "Opera"
},
{
"code": "101702",
"value": "Opera Turbo"
},
{
"code": "101703",
"value": "Opera mini"
},
{
"code": "101801",
"value": "AppStore"
},
{
"code": "101901",
"value": "PlayMarket"
},
{
"code": "102001",
"value": "Drugvokrug social networking"
},
{
"code": "102101",
"value": "Badoo social networking"
},
{
"code": "102201",
"value": "WeChat"
},
{
"code": "102301",
"value": "Zello"
},
{
"code": "102401",
"value": "Freegate"
},
{
"code": "102501",
"value": "Psiphon"
},
{
"code": "102601",
"value": "TOR"
},
{
"code": "102602",
"value": "Tor browser"
},
{
"code": "102603",
"value": "Tor mode"
},
{
"code": "102701",
"value": "Orbot"
},
{
"code": "102801",
"value": "Tunnel Bear VPN"
},
{
"code": "102901",
"value": "HotSpot Shield VPN"
},
{
"code": "103001",
"value": "VPN Master"
},
{
"code": "103101",
"value": "Hola VPN"
},
{
"code": "103201",
"value": "HideMyAss VPN"
},
{
"code": "103301",
"value": "Zenmate VPN"
},
{
"code": "103401",
"value": "SignalPrivateMessenger"
},
{
"code": "200001",
"value": "RFA"
},
{
"code": "200002",
"value": "VOA"
},
{
"code": "200003",
"value": "lantern"
},
{
"code": "200004",
"value": "Line"
},
{
"code": "200005",
"value": "voxer"
},
{
"code": "200006",
"value": "ZeroNet"
},
{
"code": "200007",
"value": "Zalo"
},
{
"code": "200008",
"value": "free_browser"
},
{
"code": "200009",
"value": "Diaspora"
},
{
"code": "200010",
"value": "browsec"
},
{
"code": "200011",
"value": "Chrome_plugin_chuguo"
},
{
"code": "200012",
"value": "GoGo_SocksHttp"
},
{
"code": "200013",
"value": "ultrasurf_chrome"
},
{
"code": "200014",
"value": "pinterest"
},
{
"code": "200015",
"value": "Swisscom"
},
{
"code": "200016",
"value": "Threema"
},
{
"code": "200017",
"value": "Circuit_iOS"
},
{
"code": "200018",
"value": "Chrome_plugin_FastsTunnel"
},
{
"code": "200019",
"value": "OoVoo"
},
{
"code": "200020",
"value": "Vine"
},
{
"code": "200021",
"value": "Keek"
},
{
"code": "200022",
"value": "Hi"
},
{
"code": "200023",
"value": "HeyTell"
},
{
"code": "200024",
"value": "HikeMessenger"
},
{
"code": "200025",
"value": "Nonoh"
},
{
"code": "200026",
"value": "Path"
},
{
"code": "200027",
"value": "Kik"
},
{
"code": "200028",
"value": "BBM"
},
{
"code": "200029",
"value": "Talkray"
},
{
"code": "200030",
"value": "HelloTalk"
},
{
"code": "200031",
"value": "Skout"
},
{
"code": "200032",
"value": "MeetMe"
},
{
"code": "200033",
"value": "Nextdoor"
},
{
"code": "200034",
"value": "Shots"
},
{
"code": "200035",
"value": "Zoosk"
},
{
"code": "200036",
"value": "TextPlus"
},
{
"code": "200037",
"value": "Maaii"
},
{
"code": "200038",
"value": "Ustream"
},
{
"code": "200039",
"value": "Yikyak"
},
{
"code": "200040",
"value": "chatsecure"
},
{
"code": "200041",
"value": "freecalls"
},
{
"code": "200042",
"value": "SignalPrivateMessenger"
},
{
"code": "200043",
"value": "USGOV_CIA"
},
{
"code": "200044",
"value": "USGOV_FBI"
},
{
"code": "200045",
"value": "USGOV_DHS"
},
{
"code": "200046",
"value": "shenxun_Secure_Call_android"
},
{
"code": "200047",
"value": "shenxun_Secure_Call_web"
},
{
"code": "200048",
"value": "UProxy"
},
{
"code": "200049",
"value": "soma"
},
{
"code": "200050",
"value": "PlayerUnknown's_Battlegrounds"
},
{
"code": "200051",
"value": "STEAM"
},
{
"code": "200052",
"value": "dalai_lama"
},
{
"code": "200053",
"value": "Steam_forum"
},
{
"code": "200054",
"value": "Microsoft Online Certificate"
},
{
"code": "200055",
"value": "sogou_spider"
},
{
"code": "200056",
"value": "baidu_mobie"
},
{
"code": "200057",
"value": "Apple Push Service"
},
{
"code": "200058",
"value": "IQIYI"
},
{
"code": "200059",
"value": "baidu_spider"
},
{
"code": "200060",
"value": "Weibo"
},
{
"code": "200061",
"value": "Apple captive service"
},
{
"code": "200062",
"value": "Microsoft wns"
},
{
"code": "200063",
"value": "360_safe_pc"
},
{
"code": "200064",
"value": "Sogou Public Service"
},
{
"code": "200065",
"value": "Lenovo app_POST service"
},
{
"code": "200066",
"value": "Apple securityd service"
},
{
"code": "200067",
"value": "Weather pass"
},
{
"code": "200068",
"value": "Apple Service Pack"
},
{
"code": "200069",
"value": "Fast pressure"
},
{
"code": "200070",
"value": "SemrushBot"
},
{
"code": "200071",
"value": "Adrefs_spider"
},
{
"code": "200072",
"value": "AndroidDownloadManager"
},
{
"code": "200073",
"value": "XenderTop"
},
{
"code": "200074",
"value": "microsoft_update"
},
{
"code": "200075",
"value": "Youku"
},
{
"code": "200076",
"value": "Google_spider"
},
{
"code": "200077",
"value": "Microsoft User Experience and Telemetry Components"
},
{
"code": "200078",
"value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"
},
{
"code": "200079",
"value": "Microsoft ncsi"
},
{
"code": "200080",
"value": "Microsoft Privacy Collection Service"
},
{
"code": "200081",
"value": "uTorrent"
},
{
"code": "200082",
"value": "Edge"
},
{
"code": "200083",
"value": "Lenovo Music Store"
},
{
"code": "200084",
"value": "LieBao"
},
{
"code": "200085",
"value": "majesti_spider"
},
{
"code": "200086",
"value": "DotBot"
},
{
"code": "200087",
"value": "Millet Update"
},
{
"code": "200088",
"value": "Today’s headlines"
},
{
"code": "200089",
"value": "Microsoft live"
},
{
"code": "200090",
"value": "Microsoft OneNote"
},
{
"code": "200091",
"value": "Bing_spider"
},
{
"code": "200092",
"value": "Apple location service"
},
{
"code": "200093",
"value": "Kuaishou"
},
{
"code": "200094",
"value": "LeTV video"
},
{
"code": "200095",
"value": "QQ"
},
{
"code": "200096",
"value": "Wps"
},
{
"code": "200097",
"value": "kugou music"
},
{
"code": "200098",
"value": "kuwo music"
},
{
"code": "200099",
"value": "360_common_service"
},
{
"code": "200100",
"value": "Camera360"
},
{
"code": "200101",
"value": "Outlook"
},
{
"code": "200102",
"value": "zhihu"
},
{
"code": "200103",
"value": "Tencent video"
},
{
"code": "200104",
"value": "funshion"
},
{
"code": "200105",
"value": "QQ shared service"
},
{
"code": "200106",
"value": "Microsoft wdcp service"
},
{
"code": "200107",
"value": "Microsoft Media_center_pc"
},
{
"code": "200108",
"value": "360 phone helper"
},
{
"code": "200109",
"value": "Kingsoft Public Service"
},
{
"code": "200110",
"value": "Ios_wifi connection"
},
{
"code": "200111",
"value": "Teamviewer"
},
{
"code": "200112",
"value": "Baidu cloud disk"
},
{
"code": "200113",
"value": "Tencent News"
},
{
"code": "200114",
"value": "Baidu map"
},
{
"code": "200115",
"value": "Panda TV"
},
{
"code": "200116",
"value": "Thunder"
},
{
"code": "200117",
"value": "NetEase cloud music"
},
{
"code": "200118",
"value": "QQ music"
},
{
"code": "200119",
"value": "Itools"
},
{
"code": "200120",
"value": "Jingdong Finance"
},
{
"code": "200121",
"value": "PycURL"
},
{
"code": "200122",
"value": "Yahoo_Spider"
},
{
"code": "200123",
"value": "Himalayan FM"
},
{
"code": "200124",
"value": "Youdao_dict"
},
{
"code": "200125",
"value": "Microsoft_spynet"
},
{
"code": "200126",
"value": "proximicBot"
},
{
"code": "200127",
"value": "Foxit_reader"
},
{
"code": "200128",
"value": "Sohu Video"
},
{
"code": "200129",
"value": "BlueStacks"
},
{
"code": "200130",
"value": "Beauty group"
},
{
"code": "200131",
"value": "Kmplayer"
},
{
"code": "200132",
"value": "TaoBao"
},
{
"code": "200133",
"value": "Exabot"
},
{
"code": "200134",
"value": "Ubuntu_apt_get"
},
{
"code": "200135",
"value": "Oriental Fortune"
},
{
"code": "200136",
"value": "JikeSpider"
},
{
"code": "200137",
"value": "Itunesstored"
},
{
"code": "200138",
"value": "GAD map"
},
{
"code": "200139",
"value": "ifeng News"
},
{
"code": "200140",
"value": "BoardReaderBot"
},
{
"code": "200141",
"value": "AmazonBot"
},
{
"code": "200142",
"value": "Alipay"
},
{
"code": "200143",
"value": "Alipay security controls"
},
{
"code": "200144",
"value": "360 security guards (antivirus)"
},
{
"code": "200145",
"value": "360 logon service"
},
{
"code": "200146",
"value": "BLP_bbot"
},
{
"code": "200147",
"value": "Keep"
},
{
"code": "200148",
"value": "WiFi universal key"
},
{
"code": "200149",
"value": "Baidu Music"
},
{
"code": "200150",
"value": "Vip.com"
},
{
"code": "200151",
"value": "JD.COM"
},
{
"code": "200152",
"value": "sina"
},
{
"code": "200153",
"value": "youdao Public service"
},
{
"code": "200154",
"value": "Jinshan public service"
},
{
"code": "200155",
"value": "Baidu guard"
},
{
"code": "200156",
"value": "Apple system update service"
},
{
"code": "200157",
"value": "momo"
},
{
"code": "200158",
"value": "CNZZ statistics"
},
{
"code": "200159",
"value": "Microsoft one_drive service"
},
{
"code": "200160",
"value": "WindowsStore"
},
{
"code": "200161",
"value": "duba"
},
{
"code": "200162",
"value": "Baidu HD"
},
{
"code": "200163",
"value": "qunar"
},
{
"code": "200164",
"value": "qianxunyingshi"
},
{
"code": "200165",
"value": "KuaiyanKanShuSpider"
},
{
"code": "200166",
"value": "Mail.RU_Bot_Robot"
},
{
"code": "200167",
"value": "MpCommunication"
},
{
"code": "200168",
"value": "Weather forecast"
},
{
"code": "200169",
"value": "Ltx71_spider"
},
{
"code": "200170",
"value": "Ia_archiver"
},
{
"code": "200171",
"value": "Ali Wangwang"
},
{
"code": "200172",
"value": "UC home page (information)"
},
{
"code": "200173",
"value": "Yeti"
},
{
"code": "200174",
"value": "Rtorrent"
},
{
"code": "200175",
"value": "QQPim"
},
{
"code": "200176",
"value": "NetEase News"
},
{
"code": "200177",
"value": "sina sports"
},
{
"code": "200178",
"value": "Exchange of foreign exchange"
},
{
"code": "200179",
"value": "BlueStacks update"
},
{
"code": "200180",
"value": "youdao"
},
{
"code": "200181",
"value": "QQ computer housekeeper"
},
{
"code": "200182",
"value": "UltraEdit"
},
{
"code": "200183",
"value": "EasouSpider"
},
{
"code": "200184",
"value": "QQ Zone"
},
{
"code": "200185",
"value": "Foxmail"
},
{
"code": "200186",
"value": "Pingdom.com"
},
{
"code": "200187",
"value": "Sina Finance"
},
{
"code": "200188",
"value": "QQ one key login"
},
{
"code": "200189",
"value": "Norton"
},
{
"code": "200190",
"value": "Baidu waimai"
},
{
"code": "200191",
"value": "YaCy"
},
{
"code": "200192",
"value": "Haitong e Haitong"
},
{
"code": "200193",
"value": "AdsBot-Google"
},
{
"code": "200194",
"value": "Guangfa Yijin"
},
{
"code": "200195",
"value": "Ali security program"
},
{
"code": "200196",
"value": "Cliqzbot"
},
{
"code": "200197",
"value": "Mobike"
},
{
"code": "200198",
"value": "Kingsoft PowerWord"
},
{
"code": "200199",
"value": "meishij"
},
{
"code": "200200",
"value": "CCB mobile bank"
},
{
"code": "200201",
"value": "Mega SkyDrive"
},
{
"code": "200202",
"value": "douyu"
},
{
"code": "200203",
"value": "Flamingo_SearchEngine"
},
{
"code": "200204",
"value": "Lenovo shop"
},
{
"code": "200205",
"value": "Uc news"
},
{
"code": "200206",
"value": "Volcano small video"
},
{
"code": "200207",
"value": "Meitu Xiu Xiu"
},
{
"code": "200208",
"value": "Kaspersky"
},
{
"code": "200209",
"value": "AcFun"
},
{
"code": "200210",
"value": "Slackbot"
},
{
"code": "200211",
"value": "Snowball"
},
{
"code": "200212",
"value": "SafeDNSBot"
},
{
"code": "200213",
"value": "Great wisdom"
},
{
"code": "200214",
"value": "Mailbox of NetEase"
},
{
"code": "200215",
"value": "peasecod"
},
{
"code": "200216",
"value": "Gold ten data"
},
{
"code": "200217",
"value": "Linkdexbot"
},
{
"code": "200218",
"value": "Sina blog"
},
{
"code": "200219",
"value": "Ginger"
},
{
"code": "200220",
"value": "Microsoft activation verification"
},
{
"code": "200221",
"value": "Facebot"
},
{
"code": "200222",
"value": "Dangdang"
},
{
"code": "200223",
"value": "QQ cyclone"
},
{
"code": "200224",
"value": "Wp_feedbot"
},
{
"code": "200225",
"value": "ICBC"
},
{
"code": "200226",
"value": "Public service"
},
{
"code": "200227",
"value": "Magpie-crawler"
},
{
"code": "200228",
"value": "xianyu"
},
{
"code": "200229",
"value": "GetIntentBot"
},
{
"code": "200230",
"value": "Papers"
},
{
"code": "200231",
"value": "NewsGator"
},
{
"code": "200232",
"value": "RankFlexBot"
},
{
"code": "200233",
"value": "rogerbot"
},
{
"code": "200234",
"value": "SurdotlyBot"
},
{
"code": "200235",
"value": "CheckMarkNetworkBot"
},
{
"code": "200236",
"value": "pyspider"
},
{
"code": "200237",
"value": "spbot"
},
{
"code": "200238",
"value": "Huaxia Bank"
},
{
"code": "200239",
"value": "glory of king"
},
{
"code": "200240",
"value": "msnbot-Products"
},
{
"code": "200241",
"value": "archive.org"
},
{
"code": "200242",
"value": "applebot"
},
{
"code": "200243",
"value": "alicall"
},
{
"code": "200244",
"value": "Superfeedrbot"
},
{
"code": "200245",
"value": "QQ mailbox"
},
{
"code": "200246",
"value": "coccocbot-webBot"
},
{
"code": "200247",
"value": "dingtalk"
},
{
"code": "200248",
"value": "Dragonbot"
},
{
"code": "200249",
"value": "Mediatoolkitbot"
},
{
"code": "200250",
"value": "bitcomet"
},
{
"code": "200251",
"value": "filetopia"
},
{
"code": "200252",
"value": "flashget"
},
{
"code": "200253",
"value": "oracle"
},
{
"code": "200254",
"value": "yyvoice"
},
{
"code": "200255",
"value": "imesh"
},
{
"code": "200256",
"value": "citrix"
},
{
"code": "200257",
"value": "corba"
},
{
"code": "200258",
"value": "dameware"
},
{
"code": "200259",
"value": "pcanywhere"
},
{
"code": "200260",
"value": "qq_rdp"
},
{
"code": "200261",
"value": "poco"
},
{
"code": "200262",
"value": "qqdownload"
},
{
"code": "200263",
"value": "applejuice"
},
{
"code": "200264",
"value": "stealthnet"
},
{
"code": "200265",
"value": "winmx"
},
{
"code": "200266",
"value": "emule"
},
{
"code": "200267",
"value": "emule_decrypt"
},
{
"code": "200268",
"value": "qvod"
},
{
"code": "200269",
"value": "mysql"
},
{
"code": "200270",
"value": "icecast"
},
{
"code": "200271",
"value": "mms"
},
{
"code": "200272",
"value": "pplive"
},
{
"code": "200273",
"value": "ppstream"
},
{
"code": "200274",
"value": "sopcast"
},
{
"code": "200275",
"value": "tvants"
},
{
"code": "200276",
"value": "sohutv"
},
{
"code": "200277",
"value": "iku"
},
{
"code": "200278",
"value": "qqlive"
},
{
"code": "200279",
"value": "rsync"
},
{
"code": "200280",
"value": "xunyou_speedup"
},
{
"code": "200281",
"value": "msn"
},
{
"code": "200282",
"value": "popo"
},
{
"code": "200283",
"value": "sinauc"
},
{
"code": "200284",
"value": "qqbattle"
},
{
"code": "200285",
"value": "quake"
},
{
"code": "200286",
"value": "xbox"
},
{
"code": "200287",
"value": "wow"
},
{
"code": "200288",
"value": "lol"
},
{
"code": "200289",
"value": "PostgreSQL"
},
{
"code": "200290",
"value": "TDS"
},
{
"code": "200291",
"value": "VMware"
},
{
"code": "200292",
"value": "Kontiki"
},
{
"code": "200293",
"value": "OpenFT"
},
{
"code": "200294",
"value": "Gnutella"
},
{
"code": "200295",
"value": "eDonkey"
},
{
"code": "200296",
"value": "AVI"
},
{
"code": "200297",
"value": "RealMedia"
},
{
"code": "200298",
"value": "Windowsmedia"
},
{
"code": "200299",
"value": "MOVE"
},
{
"code": "200300",
"value": "Feidian"
},
{
"code": "200301",
"value": "Zattoo"
},
{
"code": "200302",
"value": "SHOUTCast"
},
{
"code": "200303",
"value": "TVUplayer"
},
{
"code": "200304",
"value": "VeohTV"
},
{
"code": "200305",
"value": "Soulseek"
},
{
"code": "200306",
"value": "GaduGadu"
},
{
"code": "200307",
"value": "Oscar"
},
{
"code": "200308",
"value": "Yahoo"
},
{
"code": "200309",
"value": "Battlefield"
},
{
"code": "200310",
"value": "Halflife2"
},
{
"code": "200311",
"value": "World of Warcraft"
},
{
"code": "200312",
"value": "USENET"
},
{
"code": "200313",
"value": "AFP"
},
{
"code": "200314",
"value": "Truphone"
},
{
"code": "200315",
"value": "Armagetron"
},
{
"code": "200316",
"value": "CrossFire"
},
{
"code": "200317",
"value": "Dofus"
},
{
"code": "200318",
"value": "Fiesta"
},
{
"code": "200319",
"value": "Florensia"
},
{
"code": "200320",
"value": "Guildwars"
},
{
"code": "200321",
"value": "HTTP Application Activesync"
},
{
"code": "200322",
"value": "MapleStory"
},
{
"code": "200323",
"value": "msSQL"
},
{
"code": "200324",
"value": "WARCRAFT3"
},
{
"code": "200325",
"value": "World of Kung Fu"
},
{
"code": "200326",
"value": "MEEBO"
},
{
"code": "200327",
"value": "DropBox"
},
{
"code": "200328",
"value": "HTTP Proxy"
},
{
"code": "200329",
"value": "Netflix"
},
{
"code": "200330",
"value": "CitrixOnline/GotoMeeting"
},
{
"code": "200331",
"value": "Webex"
},
{
"code": "200332",
"value": "Apple iCloud"
},
{
"code": "200333",
"value": "Apple iTunes"
},
{
"code": "200334",
"value": "WindowsUpdate"
},
{
"code": "200335",
"value": "Tuenti"
},
{
"code": "200336",
"value": "LotusNotes"
},
{
"code": "200337",
"value": "RemoteScan"
},
{
"code": "200338",
"value": "Spotify"
},
{
"code": "200339",
"value": "CiscoVPN"
},
{
"code": "200340",
"value": "TeamSpeak"
},
{
"code": "200341",
"value": "UbuntuONE"
},
{
"code": "200342",
"value": "CNN"
},
{
"code": "200343",
"value": "Wikipedia"
},
{
"code": "200344",
"value": "Collectd"
},
{
"code": "200345",
"value": "Redis"
},
{
"code": "200346",
"value": "ZeroMQ"
},
{
"code": "200347",
"value": "Stracraft"
},
{
"code": "200348",
"value": "Simet"
},
{
"code": "200349",
"value": "OpenSignal"
},
{
"code": "200350",
"value": "99Taxi"
},
{
"code": "200351",
"value": "GloboTV"
},
{
"code": "200352",
"value": "Deezer"
},
{
"code": "200353",
"value": "Microsoft cloud services"
},
{
"code": "200354",
"value": "Twitch"
},
{
"code": "200355",
"value": "KakaoTalk Voice and Chat"
},
{
"code": "200357",
"value": "360.cn"
},
{
"code": "200358",
"value": "360Safeguard_P2P"
},
{
"code": "200359",
"value": "4D"
},
{
"code": "200360",
"value": "acercloud"
},
{
"code": "200361",
"value": "acestream"
},
{
"code": "200362",
"value": "airdroid"
},
{
"code": "200363",
"value": "airmedia"
},
{
"code": "200364",
"value": "akamai"
},
{
"code": "200365",
"value": "akamai_transfer"
},
{
"code": "200366",
"value": "amanda"
},
{
"code": "200367",
"value": "amp"
},
{
"code": "200368",
"value": "Appear.in"
},
{
"code": "200369",
"value": "ares"
},
{
"code": "200370",
"value": "ARKSurvivalEvolved"
},
{
"code": "200371",
"value": "ARMA3Server"
},
{
"code": "200372",
"value": "ARMA2Server"
},
{
"code": "200373",
"value": "AvastSecureDNS"
},
{
"code": "200374",
"value": "azureus"
},
{
"code": "200375",
"value": "backweb"
},
{
"code": "200376",
"value": "BadBaidu"
},
{
"code": "200377",
"value": "baofeng"
},
{
"code": "200378",
"value": "bitext"
},
{
"code": "200379",
"value": "BlackDesertOnline"
},
{
"code": "200380",
"value": "Blizzard"
},
{
"code": "200381",
"value": "bmdp"
},
{
"code": "200382",
"value": "bncs"
},
{
"code": "200383",
"value": "btdht"
},
{
"code": "200384",
"value": "btsync"
},
{
"code": "200385",
"value": "cacaoweb"
},
{
"code": "200386",
"value": "chatango"
},
{
"code": "200387",
"value": "chivalry"
},
{
"code": "200388",
"value": "cirn"
},
{
"code": "200389",
"value": "cisco_sslvpn"
},
{
"code": "200390",
"value": "clash_of_clans"
},
{
"code": "200391",
"value": "Clubbox"
},
{
"code": "200392",
"value": "cod"
},
{
"code": "200393",
"value": "cod_waw"
},
{
"code": "200394",
"value": "combatarms"
},
{
"code": "200395",
"value": "combatarms_p2p"
},
{
"code": "200396",
"value": "ConquerOnline"
},
{
"code": "200397",
"value": "Counterstrike1.6"
},
{
"code": "200398",
"value": "Checkpoint_RDP"
},
{
"code": "200399",
"value": "crashplan"
},
{
"code": "200400",
"value": "crossout"
},
{
"code": "200401",
"value": "cryptic"
},
{
"code": "200402",
"value": "cvs"
},
{
"code": "200403",
"value": "dash"
},
{
"code": "200404",
"value": "dc"
},
{
"code": "200405",
"value": "db2"
},
{
"code": "200406",
"value": "dell_backup"
},
{
"code": "200407",
"value": "Demonware"
},
{
"code": "200408",
"value": "destiny"
},
{
"code": "200409",
"value": "diablo2"
},
{
"code": "200410",
"value": "isakmp"
},
{
"code": "200411",
"value": "jedi"
},
{
"code": "200412",
"value": "jedi_academy"
},
{
"code": "200413",
"value": "jx3online"
},
{
"code": "200414",
"value": "kankan"
},
{
"code": "200415",
"value": "kaseya"
},
{
"code": "200416",
"value": "kazaa"
},
{
"code": "200417",
"value": "kuaibo"
},
{
"code": "200418",
"value": "lifeforge"
},
{
"code": "200419",
"value": "linkproof"
},
{
"code": "200420",
"value": "litecoin"
},
{
"code": "200421",
"value": "maxicloud"
},
{
"code": "200422",
"value": "merakicloud"
},
{
"code": "200423",
"value": "minecraft"
},
{
"code": "200424",
"value": "mongo"
},
{
"code": "200425",
"value": "msoffice_mac"
},
{
"code": "200426",
"value": "munin"
},
{
"code": "200427",
"value": "mzinga"
},
{
"code": "200428",
"value": "n2ping"
},
{
"code": "200429",
"value": "ncsoft"
},
{
"code": "200430",
"value": "netcat_cctv"
},
{
"code": "200431",
"value": "neverwinter"
},
{
"code": "200432",
"value": "newerth"
},
{
"code": "200433",
"value": "nintendo"
},
{
"code": "200434",
"value": "nntps"
},
{
"code": "200435",
"value": "noction"
},
{
"code": "200436",
"value": "noe"
},
{
"code": "200437",
"value": "norton_backup"
},
{
"code": "200438",
"value": "omegle"
},
{
"code": "200439",
"value": "opaserv"
},
{
"code": "200440",
"value": "orbit"
},
{
"code": "200441",
"value": "ourworld"
},
{
"code": "200442",
"value": "overwatch"
},
{
"code": "200443",
"value": "diablo3"
},
{
"code": "200444",
"value": "dianping"
},
{
"code": "200445",
"value": "dianshijia"
},
{
"code": "200446",
"value": "discord"
},
{
"code": "200447",
"value": "dogecoin"
},
{
"code": "200448",
"value": "dota2"
},
{
"code": "200449",
"value": "douyu_chat"
},
{
"code": "200450",
"value": "doyo"
},
{
"code": "200451",
"value": "driveshare"
},
{
"code": "200452",
"value": "dtls"
},
{
"code": "200453",
"value": "dueling_network"
},
{
"code": "200454",
"value": "dvrns"
},
{
"code": "200455",
"value": "dxp"
},
{
"code": "200456",
"value": "ea_games"
},
{
"code": "200457",
"value": "epson"
},
{
"code": "200458",
"value": "eso"
},
{
"code": "200459",
"value": "etrust"
},
{
"code": "200460",
"value": "fasp"
},
{
"code": "200461",
"value": "finalfantasy_xiv"
},
{
"code": "200462",
"value": "flash"
},
{
"code": "200463",
"value": "fliggy"
},
{
"code": "200464",
"value": "fortinet"
},
{
"code": "200465",
"value": "foscam"
},
{
"code": "200466",
"value": "freechal"
},
{
"code": "200467",
"value": "fring"
},
{
"code": "200468",
"value": "fuckcoin"
},
{
"code": "200469",
"value": "gamespy"
},
{
"code": "200470",
"value": "gangsofspace"
},
{
"code": "200471",
"value": "garena"
},
{
"code": "200472",
"value": "gearsofwar"
},
{
"code": "200473",
"value": "giop"
},
{
"code": "200474",
"value": "git"
},
{
"code": "200475",
"value": "glupteba"
},
{
"code": "200476",
"value": "gnutella2"
},
{
"code": "200477",
"value": "gokuchat"
},
{
"code": "200478",
"value": "google_hangouts"
},
{
"code": "200479",
"value": "gotomeeting"
},
{
"code": "200480",
"value": "gprs_tunnel"
},
{
"code": "200481",
"value": "graal_online_era"
},
{
"code": "200482",
"value": "gsm"
},
{
"code": "200483",
"value": "h1z1"
},
{
"code": "200484",
"value": "halo_online"
},
{
"code": "200485",
"value": "hamachi"
},
{
"code": "200486",
"value": "harveys"
},
{
"code": "200487",
"value": "hearthstone"
},
{
"code": "200488",
"value": "heroes_generals"
},
{
"code": "200489",
"value": "hots"
},
{
"code": "200490",
"value": "icp"
},
{
"code": "200491",
"value": "icq"
},
{
"code": "200492",
"value": "id"
},
{
"code": "200493",
"value": "idrive_sync"
},
{
"code": "200494",
"value": "ipmsg"
},
{
"code": "200495",
"value": "ipop"
},
{
"code": "200496",
"value": "ipsharkk"
},
{
"code": "200497",
"value": "palringo"
},
{
"code": "200498",
"value": "paltalk"
},
{
"code": "200499",
"value": "pando"
},
{
"code": "200500",
"value": "panipani"
},
{
"code": "200501",
"value": "pdbox"
},
{
"code": "200502",
"value": "planetside2"
},
{
"code": "200503",
"value": "portmap_rpc"
},
{
"code": "200504",
"value": "ps4_remoteplay"
},
{
"code": "200505",
"value": "psn"
},
{
"code": "200506",
"value": "psn_store"
},
{
"code": "200507",
"value": "punkbuster"
},
{
"code": "200508",
"value": "pyzor"
},
{
"code": "200509",
"value": "qcloud_ilvb"
},
{
"code": "200510",
"value": "qqpcmgr"
},
{
"code": "200511",
"value": "ramsey_dash"
},
{
"code": "200512",
"value": "razor"
},
{
"code": "200513",
"value": "rbls"
},
{
"code": "200514",
"value": "realvnc"
},
{
"code": "200515",
"value": "relay"
},
{
"code": "200516",
"value": "revolver_nblbt"
},
{
"code": "200517",
"value": "rising_storm"
},
{
"code": "200518",
"value": "roblox"
},
{
"code": "200519",
"value": "robocraft"
},
{
"code": "200520",
"value": "rpc_scan"
},
{
"code": "200521",
"value": "runescape"
},
{
"code": "200522",
"value": "sanandreas"
},
{
"code": "200523",
"value": "saprouter"
},
{
"code": "200524",
"value": "secondlife"
},
{
"code": "200525",
"value": "serialnumberd"
},
{
"code": "200526",
"value": "silkroadonline"
},
{
"code": "200527",
"value": "smite"
},
{
"code": "200528",
"value": "snapvpn"
},
{
"code": "200529",
"value": "spamfighter"
},
{
"code": "200530",
"value": "speedin"
},
{
"code": "200531",
"value": "speedtest"
},
{
"code": "200532",
"value": "spotify_broadcast"
},
{
"code": "200533",
"value": "sqlexp"
},
{
"code": "200534",
"value": "starcitizen"
},
{
"code": "200535",
"value": "starcraft"
},
{
"code": "200536",
"value": "starleaf"
},
{
"code": "200537",
"value": "steam_friends"
},
{
"code": "200538",
"value": "storm_worm"
},
{
"code": "200539",
"value": "stratum"
},
{
"code": "200540",
"value": "supl"
},
{
"code": "200541",
"value": "svn"
},
{
"code": "200542",
"value": "talesrunner"
},
{
"code": "200543",
"value": "tankix"
},
{
"code": "200544",
"value": "telecomkey"
},
{
"code": "200545",
"value": "telnet_exploit"
},
{
"code": "200546",
"value": "tencent_games"
},
{
"code": "200547",
"value": "tenfivecoin"
},
{
"code": "200548",
"value": "tensafe"
},
{
"code": "200549",
"value": "tera"
},
{
"code": "200550",
"value": "tetrisonline"
},
{
"code": "200551",
"value": "thq"
},
{
"code": "200552",
"value": "tip"
},
{
"code": "200553",
"value": "torchlight2"
},
{
"code": "200554",
"value": "traceroute"
},
{
"code": "200555",
"value": "trackmania"
},
{
"code": "200556",
"value": "tremulous"
},
{
"code": "200557",
"value": "trion"
},
{
"code": "200558",
"value": "trojan_zeroaccess"
},
{
"code": "200559",
"value": "twitcasting"
},
{
"code": "200560",
"value": "twitch_irc"
},
{
"code": "200561",
"value": "ubisoft_games"
},
{
"code": "200562",
"value": "umeye"
},
{
"code": "200563",
"value": "vainglory"
},
{
"code": "200564",
"value": "ventrilo"
},
{
"code": "200565",
"value": "vivox"
},
{
"code": "200566",
"value": "vodlocker"
},
{
"code": "200567",
"value": "vpnrobot"
},
{
"code": "200568",
"value": "vpn_unlimited"
},
{
"code": "200569",
"value": "vxworks_exploit"
},
{
"code": "200570",
"value": "warthunder"
},
{
"code": "200571",
"value": "weblogic"
},
{
"code": "200572",
"value": "web_junk"
},
{
"code": "200573",
"value": "weiqi"
},
{
"code": "200574",
"value": "win_message"
},
{
"code": "200575",
"value": "wizard101"
},
{
"code": "200576",
"value": "wns"
},
{
"code": "200577",
"value": "wolf_et"
},
{
"code": "200578",
"value": "worm_22105"
},
{
"code": "200579",
"value": "wuala"
},
{
"code": "200580",
"value": "xfire_p2p"
},
{
"code": "200581",
"value": "xiami"
},
{
"code": "200582",
"value": "xunlei"
},
{
"code": "200583",
"value": "xunlei_accel"
},
{
"code": "200584",
"value": "xunlei_jsq"
},
{
"code": "200585",
"value": "xunyou"
},
{
"code": "200586",
"value": "xymon"
},
{
"code": "200587",
"value": "yahoo_error"
},
{
"code": "200588",
"value": "yahoo_games"
},
{
"code": "200589",
"value": "yahoo_webcam"
},
{
"code": "200590",
"value": "zabbix"
},
{
"code": "200591",
"value": "zeroaccess"
},
{
"code": "200592",
"value": "zoom"
},
{
"code": "200593",
"value": "zynga"
},
{
"code": "200594",
"value": "ICMP_Flood"
},
{
"code": "200595",
"value": "IPFRAG_Flood"
},
{
"code": "200596",
"value": "SYN_Flood"
},
{
"code": "200597",
"value": "ACK_Flood"
},
{
"code": "200598",
"value": "RST_Flood"
},
{
"code": "200599",
"value": "DNS_Flood"
},
{
"code": "200600",
"value": "NTP_Flood"
},
{
"code": "200601",
"value": "UDP_Flood"
},
{
"code": "200602",
"value": "HTTP_Flood"
},
{
"code": "200603",
"value": "SSDP_Flood"
},
{
"code": "200604",
"value": "baiduP2P"
},
{
"code": "200605",
"value": "CSGlobalOffensive"
},
{
"code": "200606",
"value": "AllSeeingEye"
},
{
"code": "200607",
"value": "Bittorrent_Extension"
},
{
"code": "200608",
"value": "BitTorrentSync"
},
{
"code": "200609",
"value": "Call_of_Duty"
},
{
"code": "200612",
"value": "CitrixICA"
},
{
"code": "200613",
"value": "Citrix_Jedi"
},
{
"code": "200614",
"value": "ClashOfClans"
},
{
"code": "200615",
"value": "Canon_BJNP"
},
{
"code": "200617",
"value": "DoyoP2P"
},
{
"code": "200618",
"value": "FortiClientSSLVPN"
},
{
"code": "200619",
"value": "GTA_SanAndreas_Multiplayer"
},
{
"code": "200620",
"value": "HalfLife"
},
{
"code": "200621",
"value": "IBM-DB2"
},
{
"code": "200622",
"value": "Flash_Player"
},
{
"code": "200623",
"value": "Kugou"
},
{
"code": "200624",
"value": "LeagueOfLegends"
},
{
"code": "200625",
"value": "GluptebaBackdoor"
},
{
"code": "200626",
"value": "MedalOfHonor"
},
{
"code": "200628",
"value": "MultiTheftAuto"
},
{
"code": "200631",
"value": "NetcoreScan"
},
{
"code": "200632",
"value": "NeverwinterNights"
},
{
"code": "200633",
"value": "NoctionIRP"
},
{
"code": "200634",
"value": "JavaObjectSerialised"
},
{
"code": "200635",
"value": "RealPlayer"
},
{
"code": "200636",
"value": "TeamFortress2"
},
{
"code": "200637",
"value": "TheCrew"
},
{
"code": "200638",
"value": "TurboVPN"
},
{
"code": "200639",
"value": "MSN_Voice"
},
{
"code": "200640",
"value": "MaplestoryChina"
},
{
"code": "200641",
"value": "Message4U"
},
{
"code": "200642",
"value": "MongoDB"
},
{
"code": "200643",
"value": "NDTThroughput"
},
{
"code": "200644",
"value": "NET-MFP"
},
{
"code": "200645",
"value": "WindowsMessenger"
},
{
"code": "200646",
"value": "WolfensteinEnemyTerritory"
},
{
"code": "200647",
"value": "XboxLive"
},
{
"code": "200649",
"value": "RBL"
},
{
"code": "200650",
"value": "RPC_Exploit"
},
{
"code": "200651",
"value": "Rejection"
},
{
"code": "200655",
"value": "Silverplatter_DXP"
},
{
"code": "200659",
"value": "TencentWNS"
},
{
"code": "200660",
"value": "TrionGames"
},
{
"code": "200661",
"value": "Trojan.Win32.Generic!SB"
},
{
"code": "200666",
"value": "WorldOfWarcraft"
},
{
"code": "200667",
"value": "YY"
},
{
"code": "200669",
"value": "nopayload"
},
{
"code": "200670",
"value": "No_FirstPkt"
},
{
"code": "200671",
"value": "Invalid"
}
],
"visibility": "disabled"
},
"label": "Application ID"
},
{
"name": "common_protocol_id",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "NOT SPECIFIED"
},
{
"code": "10000",
"value": "NOT SPECIFIED"
},
{
"code": "10001",
"value": "TCP"
},
{
"code": "10002",
"value": "UDP"
},
{
"code": "10003",
"value": "DNS"
},
{
"code": "10004",
"value": "FTP"
},
{
"code": "10005",
"value": "FTPS"
},
{
"code": "10006",
"value": "GRE"
},
{
"code": "10007",
"value": "HTTP"
},
{
"code": "10008",
"value": "HTTPS"
},
{
"code": "10009",
"value": "ICMP"
},
{
"code": "10010",
"value": "IKE"
},
{
"code": "10011",
"value": "IMAP"
},
{
"code": "10012",
"value": "IMAPS"
},
{
"code": "10013",
"value": "IPSEC"
},
{
"code": "10014",
"value": "XMPP"
},
{
"code": "10015",
"value": "L2TP"
},
{
"code": "10016",
"value": "NTP"
},
{
"code": "10017",
"value": "POP3"
},
{
"code": "10018",
"value": "POP3 SSL"
},
{
"code": "10019",
"value": "PPTP"
},
{
"code": "10020",
"value": "Quic"
},
{
"code": "10021",
"value": "SIP"
},
{
"code": "10022",
"value": "smb"
},
{
"code": "10023",
"value": "SMTP"
},
{
"code": "10024",
"value": "SMTPS"
},
{
"code": "10025",
"value": "SPDY"
},
{
"code": "10028",
"value": "SSH"
},
{
"code": "10029",
"value": "SSL"
},
{
"code": "10030",
"value": "SOCKS"
},
{
"code": "10031",
"value": "BITTORRENT"
},
{
"code": "10032",
"value": "RTSP"
},
{
"code": "10033",
"value": "TELNET"
},
{
"code": "10034",
"value": "UTP"
},
{
"code": "10035",
"value": "FASTTRACK"
},
{
"code": "10036",
"value": "SKINNY"
},
{
"code": "10037",
"value": "IAX"
},
{
"code": "10038",
"value": "MGCP"
},
{
"code": "10039",
"value": "RTCP"
},
{
"code": "10040",
"value": "RTP"
},
{
"code": "10041",
"value": "VNC"
},
{
"code": "10042",
"value": "XDMCP"
},
{
"code": "10043",
"value": "RDP"
},
{
"code": "10044",
"value": "AIMINI"
},
{
"code": "10045",
"value": "IPP"
},
{
"code": "10046",
"value": "NFS"
},
{
"code": "10047",
"value": "TFTP"
},
{
"code": "10048",
"value": "BGP"
},
{
"code": "10049",
"value": "DHCP"
},
{
"code": "10050",
"value": "DHCPV6"
},
{
"code": "10051",
"value": "FINGER"
},
{
"code": "10052",
"value": "KERBEROS"
},
{
"code": "10053",
"value": "LDAP"
},
{
"code": "10054",
"value": "MDNS"
},
{
"code": "10055",
"value": "NNTP"
},
{
"code": "10056",
"value": "SNMP"
},
{
"code": "10057",
"value": "SSDP"
},
{
"code": "10058",
"value": "SYSLOG"
},
{
"code": "10059",
"value": "WHOIS"
},
{
"code": "10060",
"value": "RADIUS"
},
{
"code": "10061",
"value": "OPENVPN"
},
{
"code": "10062",
"value": "STUN"
},
{
"code": "10063",
"value": "TEREDO"
},
{
"code": "10064",
"value": "GTP"
},
{
"code": "10065",
"value": "RTMP"
},
{
"code": "10066",
"value": "chargen_tcp_udp"
},
{
"code": "10067",
"value": "llmnr_udp"
},
{
"code": "10068",
"value": "nbns_udp"
},
{
"code": "10069",
"value": "NETBIOS"
},
{
"code": "10070",
"value": "DirectDownloadLink"
},
{
"code": "10071",
"value": "I23V5"
},
{
"code": "10072",
"value": "DirectConnect"
},
{
"code": "10073",
"value": "OFF"
},
{
"code": "10074",
"value": "OGG"
},
{
"code": "10075",
"value": "MPEG"
},
{
"code": "10076",
"value": "IRC"
},
{
"code": "10077",
"value": "Jabber"
},
{
"code": "10078",
"value": "VRRP"
},
{
"code": "10079",
"value": "IGMP"
},
{
"code": "10080",
"value": "EGP"
},
{
"code": "10081",
"value": "SCTP"
},
{
"code": "10082",
"value": "OSPF"
},
{
"code": "10083",
"value": "IP in IP"
},
{
"code": "10084",
"value": "ICMPv6"
},
{
"code": "10085",
"value": "DCE RPC"
},
{
"code": "10086",
"value": "NetFlow_IPFIX"
},
{
"code": "10087",
"value": "sFlow"
},
{
"code": "10088",
"value": "HTTP Connect (SSL over HTTP)"
},
{
"code": "10089",
"value": "SAP"
},
{
"code": "10090",
"value": "UPnP"
},
{
"code": "10091",
"value": "H323"
},
{
"code": "10092",
"value": "Megaco"
},
{
"code": "10094",
"value": "bacnet"
},
{
"code": "10096",
"value": "bjnp"
},
{
"code": "10097",
"value": "cgp"
},
{
"code": "10098",
"value": "dahua"
},
{
"code": "10099",
"value": "dcc"
},
{
"code": "10100",
"value": "kademlia"
},
{
"code": "10101",
"value": "lansync"
},
{
"code": "10102",
"value": "ldap_ad"
},
{
"code": "10103",
"value": "llp2p"
},
{
"code": "10104",
"value": "mfnp"
},
{
"code": "10105",
"value": "mp2p"
},
{
"code": "10106",
"value": "msn_cache"
},
{
"code": "10107",
"value": "msn_video"
},
{
"code": "10108",
"value": "msnc"
},
{
"code": "10109",
"value": "netflow"
},
{
"code": "10110",
"value": "notes_rpc"
},
{
"code": "10111",
"value": "esp"
},
{
"code": "10112",
"value": "fbcdn_ssl"
},
{
"code": "10113",
"value": "forticlient_sslvpn"
},
{
"code": "10114",
"value": "rfb"
},
{
"code": "10115",
"value": "rtmfp"
},
{
"code": "10117",
"value": "slp"
},
{
"code": "10118",
"value": "steam_inhomebroadcast"
},
{
"code": "10119",
"value": "steam_localbroadcast"
},
{
"code": "10120",
"value": "tpkt"
},
{
"code": "10121",
"value": "xmpps"
},
{
"code": "10122",
"value": "S7COMM"
},
{
"code": "10123",
"value": "CitrixCGP"
},
{
"code": "10124",
"value": "ID_Protocol"
},
{
"code": "10125",
"value": "SMTP_Secure"
},
{
"code": "10126",
"value": "NAT-PMP"
}
],
"visibility": "disabled"
},
"label": "Protocol ID"
},
{
"name": "common_start_time",
"type": "int",
"doc": {
"constraints": {
"type": "timestamp"
},
"visibility": "hidden"
},
"label": "Start Time"
},
{
"name": "common_end_time",
"type": "int",
"doc": {
"constraints": {
"type": "timestamp"
},
"visibility": "hidden"
},
"label": "End Time"
},
{
"name": "common_establish_latency_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Establish Latency(ms)"
},
{
"name": "common_con_duration_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Duration(ms)"
},
{
"name": "common_stream_dir",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "c2s"
},
{
"code": "2",
"value": "s2c"
},
{
"code": "3",
"value": "double"
}
]
},
"label": "Stream Direction"
},
{
"name": "common_address_list",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Address List"
},
{
"name": "common_has_dup_traffic",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "No"
},
{
"code": "1",
"value": "Yes"
}
],
"visibility": "hidden"
},
"label": "Duplication Traffic"
},
{
"name": "common_stream_error",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Stream Error"
},
{
"name": "common_stream_trace_id",
"type": "long",
"doc": {
"allow_query": "true"
},
"label": "Session ID"
},
{
"name": "http_url",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "URL"
},
{
"name": "http_host",
"type": "string",
"doc": {
"format": {
"functions": "sub_domain",
"appendTo": "http_domain"
}
},
"label": "Host"
},
{
"name": "http_domain",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "Domain"
},
{
"name": "http_request_line",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Request Line"
},
{
"name": "http_response_line",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Response Line"
},
{
"name": "http_request_header",
"type": "string",
"label": "Request Headers"
},
{
"name": "http_response_header",
"type": "string",
"label": "Response Headers"
},
{
"name": "http_request_body",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "Request Body"
},
{
"name": "http_response_body",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "Response Body"
},
{
"name": "http_request_body_key",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Request Body Key"
},
{
"name": "http_response_body_key",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Response Body Key"
},
{
"name": "http_proxy_flag",
"type": "int",
"label": "Proxy Flag"
},
{
"name": "http_sequence",
"type": "int",
"label": "Sequence"
},
{
"name": "http_snapshot",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Http Snapshot"
},
{
"name": "http_cookie",
"type": "string",
"label": "Cookie"
},
{
"name": "http_referer",
"type": "string",
"label": "Referer"
},
{
"name": "http_user_agent",
"type": "string",
"label": "User Agent"
},
{
"name": "http_content_length",
"type": "string",
"label": "Content Length"
},
{
"name": "http_content_type",
"type": "string",
"label": "Content Type"
},
{
"name": "http_set_cookie",
"type": "string",
"label": "Set Cookie"
},
{
"name": "http_version",
"type": "string",
"label": "Version"
},
{
"name": "http_response_lantency_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Response Latency(ms)"
},
{
"name": "http_session_duration_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Session Duration(ms)"
},
{
"name": "mail_protocol_type",
"type": "string",
"label": "Protocol Type"
},
{
"name": "mail_account",
"type": "string",
"label": "Account"
},
{
"name": "mail_from_cmd",
"type": "string",
"label": "From CMD"
},
{
"name": "mail_to_cmd",
"type": "string",
"label": "To CMD"
},
{
"name": "mail_from",
"type": "string",
"doc": {
"constraints": {
"type": "email"
}
},
"label": "From"
},
{
"name": "mail_to",
"type": "string",
"doc": {
"constraints": {
"type": "email"
}
},
"label": "To"
},
{
"name": "mail_cc",
"type": "string",
"label": "CC"
},
{
"name": "mail_bcc",
"type": "string",
"label": "BCC"
},
{
"name": "mail_subject",
"type": "string",
"doc": {
"format": {
"functions": "decode_of_base64",
"param": "mail_subject_charset"
}
},
"label": "Subject"
},
{
"name": "mail_subject_charset",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Subject Charset"
},
{
"name": "mail_content",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Content"
},
{
"name": "mail_content_charset",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Content Charset"
},
{
"name": "mail_attachment_name",
"type": "string",
"doc": {
"format": {
"functions": "decode_of_base64",
"param": "mail_attachment_name_charset"
}
},
"label": "Attachment"
},
{
"name": "mail_attachment_name_charset",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Attachment Charset"
},
{
"name": "mail_attachment_content",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Attachment Content"
},
{
"name": "mail_eml_file",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "EML File"
},
{
"name": "mail_snapshot",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Snapshot"
},
{
"name": "dns_message_id",
"type": "int",
"label": "Message ID"
},
{
"name": "dns_qr",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "QUERY"
},
{
"code": "1",
"value": "REESPONSE"
}
]
},
"label": "QR"
},
{
"name": "dns_opcode",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "QUERY"
},
{
"code": "1",
"value": "IQUERY"
},
{
"code": "2",
"value": "STATUS"
},
{
"code": "5",
"value": "UPDATE"
}
]
},
"label": "OPCODE"
},
{
"name": "dns_aa",
"type": "int",
"label": "AA"
},
{
"name": "dns_tc",
"type": "int",
"label": "TC"
},
{
"name": "dns_rd",
"type": "int",
"label": "RD"
},
{
"name": "dns_ra",
"type": "int",
"label": "RA"
},
{
"name": "dns_rcode",
"type": "int",
"label": "RCODE"
},
{
"name": "dns_qdcount",
"type": "int",
"label": "QDCOUNT"
},
{
"name": "dns_ancount",
"type": "int",
"label": "ANCOUNT"
},
{
"name": "dns_nscount",
"type": "int",
"label": "NSCOUNT"
},
{
"name": "dns_arcount",
"type": "int",
"label": "ARCOUNT"
},
{
"name": "dns_qname",
"type": "string",
"label": "QNAME"
},
{
"name": "dns_qtype",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "A"
},
{
"code": "2",
"value": "NS"
},
{
"code": "5",
"value": "CNAME"
},
{
"code": "6",
"value": "SOA"
},
{
"code": "11",
"value": "WKS"
},
{
"code": "12",
"value": "PTR"
},
{
"code": "13",
"value": "HINFO"
},
{
"code": "11",
"value": "WKS"
},
{
"code": "15",
"value": "MX"
},
{
"code": "28",
"value": "AAAA"
}
]
},
"label": "QTYPE"
},
{
"name": "dns_qclass",
"type": "int",
"label": "QCLASS"
},
{
"name": "dns_cname",
"type": "string",
"label": "CNAME"
},
{
"name": "dns_sub",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "DNS"
},
{
"code": "2",
"value": "DNSSEC"
}
]
},
"label": "SUB"
},
{
"name": "dns_rr",
"type": "string",
"label": "RR"
},
{
"name": "ssl_version",
"type": "string",
"label": "Version"
},
{
"name": "ssl_sni",
"type": "string",
"doc": {
"allow_query": "true",
"format": {
"functions": "sub_domain",
"appendTo": "http_domain"
}
},
"label": "SNI"
},
{
"name": "ssl_san",
"type": "string",
"label": "SAN"
},
{
"name": "ssl_cn",
"type": "string",
"label": "CN"
},
{
"name": "ssl_pinningst",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Not Pinning"
},
{
"code": "1",
"value": "Pinning"
},
{
"code": "2",
"value": "Maybe Pinning"
}
]
},
"label": "Pinning"
},
{
"name": "ssl_intercept_state",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Passthrough"
},
{
"code": "1",
"value": "Intercept"
},
{
"code": "2",
"value": "Shutdown"
}
]
},
"label": "Intercept State"
},
{
"name": "ssl_server_side_latency",
"type": "int",
"label": "Server Side Latency(ms)"
},
{
"name": "ssl_client_side_latency",
"type": "int",
"label": "Client Side Latency(ms)"
},
{
"name": "ssl_server_side_version",
"type": "string",
"label": "Server Side Version"
},
{
"name": "ssl_client_side_version",
"type": "string",
"label": "Client Side Version"
},
{
"name": "ssl_cert_verify",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "No"
},
{
"code": "1",
"value": "Yes"
}
]
},
"label": "Certificate Verify"
},
{
"name": "ssl_error",
"type": "string",
"label": "Error"
},
{
"name": "ssl_con_latency_ms",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Connection Latency(ms)"
},
{
"name": "ftp_account",
"type": "string",
"label": "Account"
},
{
"name": "ftp_url",
"type": "string",
"label": "URL"
},
{
"name": "ftp_content",
"type": "string",
"label": "Content"
},
{
"name": "bgp_type",
"type": "int",
"label": "Type"
},
{
"name": "bgp_as_num",
"type": "string",
"label": "AS Number"
},
{
"name": "bgp_route",
"type": "string",
"label": "Route"
},
{
"name": "voip_calling_account",
"type": "string",
"label": "Calling Account"
},
{
"name": "voip_called_account",
"type": "string",
"label": "Called Account"
},
{
"name": "voip_calling_number",
"type": "string",
"label": "Calling Number"
},
{
"name": "voip_called_number",
"type": "string",
"label": "Called Number"
},
{
"name": "streaming_media_url",
"type": "string",
"label": "Media URL"
},
{
"name": "streaming_media_protocol",
"type": "string",
"label": "Media Protocol"
}
]
}
},
"required": [
"doc",
"fields"
]
},
"msg": {
"type": "string",
"default": "Success"
},
"success": {
"type": "boolean",
"default": true
}
},
"required": [
"code",
"data",
"msg",
"success"
]
}</msg>
<status status="PASS" starttime="20200401 12:21:50.934" endtime="20200401 12:21:51.048"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.048" endtime="20200401 12:21:51.077"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${LogSchemaResponse.body['data']}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.079" level="INFO">{'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'common_server_location', 'common_subscriber_id', 'http_domain'], 'metrics': ['common_server_ip', 'common_client_ip', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num'], 'filters': ['common_policy_id', 'common_action', 'common_address_type', 'common_server_ip', 'common_client_ip', 'common_server_port', 'common_server_location', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'http_domain', 'http_content_type', 'ssl_sni', 'ssl_pinningst', 'ssl_intercept_state']}, 'schema_type': {'BASE': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port']}, 'HTTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'http_url', 'http_host', 'http_domain', 'http_request_line', 'http_response_line', 'http_request_header', 'http_response_header', 'http_request_body', 'http_response_body', 'http_request_body_key', 'http_response_body_key', 'http_proxy_flag', 'http_sequence', 'http_snapshot', 'http_cookie', 'http_referer', 'http_user_agent', 'http_content_length', 'http_content_type', 'http_set_cookie', 'http_version', 'http_response_lantency_ms', 'http_session_duration_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'http_url', 'common_server_port']}, 'MAIL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'mail_protocol_type', 'mail_account', 'mail_from_cmd', 'mail_to_cmd', 'mail_from', 'mail_to', 'mail_cc', 'mail_bcc', 'mail_subject', 'mail_subject_charset', 'mail_content', 'mail_content_charset', 'mail_attachment_name', 'mail_attachment_name_charset', 'mail_attachment_content', 'mail_eml_file', 'mail_snapshot'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'mail_from', 'mail_to', 'mail_subject']}, 'DNS': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'dns_message_id', 'dns_qr', 'dns_opcode', 'dns_aa', 'dns_tc', 'dns_rd', 'dns_ra', 'dns_rcode', 'dns_qdcount', 'dns_ancount', 'dns_nscount', 'dns_arcount', 'dns_qname', 'dns_qtype', 'dns_qclass', 'dns_cname', 'dns_sub', 'dns_rr'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_client_ip', 'dns_qr', 'dns_qname', 'dns_qtype']}, 'SSL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ssl_sni', 'ssl_san', 'ssl_cn', 'ssl_pinningst', 'ssl_intercept_state', 'ssl_server_side_latency', 'ssl_client_side_latency', 'ssl_server_side_version', 'ssl_client_side_version', 'ssl_cert_verify', 'ssl_error', 'ssl_con_latency_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ssl_sni', 'common_server_ip', 'common_server_port']}, 'FTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ftp_account', 'ftp_url', 'ftp_content'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ftp_url', 'common_server_ip', 'common_server_port']}, 'BGP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'bgp_type', 'bgp_as_num', 'bgp_route'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'bgp_type', 'bgp_as_num', 'common_server_ip', 'common_server_port']}, 'VOIP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'voip_calling_account', 'voip_called_account', 'voip_calling_number', 'voip_called_number'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'voip_calling_account', 'voip_called_account', 'common_server_ip', 'common_server_port']}}, 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port', 'common_schema_type']}, 'fields': [{'name': 'common_recv_time', 'type': 'int', 'doc': {'allow_query': 'true', 'constraints': {'type': 'timestamp'}, 'format': {'functions': 'current_timestamp'}}, 'label': 'Receive Time'}, {'name': 'common_log_id', 'type': 'long', 'doc': {'allow_query': 'true', 'format': {'functions': 'snowflake_id'}}, 'label': 'Log ID'}, {'name': 'common_policy_id', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Policy ID'}, {'name': 'common_subscriber_id', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Subscriber ID'}, {'name': 'common_client_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_detail,geo_asn,radius_match', 'appendTo': 'common_client_location,common_client_asn,common_subscriber_id'}}, 'label': 'Client IP'}, {'name': 'common_client_port', 'type': 'int', 'label': 'Client Port'}, {'name': 'common_l4_protocol', 'type': 'string', 'label': 'L4 Protocol'}, {'name': 'common_address_type', 'type': 'int', 'doc': {'data': [{'code': '4', 'value': 'ipv4'}, {'code': '6', 'value': 'ipv6'}]}, 'label': 'Address Type'}, {'name': 'common_server_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_country,geo_asn', 'appendTo': 'common_server_location,common_server_asn'}}, 'label': 'Server IP'}, {'name': 'common_server_port', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Server Port'}, {'name': 'common_action', 'type': 'int', 'doc': {'allow_query': 'true', 'data': [{'code': '0', 'value': 'None'}, {'code': '1', 'value': 'Monitor'}, {'code': '2', 'value': 'Intercept'}, {'code': '16', 'value': 'Deny'}, {'code': '48', 'value': 'Manipulation'}, {'code': '128', 'value': 'Allow'}]}, 'label': 'Action'}, {'name': 'common_direction', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'outbound'}, {'code': '1', 'value': 'inbound'}]}, 'label': 'Direction'}, {'name': 'common_entrance_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Entrance ID'}, {'name': 'common_sled_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}}, 'label': 'Sled IP'}, {'name': 'common_client_location', 'type': 'string', 'label': 'Client Location'}, {'name': 'common_client_asn', 'type': 'string', 'label': 'Client ASN'}, {'name': 'common_server_location', 'type': 'string', 'label': 'Server Location'}, {'name': 'common_server_asn', 'type': 'string', 'label': 'Server ASN'}, {'name': 'common_c2s_pkt_num', 'type': 'int', 'label': 'Packets Sent'}, {'name': 'common_s2c_pkt_num', 'type': 'int', 'label': 'Packets Received'}, {'name': 'common_c2s_byte_num', 'type': 'int', 'label': 'Bytes Sent'}, {'name': 'common_s2c_byte_num', 'type': 'int', 'label': 'Bytes Received'}, {'name': 'common_service', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Service'}, {'name': 'common_schema_type', 'type': 'string', 'doc': {'data': [{'code': 'BASE', 'value': 'BASE'}, {'code': 'HTTP', 'value': 'HTTP'}, {'code': 'MAIL', 'value': 'MAIL'}, {'code': 'DNS', 'value': 'DNS'}, {'code': 'SSL', 'value': 'SSL'}, {'code': 'FTP', 'value': 'FTP'}, {'code': 'BGP', 'value': 'BGP'}, {'code': 'VOIP', 'value': 'VOIP'}, {'code': 'RADIUS', 'value': 'RADIUS'}], 'allow_query': 'true'}, 'label': 'Schema Type'}, {'name': 'common_user_tags', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'User Tags'}, {'name': 'common_sub_action', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Sub Action'}, {'name': 'common_user_region', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'User Region'}, {'name': 'common_device_id', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Device ID'}, {'name': 'common_link_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Link ID'}, {'name': 'common_isp', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'ISP'}, {'name': 'common_encapsulation', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Ethernet'}, {'code': '8', 'value': 'PPP'}, {'code': '12', 'value': 'CiscoHDLC'}]}, 'label': 'Encapsulation'}, {'name': 'common_app_label', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Application Label'}, {'name': 'common_app_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '100001', 'value': 'Skype'}, {'code': '100101', 'value': 'Instagram'}, {'code': '100201', 'value': 'Youtube'}, {'code': '100301', 'value': 'Facebook'}, {'code': '100401', 'value': 'What‘s App'}, {'code': '100501', 'value': 'Periscope'}, {'code': '100601', 'value': 'Viber'}, {'code': '100701', 'value': 'Twitter'}, {'code': '100801', 'value': 'Vkontakte'}, {'code': '100901', 'value': 'Telegram'}, {'code': '101001', 'value': 'Odnoklassniki'}, {'code': '101101', 'value': 'Mail agent'}, {'code': '101201', 'value': 'FaceTime'}, {'code': '101301', 'value': 'Snapchat'}, {'code': '101401', 'value': 'Google'}, {'code': '101501', 'value': 'Yandex'}, {'code': '101601', 'value': 'Yandex Browser Turbo'}, {'code': '101701', 'value': 'Opera'}, {'code': '101702', 'value': 'Opera Turbo'}, {'code': '101703', 'value': 'Opera mini'}, {'code': '101801', 'value': 'AppStore'}, {'code': '101901', 'value': 'PlayMarket'}, {'code': '102001', 'value': 'Drugvokrug social networking'}, {'code': '102101', 'value': 'Badoo social networking'}, {'code': '102201', 'value': 'WeChat'}, {'code': '102301', 'value': 'Zello'}, {'code': '102401', 'value': 'Freegate'}, {'code': '102501', 'value': 'Psiphon'}, {'code': '102601', 'value': 'TOR'}, {'code': '102602', 'value': 'Tor browser'}, {'code': '102603', 'value': 'Tor mode'}, {'code': '102701', 'value': 'Orbot'}, {'code': '102801', 'value': 'Tunnel Bear VPN'}, {'code': '102901', 'value': 'HotSpot Shield VPN'}, {'code': '103001', 'value': 'VPN Master'}, {'code': '103101', 'value': 'Hola VPN'}, {'code': '103201', 'value': 'HideMyAss VPN'}, {'code': '103301', 'value': 'Zenmate VPN'}, {'code': '103401', 'value': 'SignalPrivateMessenger'}, {'code': '200001', 'value': 'RFA'}, {'code': '200002', 'value': 'VOA'}, {'code': '200003', 'value': 'lantern'}, {'code': '200004', 'value': 'Line'}, {'code': '200005', 'value': 'voxer'}, {'code': '200006', 'value': 'ZeroNet'}, {'code': '200007', 'value': 'Zalo'}, {'code': '200008', 'value': 'free_browser'}, {'code': '200009', 'value': 'Diaspora'}, {'code': '200010', 'value': 'browsec'}, {'code': '200011', 'value': 'Chrome_plugin_chuguo'}, {'code': '200012', 'value': 'GoGo_SocksHttp'}, {'code': '200013', 'value': 'ultrasurf_chrome'}, {'code': '200014', 'value': 'pinterest'}, {'code': '200015', 'value': 'Swisscom'}, {'code': '200016', 'value': 'Threema'}, {'code': '200017', 'value': 'Circuit_iOS'}, {'code': '200018', 'value': 'Chrome_plugin_FastsTunnel'}, {'code': '200019', 'value': 'OoVoo'}, {'code': '200020', 'value': 'Vine'}, {'code': '200021', 'value': 'Keek'}, {'code': '200022', 'value': 'Hi'}, {'code': '200023', 'value': 'HeyTell'}, {'code': '200024', 'value': 'HikeMessenger'}, {'code': '200025', 'value': 'Nonoh'}, {'code': '200026', 'value': 'Path'}, {'code': '200027', 'value': 'Kik'}, {'code': '200028', 'value': 'BBM'}, {'code': '200029', 'value': 'Talkray'}, {'code': '200030', 'value': 'HelloTalk'}, {'code': '200031', 'value': 'Skout'}, {'code': '200032', 'value': 'MeetMe'}, {'code': '200033', 'value': 'Nextdoor'}, {'code': '200034', 'value': 'Shots'}, {'code': '200035', 'value': 'Zoosk'}, {'code': '200036', 'value': 'TextPlus'}, {'code': '200037', 'value': 'Maaii'}, {'code': '200038', 'value': 'Ustream'}, {'code': '200039', 'value': 'Yikyak'}, {'code': '200040', 'value': 'chatsecure'}, {'code': '200041', 'value': 'freecalls'}, {'code': '200042', 'value': 'SignalPrivateMessenger'}, {'code': '200043', 'value': 'USGOV_CIA'}, {'code': '200044', 'value': 'USGOV_FBI'}, {'code': '200045', 'value': 'USGOV_DHS'}, {'code': '200046', 'value': 'shenxun_Secure_Call_android'}, {'code': '200047', 'value': 'shenxun_Secure_Call_web'}, {'code': '200048', 'value': 'UProxy'}, {'code': '200049', 'value': 'soma'}, {'code': '200050', 'value': "PlayerUnknown's_Battlegrounds"}, {'code': '200051', 'value': 'STEAM'}, {'code': '200052', 'value': 'dalai_lama'}, {'code': '200053', 'value': 'Steam_forum'}, {'code': '200054', 'value': 'Microsoft Online Certificate'}, {'code': '200055', 'value': 'sogou_spider'}, {'code': '200056', 'value': 'baidu_mobie'}, {'code': '200057', 'value': 'Apple Push Service'}, {'code': '200058', 'value': 'IQIYI'}, {'code': '200059', 'value': 'baidu_spider'}, {'code': '200060', 'value': 'Weibo'}, {'code': '200061', 'value': 'Apple captive service'}, {'code': '200062', 'value': 'Microsoft wns'}, {'code': '200063', 'value': '360_safe_pc'}, {'code': '200064', 'value': 'Sogou Public Service'}, {'code': '200065', 'value': 'Lenovo app_POST service'}, {'code': '200066', 'value': 'Apple securityd service'}, {'code': '200067', 'value': 'Weather pass'}, {'code': '200068', 'value': 'Apple Service Pack'}, {'code': '200069', 'value': 'Fast pressure'}, {'code': '200070', 'value': 'SemrushBot'}, {'code': '200071', 'value': 'Adrefs_spider'}, {'code': '200072', 'value': 'AndroidDownloadManager'}, {'code': '200073', 'value': 'XenderTop'}, {'code': '200074', 'value': 'microsoft_update'}, {'code': '200075', 'value': 'Youku'}, {'code': '200076', 'value': 'Google_spider'}, {'code': '200077', 'value': 'Microsoft User Experience and Telemetry Components'}, {'code': '200078', 'value': 'MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT'}, {'code': '200079', 'value': 'Microsoft ncsi'}, {'code': '200080', 'value': 'Microsoft Privacy Collection Service'}, {'code': '200081', 'value': 'uTorrent'}, {'code': '200082', 'value': 'Edge'}, {'code': '200083', 'value': 'Lenovo Music Store'}, {'code': '200084', 'value': 'LieBao'}, {'code': '200085', 'value': 'majesti_spider'}, {'code': '200086', 'value': 'DotBot'}, {'code': '200087', 'value': 'Millet Update'}, {'code': '200088', 'value': 'Today’s headlines'}, {'code': '200089', 'value': 'Microsoft live'}, {'code': '200090', 'value': 'Microsoft OneNote'}, {'code': '200091', 'value': 'Bing_spider'}, {'code': '200092', 'value': 'Apple location service'}, {'code': '200093', 'value': 'Kuaishou'}, {'code': '200094', 'value': 'LeTV video'}, {'code': '200095', 'value': 'QQ'}, {'code': '200096', 'value': 'Wps'}, {'code': '200097', 'value': 'kugou music'}, {'code': '200098', 'value': 'kuwo music'}, {'code': '200099', 'value': '360_common_service'}, {'code': '200100', 'value': 'Camera360'}, {'code': '200101', 'value': 'Outlook'}, {'code': '200102', 'value': 'zhihu'}, {'code': '200103', 'value': 'Tencent video'}, {'code': '200104', 'value': 'funshion'}, {'code': '200105', 'value': 'QQ shared service'}, {'code': '200106', 'value': 'Microsoft wdcp service'}, {'code': '200107', 'value': 'Microsoft Media_center_pc'}, {'code': '200108', 'value': '360 phone helper'}, {'code': '200109', 'value': 'Kingsoft Public Service'}, {'code': '200110', 'value': 'Ios_wifi connection'}, {'code': '200111', 'value': 'Teamviewer'}, {'code': '200112', 'value': 'Baidu cloud disk'}, {'code': '200113', 'value': 'Tencent News'}, {'code': '200114', 'value': 'Baidu map'}, {'code': '200115', 'value': 'Panda TV'}, {'code': '200116', 'value': 'Thunder'}, {'code': '200117', 'value': 'NetEase cloud music'}, {'code': '200118', 'value': 'QQ music'}, {'code': '200119', 'value': 'Itools'}, {'code': '200120', 'value': 'Jingdong Finance'}, {'code': '200121', 'value': 'PycURL'}, {'code': '200122', 'value': 'Yahoo_Spider'}, {'code': '200123', 'value': 'Himalayan FM'}, {'code': '200124', 'value': 'Youdao_dict'}, {'code': '200125', 'value': 'Microsoft_spynet'}, {'code': '200126', 'value': 'proximicBot'}, {'code': '200127', 'value': 'Foxit_reader'}, {'code': '200128', 'value': 'Sohu Video'}, {'code': '200129', 'value': 'BlueStacks'}, {'code': '200130', 'value': 'Beauty group'}, {'code': '200131', 'value': 'Kmplayer'}, {'code': '200132', 'value': 'TaoBao'}, {'code': '200133', 'value': 'Exabot'}, {'code': '200134', 'value': 'Ubuntu_apt_get'}, {'code': '200135', 'value': 'Oriental Fortune'}, {'code': '200136', 'value': 'JikeSpider'}, {'code': '200137', 'value': 'Itunesstored'}, {'code': '200138', 'value': 'GAD map'}, {'code': '200139', 'value': 'ifeng News'}, {'code': '200140', 'value': 'BoardReaderBot'}, {'code': '200141', 'value': 'AmazonBot'}, {'code': '200142', 'value': 'Alipay'}, {'code': '200143', 'value': 'Alipay security controls'}, {'code': '200144', 'value': '360 security guards (antivirus)'}, {'code': '200145', 'value': '360 logon service'}, {'code': '200146', 'value': 'BLP_bbot'}, {'code': '200147', 'value': 'Keep'}, {'code': '200148', 'value': 'WiFi universal key'}, {'code': '200149', 'value': 'Baidu Music'}, {'code': '200150', 'value': 'Vip.com'}, {'code': '200151', 'value': 'JD.COM'}, {'code': '200152', 'value': 'sina'}, {'code': '200153', 'value': 'youdao Public service'}, {'code': '200154', 'value': 'Jinshan public service'}, {'code': '200155', 'value': 'Baidu guard'}, {'code': '200156', 'value': 'Apple system update service'}, {'code': '200157', 'value': 'momo'}, {'code': '200158', 'value': 'CNZZ statistics'}, {'code': '200159', 'value': 'Microsoft one_drive service'}, {'code': '200160', 'value': 'WindowsStore'}, {'code': '200161', 'value': 'duba'}, {'code': '200162', 'value': 'Baidu HD'}, {'code': '200163', 'value': 'qunar'}, {'code': '200164', 'value': 'qianxunyingshi'}, {'code': '200165', 'value': 'KuaiyanKanShuSpider'}, {'code': '200166', 'value': 'Mail.RU_Bot_Robot'}, {'code': '200167', 'value': 'MpCommunication'}, {'code': '200168', 'value': 'Weather forecast'}, {'code': '200169', 'value': 'Ltx71_spider'}, {'code': '200170', 'value': 'Ia_archiver'}, {'code': '200171', 'value': 'Ali Wangwang'}, {'code': '200172', 'value': 'UC home page (information)'}, {'code': '200173', 'value': 'Yeti'}, {'code': '200174', 'value': 'Rtorrent'}, {'code': '200175', 'value': 'QQPim'}, {'code': '200176', 'value': 'NetEase News'}, {'code': '200177', 'value': 'sina sports'}, {'code': '200178', 'value': 'Exchange of foreign exchange'}, {'code': '200179', 'value': 'BlueStacks update'}, {'code': '200180', 'value': 'youdao'}, {'code': '200181', 'value': 'QQ computer housekeeper'}, {'code': '200182', 'value': 'UltraEdit'}, {'code': '200183', 'value': 'EasouSpider'}, {'code': '200184', 'value': 'QQ Zone'}, {'code': '200185', 'value': 'Foxmail'}, {'code': '200186', 'value': 'Pingdom.com'}, {'code': '200187', 'value': 'Sina Finance'}, {'code': '200188', 'value': 'QQ one key login'}, {'code': '200189', 'value': 'Norton'}, {'code': '200190', 'value': 'Baidu waimai'}, {'code': '200191', 'value': 'YaCy'}, {'code': '200192', 'value': 'Haitong e Haitong'}, {'code': '200193', 'value': 'AdsBot-Google'}, {'code': '200194', 'value': 'Guangfa Yijin'}, {'code': '200195', 'value': 'Ali security program'}, {'code': '200196', 'value': 'Cliqzbot'}, {'code': '200197', 'value': 'Mobike'}, {'code': '200198', 'value': 'Kingsoft PowerWord'}, {'code': '200199', 'value': 'meishij'}, {'code': '200200', 'value': 'CCB mobile bank'}, {'code': '200201', 'value': 'Mega SkyDrive'}, {'code': '200202', 'value': 'douyu'}, {'code': '200203', 'value': 'Flamingo_SearchEngine'}, {'code': '200204', 'value': 'Lenovo shop'}, {'code': '200205', 'value': 'Uc news'}, {'code': '200206', 'value': 'Volcano small video'}, {'code': '200207', 'value': 'Meitu Xiu Xiu'}, {'code': '200208', 'value': 'Kaspersky'}, {'code': '200209', 'value': 'AcFun'}, {'code': '200210', 'value': 'Slackbot'}, {'code': '200211', 'value': 'Snowball'}, {'code': '200212', 'value': 'SafeDNSBot'}, {'code': '200213', 'value': 'Great wisdom'}, {'code': '200214', 'value': 'Mailbox of NetEase'}, {'code': '200215', 'value': 'peasecod'}, {'code': '200216', 'value': 'Gold ten data'}, {'code': '200217', 'value': 'Linkdexbot'}, {'code': '200218', 'value': 'Sina blog'}, {'code': '200219', 'value': 'Ginger'}, {'code': '200220', 'value': 'Microsoft activation verification'}, {'code': '200221', 'value': 'Facebot'}, {'code': '200222', 'value': 'Dangdang'}, {'code': '200223', 'value': 'QQ cyclone'}, {'code': '200224', 'value': 'Wp_feedbot'}, {'code': '200225', 'value': 'ICBC'}, {'code': '200226', 'value': 'Public service'}, {'code': '200227', 'value': 'Magpie-crawler'}, {'code': '200228', 'value': 'xianyu'}, {'code': '200229', 'value': 'GetIntentBot'}, {'code': '200230', 'value': 'Papers'}, {'code': '200231', 'value': 'NewsGator'}, {'code': '200232', 'value': 'RankFlexBot'}, {'code': '200233', 'value': 'rogerbot'}, {'code': '200234', 'value': 'SurdotlyBot'}, {'code': '200235', 'value': 'CheckMarkNetworkBot'}, {'code': '200236', 'value': 'pyspider'}, {'code': '200237', 'value': 'spbot'}, {'code': '200238', 'value': 'Huaxia Bank'}, {'code': '200239', 'value': 'glory of king'}, {'code': '200240', 'value': 'msnbot-Products'}, {'code': '200241', 'value': 'archive.org'}, {'code': '200242', 'value': 'applebot'}, {'code': '200243', 'value': 'alicall'}, {'code': '200244', 'value': 'Superfeedrbot'}, {'code': '200245', 'value': 'QQ mailbox'}, {'code': '200246', 'value': 'coccocbot-webBot'}, {'code': '200247', 'value': 'dingtalk'}, {'code': '200248', 'value': 'Dragonbot'}, {'code': '200249', 'value': 'Mediatoolkitbot'}, {'code': '200250', 'value': 'bitcomet'}, {'code': '200251', 'value': 'filetopia'}, {'code': '200252', 'value': 'flashget'}, {'code': '200253', 'value': 'oracle'}, {'code': '200254', 'value': 'yyvoice'}, {'code': '200255', 'value': 'imesh'}, {'code': '200256', 'value': 'citrix'}, {'code': '200257', 'value': 'corba'}, {'code': '200258', 'value': 'dameware'}, {'code': '200259', 'value': 'pcanywhere'}, {'code': '200260', 'value': 'qq_rdp'}, {'code': '200261', 'value': 'poco'}, {'code': '200262', 'value': 'qqdownload'}, {'code': '200263', 'value': 'applejuice'}, {'code': '200264', 'value': 'stealthnet'}, {'code': '200265', 'value': 'winmx'}, {'code': '200266', 'value': 'emule'}, {'code': '200267', 'value': 'emule_decrypt'}, {'code': '200268', 'value': 'qvod'}, {'code': '200269', 'value': 'mysql'}, {'code': '200270', 'value': 'icecast'}, {'code': '200271', 'value': 'mms'}, {'code': '200272', 'value': 'pplive'}, {'code': '200273', 'value': 'ppstream'}, {'code': '200274', 'value': 'sopcast'}, {'code': '200275', 'value': 'tvants'}, {'code': '200276', 'value': 'sohutv'}, {'code': '200277', 'value': 'iku'}, {'code': '200278', 'value': 'qqlive'}, {'code': '200279', 'value': 'rsync'}, {'code': '200280', 'value': 'xunyou_speedup'}, {'code': '200281', 'value': 'msn'}, {'code': '200282', 'value': 'popo'}, {'code': '200283', 'value': 'sinauc'}, {'code': '200284', 'value': 'qqbattle'}, {'code': '200285', 'value': 'quake'}, {'code': '200286', 'value': 'xbox'}, {'code': '200287', 'value': 'wow'}, {'code': '200288', 'value': 'lol'}, {'code': '200289', 'value': 'PostgreSQL'}, {'code': '200290', 'value': 'TDS'}, {'code': '200291', 'value': 'VMware'}, {'code': '200292', 'value': 'Kontiki'}, {'code': '200293', 'value': 'OpenFT'}, {'code': '200294', 'value': 'Gnutella'}, {'code': '200295', 'value': 'eDonkey'}, {'code': '200296', 'value': 'AVI'}, {'code': '200297', 'value': 'RealMedia'}, {'code': '200298', 'value': 'Windowsmedia'}, {'code': '200299', 'value': 'MOVE'}, {'code': '200300', 'value': 'Feidian'}, {'code': '200301', 'value': 'Zattoo'}, {'code': '200302', 'value': 'SHOUTCast'}, {'code': '200303', 'value': 'TVUplayer'}, {'code': '200304', 'value': 'VeohTV'}, {'code': '200305', 'value': 'Soulseek'}, {'code': '200306', 'value': 'GaduGadu'}, {'code': '200307', 'value': 'Oscar'}, {'code': '200308', 'value': 'Yahoo'}, {'code': '200309', 'value': 'Battlefield'}, {'code': '200310', 'value': 'Halflife2'}, {'code': '200311', 'value': 'World of Warcraft'}, {'code': '200312', 'value': 'USENET'}, {'code': '200313', 'value': 'AFP'}, {'code': '200314', 'value': 'Truphone'}, {'code': '200315', 'value': 'Armagetron'}, {'code': '200316', 'value': 'CrossFire'}, {'code': '200317', 'value': 'Dofus'}, {'code': '200318', 'value': 'Fiesta'}, {'code': '200319', 'value': 'Florensia'}, {'code': '200320', 'value': 'Guildwars'}, {'code': '200321', 'value': 'HTTP Application Activesync'}, {'code': '200322', 'value': 'MapleStory'}, {'code': '200323', 'value': 'msSQL'}, {'code': '200324', 'value': 'WARCRAFT3'}, {'code': '200325', 'value': 'World of Kung Fu'}, {'code': '200326', 'value': 'MEEBO'}, {'code': '200327', 'value': 'DropBox'}, {'code': '200328', 'value': 'HTTP Proxy'}, {'code': '200329', 'value': 'Netflix'}, {'code': '200330', 'value': 'CitrixOnline/GotoMeeting'}, {'code': '200331', 'value': 'Webex'}, {'code': '200332', 'value': 'Apple iCloud'}, {'code': '200333', 'value': 'Apple iTunes'}, {'code': '200334', 'value': 'WindowsUpdate'}, {'code': '200335', 'value': 'Tuenti'}, {'code': '200336', 'value': 'LotusNotes'}, {'code': '200337', 'value': 'RemoteScan'}, {'code': '200338', 'value': 'Spotify'}, {'code': '200339', 'value': 'CiscoVPN'}, {'code': '200340', 'value': 'TeamSpeak'}, {'code': '200341', 'value': 'UbuntuONE'}, {'code': '200342', 'value': 'CNN'}, {'code': '200343', 'value': 'Wikipedia'}, {'code': '200344', 'value': 'Collectd'}, {'code': '200345', 'value': 'Redis'}, {'code': '200346', 'value': 'ZeroMQ'}, {'code': '200347', 'value': 'Stracraft'}, {'code': '200348', 'value': 'Simet'}, {'code': '200349', 'value': 'OpenSignal'}, {'code': '200350', 'value': '99Taxi'}, {'code': '200351', 'value': 'GloboTV'}, {'code': '200352', 'value': 'Deezer'}, {'code': '200353', 'value': 'Microsoft cloud services'}, {'code': '200354', 'value': 'Twitch'}, {'code': '200355', 'value': 'KakaoTalk Voice and Chat'}, {'code': '200357', 'value': '360.cn'}, {'code': '200358', 'value': '360Safeguard_P2P'}, {'code': '200359', 'value': '4D'}, {'code': '200360', 'value': 'acercloud'}, {'code': '200361', 'value': 'acestream'}, {'code': '200362', 'value': 'airdroid'}, {'code': '200363', 'value': 'airmedia'}, {'code': '200364', 'value': 'akamai'}, {'code': '200365', 'value': 'akamai_transfer'}, {'code': '200366', 'value': 'amanda'}, {'code': '200367', 'value': 'amp'}, {'code': '200368', 'value': 'Appear.in'}, {'code': '200369', 'value': 'ares'}, {'code': '200370', 'value': 'ARKSurvivalEvolved'}, {'code': '200371', 'value': 'ARMA3Server'}, {'code': '200372', 'value': 'ARMA2Server'}, {'code': '200373', 'value': 'AvastSecureDNS'}, {'code': '200374', 'value': 'azureus'}, {'code': '200375', 'value': 'backweb'}, {'code': '200376', 'value': 'BadBaidu'}, {'code': '200377', 'value': 'baofeng'}, {'code': '200378', 'value': 'bitext'}, {'code': '200379', 'value': 'BlackDesertOnline'}, {'code': '200380', 'value': 'Blizzard'}, {'code': '200381', 'value': 'bmdp'}, {'code': '200382', 'value': 'bncs'}, {'code': '200383', 'value': 'btdht'}, {'code': '200384', 'value': 'btsync'}, {'code': '200385', 'value': 'cacaoweb'}, {'code': '200386', 'value': 'chatango'}, {'code': '200387', 'value': 'chivalry'}, {'code': '200388', 'value': 'cirn'}, {'code': '200389', 'value': 'cisco_sslvpn'}, {'code': '200390', 'value': 'clash_of_clans'}, {'code': '200391', 'value': 'Clubbox'}, {'code': '200392', 'value': 'cod'}, {'code': '200393', 'value': 'cod_waw'}, {'code': '200394', 'value': 'combatarms'}, {'code': '200395', 'value': 'combatarms_p2p'}, {'code': '200396', 'value': 'ConquerOnline'}, {'code': '200397', 'value': 'Counterstrike1.6'}, {'code': '200398', 'value': 'Checkpoint_RDP'}, {'code': '200399', 'value': 'crashplan'}, {'code': '200400', 'value': 'crossout'}, {'code': '200401', 'value': 'cryptic'}, {'code': '200402', 'value': 'cvs'}, {'code': '200403', 'value': 'dash'}, {'code': '200404', 'value': 'dc'}, {'code': '200405', 'value': 'db2'}, {'code': '200406', 'value': 'dell_backup'}, {'code': '200407', 'value': 'Demonware'}, {'code': '200408', 'value': 'destiny'}, {'code': '200409', 'value': 'diablo2'}, {'code': '200410', 'value': 'isakmp'}, {'code': '200411', 'value': 'jedi'}, {'code': '200412', 'value': 'jedi_academy'}, {'code': '200413', 'value': 'jx3online'}, {'code': '200414', 'value': 'kankan'}, {'code': '200415', 'value': 'kaseya'}, {'code': '200416', 'value': 'kazaa'}, {'code': '200417', 'value': 'kuaibo'}, {'code': '200418', 'value': 'lifeforge'}, {'code': '200419', 'value': 'linkproof'}, {'code': '200420', 'value': 'litecoin'}, {'code': '200421', 'value': 'maxicloud'}, {'code': '200422', 'value': 'merakicloud'}, {'code': '200423', 'value': 'minecraft'}, {'code': '200424', 'value': 'mongo'}, {'code': '200425', 'value': 'msoffice_mac'}, {'code': '200426', 'value': 'munin'}, {'code': '200427', 'value': 'mzinga'}, {'code': '200428', 'value': 'n2ping'}, {'code': '200429', 'value': 'ncsoft'}, {'code': '200430', 'value': 'netcat_cctv'}, {'code': '200431', 'value': 'neverwinter'}, {'code': '200432', 'value': 'newerth'}, {'code': '200433', 'value': 'nintendo'}, {'code': '200434', 'value': 'nntps'}, {'code': '200435', 'value': 'noction'}, {'code': '200436', 'value': 'noe'}, {'code': '200437', 'value': 'norton_backup'}, {'code': '200438', 'value': 'omegle'}, {'code': '200439', 'value': 'opaserv'}, {'code': '200440', 'value': 'orbit'}, {'code': '200441', 'value': 'ourworld'}, {'code': '200442', 'value': 'overwatch'}, {'code': '200443', 'value': 'diablo3'}, {'code': '200444', 'value': 'dianping'}, {'code': '200445', 'value': 'dianshijia'}, {'code': '200446', 'value': 'discord'}, {'code': '200447', 'value': 'dogecoin'}, {'code': '200448', 'value': 'dota2'}, {'code': '200449', 'value': 'douyu_chat'}, {'code': '200450', 'value': 'doyo'}, {'code': '200451', 'value': 'driveshare'}, {'code': '200452', 'value': 'dtls'}, {'code': '200453', 'value': 'dueling_network'}, {'code': '200454', 'value': 'dvrns'}, {'code': '200455', 'value': 'dxp'}, {'code': '200456', 'value': 'ea_games'}, {'code': '200457', 'value': 'epson'}, {'code': '200458', 'value': 'eso'}, {'code': '200459', 'value': 'etrust'}, {'code': '200460', 'value': 'fasp'}, {'code': '200461', 'value': 'finalfantasy_xiv'}, {'code': '200462', 'value': 'flash'}, {'code': '200463', 'value': 'fliggy'}, {'code': '200464', 'value': 'fortinet'}, {'code': '200465', 'value': 'foscam'}, {'code': '200466', 'value': 'freechal'}, {'code': '200467', 'value': 'fring'}, {'code': '200468', 'value': 'fuckcoin'}, {'code': '200469', 'value': 'gamespy'}, {'code': '200470', 'value': 'gangsofspace'}, {'code': '200471', 'value': 'garena'}, {'code': '200472', 'value': 'gearsofwar'}, {'code': '200473', 'value': 'giop'}, {'code': '200474', 'value': 'git'}, {'code': '200475', 'value': 'glupteba'}, {'code': '200476', 'value': 'gnutella2'}, {'code': '200477', 'value': 'gokuchat'}, {'code': '200478', 'value': 'google_hangouts'}, {'code': '200479', 'value': 'gotomeeting'}, {'code': '200480', 'value': 'gprs_tunnel'}, {'code': '200481', 'value': 'graal_online_era'}, {'code': '200482', 'value': 'gsm'}, {'code': '200483', 'value': 'h1z1'}, {'code': '200484', 'value': 'halo_online'}, {'code': '200485', 'value': 'hamachi'}, {'code': '200486', 'value': 'harveys'}, {'code': '200487', 'value': 'hearthstone'}, {'code': '200488', 'value': 'heroes_generals'}, {'code': '200489', 'value': 'hots'}, {'code': '200490', 'value': 'icp'}, {'code': '200491', 'value': 'icq'}, {'code': '200492', 'value': 'id'}, {'code': '200493', 'value': 'idrive_sync'}, {'code': '200494', 'value': 'ipmsg'}, {'code': '200495', 'value': 'ipop'}, {'code': '200496', 'value': 'ipsharkk'}, {'code': '200497', 'value': 'palringo'}, {'code': '200498', 'value': 'paltalk'}, {'code': '200499', 'value': 'pando'}, {'code': '200500', 'value': 'panipani'}, {'code': '200501', 'value': 'pdbox'}, {'code': '200502', 'value': 'planetside2'}, {'code': '200503', 'value': 'portmap_rpc'}, {'code': '200504', 'value': 'ps4_remoteplay'}, {'code': '200505', 'value': 'psn'}, {'code': '200506', 'value': 'psn_store'}, {'code': '200507', 'value': 'punkbuster'}, {'code': '200508', 'value': 'pyzor'}, {'code': '200509', 'value': 'qcloud_ilvb'}, {'code': '200510', 'value': 'qqpcmgr'}, {'code': '200511', 'value': 'ramsey_dash'}, {'code': '200512', 'value': 'razor'}, {'code': '200513', 'value': 'rbls'}, {'code': '200514', 'value': 'realvnc'}, {'code': '200515', 'value': 'relay'}, {'code': '200516', 'value': 'revolver_nblbt'}, {'code': '200517', 'value': 'rising_storm'}, {'code': '200518', 'value': 'roblox'}, {'code': '200519', 'value': 'robocraft'}, {'code': '200520', 'value': 'rpc_scan'}, {'code': '200521', 'value': 'runescape'}, {'code': '200522', 'value': 'sanandreas'}, {'code': '200523', 'value': 'saprouter'}, {'code': '200524', 'value': 'secondlife'}, {'code': '200525', 'value': 'serialnumberd'}, {'code': '200526', 'value': 'silkroadonline'}, {'code': '200527', 'value': 'smite'}, {'code': '200528', 'value': 'snapvpn'}, {'code': '200529', 'value': 'spamfighter'}, {'code': '200530', 'value': 'speedin'}, {'code': '200531', 'value': 'speedtest'}, {'code': '200532', 'value': 'spotify_broadcast'}, {'code': '200533', 'value': 'sqlexp'}, {'code': '200534', 'value': 'starcitizen'}, {'code': '200535', 'value': 'starcraft'}, {'code': '200536', 'value': 'starleaf'}, {'code': '200537', 'value': 'steam_friends'}, {'code': '200538', 'value': 'storm_worm'}, {'code': '200539', 'value': 'stratum'}, {'code': '200540', 'value': 'supl'}, {'code': '200541', 'value': 'svn'}, {'code': '200542', 'value': 'talesrunner'}, {'code': '200543', 'value': 'tankix'}, {'code': '200544', 'value': 'telecomkey'}, {'code': '200545', 'value': 'telnet_exploit'}, {'code': '200546', 'value': 'tencent_games'}, {'code': '200547', 'value': 'tenfivecoin'}, {'code': '200548', 'value': 'tensafe'}, {'code': '200549', 'value': 'tera'}, {'code': '200550', 'value': 'tetrisonline'}, {'code': '200551', 'value': 'thq'}, {'code': '200552', 'value': 'tip'}, {'code': '200553', 'value': 'torchlight2'}, {'code': '200554', 'value': 'traceroute'}, {'code': '200555', 'value': 'trackmania'}, {'code': '200556', 'value': 'tremulous'}, {'code': '200557', 'value': 'trion'}, {'code': '200558', 'value': 'trojan_zeroaccess'}, {'code': '200559', 'value': 'twitcasting'}, {'code': '200560', 'value': 'twitch_irc'}, {'code': '200561', 'value': 'ubisoft_games'}, {'code': '200562', 'value': 'umeye'}, {'code': '200563', 'value': 'vainglory'}, {'code': '200564', 'value': 'ventrilo'}, {'code': '200565', 'value': 'vivox'}, {'code': '200566', 'value': 'vodlocker'}, {'code': '200567', 'value': 'vpnrobot'}, {'code': '200568', 'value': 'vpn_unlimited'}, {'code': '200569', 'value': 'vxworks_exploit'}, {'code': '200570', 'value': 'warthunder'}, {'code': '200571', 'value': 'weblogic'}, {'code': '200572', 'value': 'web_junk'}, {'code': '200573', 'value': 'weiqi'}, {'code': '200574', 'value': 'win_message'}, {'code': '200575', 'value': 'wizard101'}, {'code': '200576', 'value': 'wns'}, {'code': '200577', 'value': 'wolf_et'}, {'code': '200578', 'value': 'worm_22105'}, {'code': '200579', 'value': 'wuala'}, {'code': '200580', 'value': 'xfire_p2p'}, {'code': '200581', 'value': 'xiami'}, {'code': '200582', 'value': 'xunlei'}, {'code': '200583', 'value': 'xunlei_accel'}, {'code': '200584', 'value': 'xunlei_jsq'}, {'code': '200585', 'value': 'xunyou'}, {'code': '200586', 'value': 'xymon'}, {'code': '200587', 'value': 'yahoo_error'}, {'code': '200588', 'value': 'yahoo_games'}, {'code': '200589', 'value': 'yahoo_webcam'}, {'code': '200590', 'value': 'zabbix'}, {'code': '200591', 'value': 'zeroaccess'}, {'code': '200592', 'value': 'zoom'}, {'code': '200593', 'value': 'zynga'}, {'code': '200594', 'value': 'ICMP_Flood'}, {'code': '200595', 'value': 'IPFRAG_Flood'}, {'code': '200596', 'value': 'SYN_Flood'}, {'code': '200597', 'value': 'ACK_Flood'}, {'code': '200598', 'value': 'RST_Flood'}, {'code': '200599', 'value': 'DNS_Flood'}, {'code': '200600', 'value': 'NTP_Flood'}, {'code': '200601', 'value': 'UDP_Flood'}, {'code': '200602', 'value': 'HTTP_Flood'}, {'code': '200603', 'value': 'SSDP_Flood'}, {'code': '200604', 'value': 'baiduP2P'}, {'code': '200605', 'value': 'CSGlobalOffensive'}, {'code': '200606', 'value': 'AllSeeingEye'}, {'code': '200607', 'value': 'Bittorrent_Extension'}, {'code': '200608', 'value': 'BitTorrentSync'}, {'code': '200609', 'value': 'Call_of_Duty'}, {'code': '200612', 'value': 'CitrixICA'}, {'code': '200613', 'value': 'Citrix_Jedi'}, {'code': '200614', 'value': 'ClashOfClans'}, {'code': '200615', 'value': 'Canon_BJNP'}, {'code': '200617', 'value': 'DoyoP2P'}, {'code': '200618', 'value': 'FortiClientSSLVPN'}, {'code': '200619', 'value': 'GTA_SanAndreas_Multiplayer'}, {'code': '200620', 'value': 'HalfLife'}, {'code': '200621', 'value': 'IBM-DB2'}, {'code': '200622', 'value': 'Flash_Player'}, {'code': '200623', 'value': 'Kugou'}, {'code': '200624', 'value': 'LeagueOfLegends'}, {'code': '200625', 'value': 'GluptebaBackdoor'}, {'code': '200626', 'value': 'MedalOfHonor'}, {'code': '200628', 'value': 'MultiTheftAuto'}, {'code': '200631', 'value': 'NetcoreScan'}, {'code': '200632', 'value': 'NeverwinterNights'}, {'code': '200633', 'value': 'NoctionIRP'}, {'code': '200634', 'value': 'JavaObjectSerialised'}, {'code': '200635', 'value': 'RealPlayer'}, {'code': '200636', 'value': 'TeamFortress2'}, {'code': '200637', 'value': 'TheCrew'}, {'code': '200638', 'value': 'TurboVPN'}, {'code': '200639', 'value': 'MSN_Voice'}, {'code': '200640', 'value': 'MaplestoryChina'}, {'code': '200641', 'value': 'Message4U'}, {'code': '200642', 'value': 'MongoDB'}, {'code': '200643', 'value': 'NDTThroughput'}, {'code': '200644', 'value': 'NET-MFP'}, {'code': '200645', 'value': 'WindowsMessenger'}, {'code': '200646', 'value': 'WolfensteinEnemyTerritory'}, {'code': '200647', 'value': 'XboxLive'}, {'code': '200649', 'value': 'RBL'}, {'code': '200650', 'value': 'RPC_Exploit'}, {'code': '200651', 'value': 'Rejection'}, {'code': '200655', 'value': 'Silverplatter_DXP'}, {'code': '200659', 'value': 'TencentWNS'}, {'code': '200660', 'value': 'TrionGames'}, {'code': '200661', 'value': 'Trojan.Win32.Generic!SB'}, {'code': '200666', 'value': 'WorldOfWarcraft'}, {'code': '200667', 'value': 'YY'}, {'code': '200669', 'value': 'nopayload'}, {'code': '200670', 'value': 'No_FirstPkt'}, {'code': '200671', 'value': 'Invalid'}], 'visibility': 'disabled'}, 'label': 'Application ID'}, {'name': 'common_protocol_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '10000', 'value': 'NOT SPECIFIED'}, {'code': '10001', 'value': 'TCP'}, {'code': '10002', 'value': 'UDP'}, {'code': '10003', 'value': 'DNS'}, {'code': '10004', 'value': 'FTP'}, {'code': '10005', 'value': 'FTPS'}, {'code': '10006', 'value': 'GRE'}, {'code': '10007', 'value': 'HTTP'}, {'code': '10008', 'value': 'HTTPS'}, {'code': '10009', 'value': 'ICMP'}, {'code': '10010', 'value': 'IKE'}, {'code': '10011', 'value': 'IMAP'}, {'code': '10012', 'value': 'IMAPS'}, {'code': '10013', 'value': 'IPSEC'}, {'code': '10014', 'value': 'XMPP'}, {'code': '10015', 'value': 'L2TP'}, {'code': '10016', 'value': 'NTP'}, {'code': '10017', 'value': 'POP3'}, {'code': '10018', 'value': 'POP3 SSL'}, {'code': '10019', 'value': 'PPTP'}, {'code': '10020', 'value': 'Quic'}, {'code': '10021', 'value': 'SIP'}, {'code': '10022', 'value': 'smb'}, {'code': '10023', 'value': 'SMTP'}, {'code': '10024', 'value': 'SMTPS'}, {'code': '10025', 'value': 'SPDY'}, {'code': '10028', 'value': 'SSH'}, {'code': '10029', 'value': 'SSL'}, {'code': '10030', 'value': 'SOCKS'}, {'code': '10031', 'value': 'BITTORRENT'}, {'code': '10032', 'value': 'RTSP'}, {'code': '10033', 'value': 'TELNET'}, {'code': '10034', 'value': 'UTP'}, {'code': '10035', 'value': 'FASTTRACK'}, {'code': '10036', 'value': 'SKINNY'}, {'code': '10037', 'value': 'IAX'}, {'code': '10038', 'value': 'MGCP'}, {'code': '10039', 'value': 'RTCP'}, {'code': '10040', 'value': 'RTP'}, {'code': '10041', 'value': 'VNC'}, {'code': '10042', 'value': 'XDMCP'}, {'code': '10043', 'value': 'RDP'}, {'code': '10044', 'value': 'AIMINI'}, {'code': '10045', 'value': 'IPP'}, {'code': '10046', 'value': 'NFS'}, {'code': '10047', 'value': 'TFTP'}, {'code': '10048', 'value': 'BGP'}, {'code': '10049', 'value': 'DHCP'}, {'code': '10050', 'value': 'DHCPV6'}, {'code': '10051', 'value': 'FINGER'}, {'code': '10052', 'value': 'KERBEROS'}, {'code': '10053', 'value': 'LDAP'}, {'code': '10054', 'value': 'MDNS'}, {'code': '10055', 'value': 'NNTP'}, {'code': '10056', 'value': 'SNMP'}, {'code': '10057', 'value': 'SSDP'}, {'code': '10058', 'value': 'SYSLOG'}, {'code': '10059', 'value': 'WHOIS'}, {'code': '10060', 'value': 'RADIUS'}, {'code': '10061', 'value': 'OPENVPN'}, {'code': '10062', 'value': 'STUN'}, {'code': '10063', 'value': 'TEREDO'}, {'code': '10064', 'value': 'GTP'}, {'code': '10065', 'value': 'RTMP'}, {'code': '10066', 'value': 'chargen_tcp_udp'}, {'code': '10067', 'value': 'llmnr_udp'}, {'code': '10068', 'value': 'nbns_udp'}, {'code': '10069', 'value': 'NETBIOS'}, {'code': '10070', 'value': 'DirectDownloadLink'}, {'code': '10071', 'value': 'I23V5'}, {'code': '10072', 'value': 'DirectConnect'}, {'code': '10073', 'value': 'OFF'}, {'code': '10074', 'value': 'OGG'}, {'code': '10075', 'value': 'MPEG'}, {'code': '10076', 'value': 'IRC'}, {'code': '10077', 'value': 'Jabber'}, {'code': '10078', 'value': 'VRRP'}, {'code': '10079', 'value': 'IGMP'}, {'code': '10080', 'value': 'EGP'}, {'code': '10081', 'value': 'SCTP'}, {'code': '10082', 'value': 'OSPF'}, {'code': '10083', 'value': 'IP in IP'}, {'code': '10084', 'value': 'ICMPv6'}, {'code': '10085', 'value': 'DCE RPC'}, {'code': '10086', 'value': 'NetFlow_IPFIX'}, {'code': '10087', 'value': 'sFlow'}, {'code': '10088', 'value': 'HTTP Connect (SSL over HTTP)'}, {'code': '10089', 'value': 'SAP'}, {'code': '10090', 'value': 'UPnP'}, {'code': '10091', 'value': 'H323'}, {'code': '10092', 'value': 'Megaco'}, {'code': '10094', 'value': 'bacnet'}, {'code': '10096', 'value': 'bjnp'}, {'code': '10097', 'value': 'cgp'}, {'code': '10098', 'value': 'dahua'}, {'code': '10099', 'value': 'dcc'}, {'code': '10100', 'value': 'kademlia'}, {'code': '10101', 'value': 'lansync'}, {'code': '10102', 'value': 'ldap_ad'}, {'code': '10103', 'value': 'llp2p'}, {'code': '10104', 'value': 'mfnp'}, {'code': '10105', 'value': 'mp2p'}, {'code': '10106', 'value': 'msn_cache'}, {'code': '10107', 'value': 'msn_video'}, {'code': '10108', 'value': 'msnc'}, {'code': '10109', 'value': 'netflow'}, {'code': '10110', 'value': 'notes_rpc'}, {'code': '10111', 'value': 'esp'}, {'code': '10112', 'value': 'fbcdn_ssl'}, {'code': '10113', 'value': 'forticlient_sslvpn'}, {'code': '10114', 'value': 'rfb'}, {'code': '10115', 'value': 'rtmfp'}, {'code': '10117', 'value': 'slp'}, {'code': '10118', 'value': 'steam_inhomebroadcast'}, {'code': '10119', 'value': 'steam_localbroadcast'}, {'code': '10120', 'value': 'tpkt'}, {'code': '10121', 'value': 'xmpps'}, {'code': '10122', 'value': 'S7COMM'}, {'code': '10123', 'value': 'CitrixCGP'}, {'code': '10124', 'value': 'ID_Protocol'}, {'code': '10125', 'value': 'SMTP_Secure'}, {'code': '10126', 'value': 'NAT-PMP'}], 'visibility': 'disabled'}, 'label': 'Protocol ID'}, {'name': 'common_start_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'Start Time'}, {'name': 'common_end_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'End Time'}, {'name': 'common_establish_latency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Establish Latency(ms)'}, {'name': 'common_con_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Duration(ms)'}, {'name': 'common_stream_dir', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'c2s'}, {'code': '2', 'value': 's2c'}, {'code': '3', 'value': 'double'}]}, 'label': 'Stream Direction'}, {'name': 'common_address_list', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Address List'}, {'name': 'common_has_dup_traffic', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}], 'visibility': 'hidden'}, 'label': 'Duplication Traffic'}, {'name': 'common_stream_error', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Stream Error'}, {'name': 'common_stream_trace_id', 'type': 'long', 'doc': {'allow_query': 'true'}, 'label': 'Session ID'}, {'name': 'http_url', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'URL'}, {'name': 'http_host', 'type': 'string', 'doc': {'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'Host'}, {'name': 'http_domain', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Domain'}, {'name': 'http_request_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Request Line'}, {'name': 'http_response_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Response Line'}, {'name': 'http_request_header', 'type': 'string', 'label': 'Request Headers'}, {'name': 'http_response_header', 'type': 'string', 'label': 'Response Headers'}, {'name': 'http_request_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Request Body'}, {'name': 'http_response_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Response Body'}, {'name': 'http_request_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Request Body Key'}, {'name': 'http_response_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Response Body Key'}, {'name': 'http_proxy_flag', 'type': 'int', 'label': 'Proxy Flag'}, {'name': 'http_sequence', 'type': 'int', 'label': 'Sequence'}, {'name': 'http_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Http Snapshot'}, {'name': 'http_cookie', 'type': 'string', 'label': 'Cookie'}, {'name': 'http_referer', 'type': 'string', 'label': 'Referer'}, {'name': 'http_user_agent', 'type': 'string', 'label': 'User Agent'}, {'name': 'http_content_length', 'type': 'string', 'label': 'Content Length'}, {'name': 'http_content_type', 'type': 'string', 'label': 'Content Type'}, {'name': 'http_set_cookie', 'type': 'string', 'label': 'Set Cookie'}, {'name': 'http_version', 'type': 'string', 'label': 'Version'}, {'name': 'http_response_lantency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Response Latency(ms)'}, {'name': 'http_session_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Session Duration(ms)'}, {'name': 'mail_protocol_type', 'type': 'string', 'label': 'Protocol Type'}, {'name': 'mail_account', 'type': 'string', 'label': 'Account'}, {'name': 'mail_from_cmd', 'type': 'string', 'label': 'From CMD'}, {'name': 'mail_to_cmd', 'type': 'string', 'label': 'To CMD'}, {'name': 'mail_from', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'From'}, {'name': 'mail_to', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'To'}, {'name': 'mail_cc', 'type': 'string', 'label': 'CC'}, {'name': 'mail_bcc', 'type': 'string', 'label': 'BCC'}, {'name': 'mail_subject', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_subject_charset'}}, 'label': 'Subject'}, {'name': 'mail_subject_charset', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Subject Charset'}, {'name': 'mail_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content'}, {'name': 'mail_content_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content Charset'}, {'name': 'mail_attachment_name', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_attachment_name_charset'}}, 'label': 'Attachment'}, {'name': 'mail_attachment_name_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Charset'}, {'name': 'mail_attachment_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Content'}, {'name': 'mail_eml_file', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'EML File'}, {'name': 'mail_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Snapshot'}, {'name': 'dns_message_id', 'type': 'int', 'label': 'Message ID'}, {'name': 'dns_qr', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'REESPONSE'}]}, 'label': 'QR'}, {'name': 'dns_opcode', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'IQUERY'}, {'code': '2', 'value': 'STATUS'}, {'code': '5', 'value': 'UPDATE'}]}, 'label': 'OPCODE'}, {'name': 'dns_aa', 'type': 'int', 'label': 'AA'}, {'name': 'dns_tc', 'type': 'int', 'label': 'TC'}, {'name': 'dns_rd', 'type': 'int', 'label': 'RD'}, {'name': 'dns_ra', 'type': 'int', 'label': 'RA'}, {'name': 'dns_rcode', 'type': 'int', 'label': 'RCODE'}, {'name': 'dns_qdcount', 'type': 'int', 'label': 'QDCOUNT'}, {'name': 'dns_ancount', 'type': 'int', 'label': 'ANCOUNT'}, {'name': 'dns_nscount', 'type': 'int', 'label': 'NSCOUNT'}, {'name': 'dns_arcount', 'type': 'int', 'label': 'ARCOUNT'}, {'name': 'dns_qname', 'type': 'string', 'label': 'QNAME'}, {'name': 'dns_qtype', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'A'}, {'code': '2', 'value': 'NS'}, {'code': '5', 'value': 'CNAME'}, {'code': '6', 'value': 'SOA'}, {'code': '11', 'value': 'WKS'}, {'code': '12', 'value': 'PTR'}, {'code': '13', 'value': 'HINFO'}, {'code': '11', 'value': 'WKS'}, {'code': '15', 'value': 'MX'}, {'code': '28', 'value': 'AAAA'}]}, 'label': 'QTYPE'}, {'name': 'dns_qclass', 'type': 'int', 'label': 'QCLASS'}, {'name': 'dns_cname', 'type': 'string', 'label': 'CNAME'}, {'name': 'dns_sub', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'DNS'}, {'code': '2', 'value': 'DNSSEC'}]}, 'label': 'SUB'}, {'name': 'dns_rr', 'type': 'string', 'label': 'RR'}, {'name': 'ssl_version', 'type': 'string', 'label': 'Version'}, {'name': 'ssl_sni', 'type': 'string', 'doc': {'allow_query': 'true', 'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'SNI'}, {'name': 'ssl_san', 'type': 'string', 'label': 'SAN'}, {'name': 'ssl_cn', 'type': 'string', 'label': 'CN'}, {'name': 'ssl_pinningst', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Not Pinning'}, {'code': '1', 'value': 'Pinning'}, {'code': '2', 'value': 'Maybe Pinning'}]}, 'label': 'Pinning'}, {'name': 'ssl_intercept_state', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Passthrough'}, {'code': '1', 'value': 'Intercept'}, {'code': '2', 'value': 'Shutdown'}]}, 'label': 'Intercept State'}, {'name': 'ssl_server_side_latency', 'type': 'int', 'label': 'Server Side Latency(ms)'}, {'name': 'ssl_client_side_latency', 'type': 'int', 'label': 'Client Side Latency(ms)'}, {'name': 'ssl_server_side_version', 'type': 'string', 'label': 'Server Side Version'}, {'name': 'ssl_client_side_version', 'type': 'string', 'label': 'Client Side Version'}, {'name': 'ssl_cert_verify', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}]}, 'label': 'Certificate Verify'}, {'name': 'ssl_error', 'type': 'string', 'label': 'Error'}, {'name': 'ssl_con_latency_ms', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Connection Latency(ms)'}, {'name': 'ftp_account', 'type': 'string', 'label': 'Account'}, {'name': 'ftp_url', 'type': 'string', 'label': 'URL'}, {'name': 'ftp_content', 'type': 'string', 'label': 'Content'}, {'name': 'bgp_type', 'type': 'int', 'label': 'Type'}, {'name': 'bgp_as_num', 'type': 'string', 'label': 'AS Number'}, {'name': 'bgp_route', 'type': 'string', 'label': 'Route'}, {'name': 'voip_calling_account', 'type': 'string', 'label': 'Calling Account'}, {'name': 'voip_called_account', 'type': 'string', 'label': 'Called Account'}, {'name': 'voip_calling_number', 'type': 'string', 'label': 'Calling Number'}, {'name': 'voip_called_number', 'type': 'string', 'label': 'Called Number'}, {'name': 'streaming_media_url', 'type': 'string', 'label': 'Media URL'}, {'name': 'streaming_media_protocol', 'type': 'string', 'label': 'Media Protocol'}]}</msg>
<status status="PASS" starttime="20200401 12:21:51.077" endtime="20200401 12:21:51.080"></status>
</kw>
<kw name="Evaluate" library="BuiltIn">
<doc>Evaluates the given expression in Python and returns the results.</doc>
<arguments>
<arg>json.dumps(eval(str(${LogSchemaResponse.body['data']['fields']})))</arg>
<arg>json</arg>
</arguments>
<assign>
<var>${field}</var>
</assign>
<msg timestamp="20200401 12:21:51.101" level="INFO">${field} = [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "com...</msg>
<status status="PASS" starttime="20200401 12:21:51.080" endtime="20200401 12:21:51.101"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${field}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.102" level="INFO">[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}]</msg>
<status status="PASS" starttime="20200401 12:21:51.102" endtime="20200401 12:21:51.103"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>30</arg>
</arguments>
<assign>
<var>${pageSize}</var>
</assign>
<msg timestamp="20200401 12:21:51.104" level="INFO">${pageSize} = 30</msg>
<status status="PASS" starttime="20200401 12:21:51.103" endtime="20200401 12:21:51.104"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>1</arg>
</arguments>
<assign>
<var>${pageNo}</var>
</assign>
<msg timestamp="20200401 12:21:51.105" level="INFO">${pageNo} = 1</msg>
<status status="PASS" starttime="20200401 12:21:51.104" endtime="20200401 12:21:51.105"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>[{"value":["${startTime}","${endTime}"],"symbol":"between","field":"common_recv_time","type":"timestamp"}]</arg>
</arguments>
<assign>
<var>${condition}</var>
</assign>
<msg timestamp="20200401 12:21:51.105" level="INFO">${condition} = [{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}]</msg>
<status status="PASS" starttime="20200401 12:21:51.105" endtime="20200401 12:21:51.106"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"pageNo":${pageNo},"pageSize":${pageSize},"logType":"${logname}","fields":${field},"start_common_recv_time":"${startTime}","end_common_recv_time":"${endTime}","conditions":${condition} ,"common_client_ips":"${client_ip}","common_policy_ids":"${policy_id}"}</arg>
</arguments>
<assign>
<var>${logCondition}</var>
</assign>
<msg timestamp="20200401 12:21:51.106" level="INFO">${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function...</msg>
<status status="PASS" starttime="20200401 12:21:51.106" endtime="20200401 12:21:51.107"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>this time query condition:${logCondition}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.108" level="INFO">this time query condition:{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:20:37","end_common_recv_time":"2020-04-01 12:21:50","conditions":[{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"75"}</msg>
<status status="PASS" starttime="20200401 12:21:51.107" endtime="20200401 12:21:51.108"></status>
</kw>
<msg timestamp="20200401 12:21:51.109" level="INFO">${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function...</msg>
<status status="PASS" starttime="20200401 12:21:50.718" endtime="20200401 12:21:51.109"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logCondition}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.110" level="INFO">{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:20:37","end_common_recv_time":"2020-04-01 12:21:50","conditions":[{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"75"}</msg>
<status status="PASS" starttime="20200401 12:21:51.109" endtime="20200401 12:21:51.110"></status>
</kw>
<kw name="PostRemoteData" library="LogSchema">
<arguments>
<arg>/log/list</arg>
<arg>${logCondition}</arg>
</arguments>
<assign>
<var>${LogListResponse}</var>
</assign>
<kw name="Create Dictionary" library="BuiltIn">
<doc>Creates and returns a dictionary based on the given ``items``.</doc>
<arguments>
<arg>Content-Type=application/json</arg>
<arg>Authorization=${token}</arg>
</arguments>
<assign>
<var>${header}</var>
</assign>
<msg timestamp="20200401 12:21:51.112" level="INFO">${header} = {'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}</msg>
<status status="PASS" starttime="20200401 12:21:51.111" endtime="20200401 12:21:51.112"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}/${version}</arg>
<arg>headers=${header}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.113" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080/v1, headers={'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:21:51.112" endtime="20200401 12:21:51.113"></status>
</kw>
<kw name="Post Request" library="RequestsLibrary">
<doc>Send a POST request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${url}</arg>
<arg>data=${data}</arg>
<arg>headers=${header}</arg>
</arguments>
<assign>
<var>${remoteResponse}</var>
</assign>
<msg timestamp="20200401 12:21:51.115" level="INFO">POST Request using : uri=/log/list, params=None, files=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}
data={"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:20:37","end_common_recv_time":"2020-04-01 12:21:50","conditions":[{"value":["2020-04-01 12:20:37","2020-04-01 12:21:50"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"75"}
json=None</msg>
<msg timestamp="20200401 12:21:51.218" level="INFO">${remoteResponse} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.113" endtime="20200401 12:21:51.218"></status>
</kw>
<msg timestamp="20200401 12:21:51.218" level="INFO">${LogListResponse} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.111" endtime="20200401 12:21:51.218"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${LogListResponse.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:51.219" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.219" endtime="20200401 12:21:51.219"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${LogListResponse.content}</arg>
</arguments>
<assign>
<var>${returnData}</var>
</assign>
<msg timestamp="20200401 12:21:51.220" level="INFO">To JSON using : content={
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:20:59",
"common_log_id":"48581107529943040",
"common_policy_id":"75",
"common_subscriber_id":"",
"common_client_ip":"192.168.50.43",
"common_client_port":"57710",
"common_l4_protocol":"IPv4_TCP",
"common_address_type":"4",
"common_server_ip":"111.206.186.250",
"common_server_port":"80",
"common_action":"128",
"common_direction":"0",
"common_entrance_id":"0",
"common_sled_ip":"192.168.40.161",
"common_client_location":"Private IP",
"common_client_asn":"N/A",
"common_server_location":"China",
"common_server_asn":"4808",
"common_c2s_pkt_num":"4",
"common_s2c_pkt_num":"4",
"common_c2s_byte_num":"80",
"common_s2c_byte_num":"387",
"common_service":"0",
"common_schema_type":"HTTP",
"common_user_tags":"",
"common_sub_action":"",
"common_user_region":"",
"common_device_id":"",
"common_link_id":"0",
"common_isp":"",
"common_encapsulation":"0",
"common_app_label":"",
"common_app_id":"0",
"common_protocol_id":"0",
"common_start_time":"2020-04-01 12:20:08",
"common_end_time":"2020-04-01 12:20:10",
"common_establish_latency_ms":"0",
"common_con_duration_ms":"2000",
"common_stream_dir":"3",
"common_address_list":"57710-80-192.168.50.43-111.206.186.250",
"common_has_dup_traffic":"0",
"common_stream_error":"",
"common_stream_trace_id":"7980237763036",
"http_url":"",
"http_host":"www.icbc.com.cn",
"http_domain":"icbc.com.cn",
"http_request_line":"",
"http_response_line":"",
"http_request_header":"",
"http_response_header":"",
"http_request_body":"",
"http_response_body":"",
"http_request_body_key":"",
"http_response_body_key":"",
"http_proxy_flag":"0",
"http_sequence":"0",
"http_snapshot":"",
"http_cookie":"",
"http_referer":"",
"http_user_agent":"",
"http_content_length":"",
"http_content_type":"",
"http_set_cookie":"",
"http_version":"",
"http_response_lantency_ms":"0",
"http_session_duration_ms":"0",
"mail_protocol_type":"",
"mail_account":"",
"mail_from_cmd":"",
"mail_to_cmd":"",
"mail_from":"",
"mail_to":"",
"mail_cc":"",
"mail_bcc":"",
"mail_subject":"",
"mail_subject_charset":"",
"mail_content":"",
"mail_content_charset":"",
"mail_attachment_name":"",
"mail_attachment_name_charset":"",
"mail_attachment_content":"",
"mail_eml_file":"",
"mail_snapshot":"",
"dns_message_id":"0",
"dns_aa":"0",
"dns_tc":"0",
"dns_rd":"0",
"dns_ra":"0",
"dns_rcode":"0",
"dns_qdcount":"0",
"dns_ancount":"0",
"dns_nscount":"0",
"dns_arcount":"0",
"dns_qname":"",
"dns_qtype":"0",
"dns_qclass":"0",
"dns_cname":"",
"dns_sub":"0",
"dns_rr":"",
"ssl_version":"",
"ssl_sni":"",
"ssl_san":"",
"ssl_cn":"",
"ssl_server_side_latency":"0",
"ssl_client_side_latency":"0",
"ssl_server_side_version":"",
"ssl_client_side_version":"",
"ssl_error":"",
"ssl_con_latency_ms":"0",
"ftp_account":"",
"ftp_url":"",
"ftp_content":"",
"bgp_type":"0",
"bgp_as_num":"",
"bgp_route":"",
"voip_calling_account":"",
"voip_called_account":"",
"voip_calling_number":"",
"voip_called_number":"",
"streaming_media_url":"",
"streaming_media_protocol":""
}
],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:21:51.220" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:21:51.220" level="INFO">${returnData} = {'code': 200, 'data': {'list': [{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50....</msg>
<status status="PASS" starttime="20200401 12:21:51.220" endtime="20200401 12:21:51.220"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${returnData}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${responseCode}</var>
</assign>
<msg timestamp="20200401 12:21:51.221" level="INFO">${responseCode} = 200</msg>
<status status="PASS" starttime="20200401 12:21:51.221" endtime="20200401 12:21:51.221"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${responseCode}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.222" level="INFO">200</msg>
<status status="PASS" starttime="20200401 12:21:51.221" endtime="20200401 12:21:51.222"></status>
</kw>
<kw name="Should Be Equal" library="BuiltIn">
<doc>Fails if the given objects are unequal.</doc>
<arguments>
<arg>${responseCode}</arg>
<arg>${200}</arg>
<arg>security_event_log \ \ test query list failed</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.222" endtime="20200401 12:21:51.222"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>this time request security_event_log \ table logRecord \ : ${LogListResponse.content}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.223" level="INFO">this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:20:59",
"common_log_id":"48581107529943040",
"common_policy_id":"75",
"common_subscriber_id":"",
"common_client_ip":"192.168.50.43",
"common_client_port":"57710",
"common_l4_protocol":"IPv4_TCP",
"common_address_type":"4",
"common_server_ip":"111.206.186.250",
"common_server_port":"80",
"common_action":"128",
"common_direction":"0",
"common_entrance_id":"0",
"common_sled_ip":"192.168.40.161",
"common_client_location":"Private IP",
"common_client_asn":"N/A",
"common_server_location":"China",
"common_server_asn":"4808",
"common_c2s_pkt_num":"4",
"common_s2c_pkt_num":"4",
"common_c2s_byte_num":"80",
"common_s2c_byte_num":"387",
"common_service":"0",
"common_schema_type":"HTTP",
"common_user_tags":"",
"common_sub_action":"",
"common_user_region":"",
"common_device_id":"",
"common_link_id":"0",
"common_isp":"",
"common_encapsulation":"0",
"common_app_label":"",
"common_app_id":"0",
"common_protocol_id":"0",
"common_start_time":"2020-04-01 12:20:08",
"common_end_time":"2020-04-01 12:20:10",
"common_establish_latency_ms":"0",
"common_con_duration_ms":"2000",
"common_stream_dir":"3",
"common_address_list":"57710-80-192.168.50.43-111.206.186.250",
"common_has_dup_traffic":"0",
"common_stream_error":"",
"common_stream_trace_id":"7980237763036",
"http_url":"",
"http_host":"www.icbc.com.cn",
"http_domain":"icbc.com.cn",
"http_request_line":"",
"http_response_line":"",
"http_request_header":"",
"http_response_header":"",
"http_request_body":"",
"http_response_body":"",
"http_request_body_key":"",
"http_response_body_key":"",
"http_proxy_flag":"0",
"http_sequence":"0",
"http_snapshot":"",
"http_cookie":"",
"http_referer":"",
"http_user_agent":"",
"http_content_length":"",
"http_content_type":"",
"http_set_cookie":"",
"http_version":"",
"http_response_lantency_ms":"0",
"http_session_duration_ms":"0",
"mail_protocol_type":"",
"mail_account":"",
"mail_from_cmd":"",
"mail_to_cmd":"",
"mail_from":"",
"mail_to":"",
"mail_cc":"",
"mail_bcc":"",
"mail_subject":"",
"mail_subject_charset":"",
"mail_content":"",
"mail_content_charset":"",
"mail_attachment_name":"",
"mail_attachment_name_charset":"",
"mail_attachment_content":"",
"mail_eml_file":"",
"mail_snapshot":"",
"dns_message_id":"0",
"dns_aa":"0",
"dns_tc":"0",
"dns_rd":"0",
"dns_ra":"0",
"dns_rcode":"0",
"dns_qdcount":"0",
"dns_ancount":"0",
"dns_nscount":"0",
"dns_arcount":"0",
"dns_qname":"",
"dns_qtype":"0",
"dns_qclass":"0",
"dns_cname":"",
"dns_sub":"0",
"dns_rr":"",
"ssl_version":"",
"ssl_sni":"",
"ssl_san":"",
"ssl_cn":"",
"ssl_server_side_latency":"0",
"ssl_client_side_latency":"0",
"ssl_server_side_version":"",
"ssl_client_side_version":"",
"ssl_error":"",
"ssl_con_latency_ms":"0",
"ftp_account":"",
"ftp_url":"",
"ftp_content":"",
"bgp_type":"0",
"bgp_as_num":"",
"bgp_route":"",
"voip_calling_account":"",
"voip_called_account":"",
"voip_calling_number":"",
"voip_called_number":"",
"streaming_media_url":"",
"streaming_media_protocol":""
}
],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:21:51.223" endtime="20200401 12:21:51.223"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>this time request security_event_log \ table logRecord \ : ${LogListResponse.content}</arg>
</arguments>
<assign>
<var>${a}</var>
</assign>
<msg timestamp="20200401 12:21:51.224" level="INFO">${a} = this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:20:59",
"common_log_id":"48581107529943040",
"common_pol...</msg>
<status status="PASS" starttime="20200401 12:21:51.224" endtime="20200401 12:21:51.224"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${a}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.225" level="INFO">this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:20:59",
"common_log_id":"48581107529943040",
"common_policy_id":"75",
"common_subscriber_id":"",
"common_client_ip":"192.168.50.43",
"common_client_port":"57710",
"common_l4_protocol":"IPv4_TCP",
"common_address_type":"4",
"common_server_ip":"111.206.186.250",
"common_server_port":"80",
"common_action":"128",
"common_direction":"0",
"common_entrance_id":"0",
"common_sled_ip":"192.168.40.161",
"common_client_location":"Private IP",
"common_client_asn":"N/A",
"common_server_location":"China",
"common_server_asn":"4808",
"common_c2s_pkt_num":"4",
"common_s2c_pkt_num":"4",
"common_c2s_byte_num":"80",
"common_s2c_byte_num":"387",
"common_service":"0",
"common_schema_type":"HTTP",
"common_user_tags":"",
"common_sub_action":"",
"common_user_region":"",
"common_device_id":"",
"common_link_id":"0",
"common_isp":"",
"common_encapsulation":"0",
"common_app_label":"",
"common_app_id":"0",
"common_protocol_id":"0",
"common_start_time":"2020-04-01 12:20:08",
"common_end_time":"2020-04-01 12:20:10",
"common_establish_latency_ms":"0",
"common_con_duration_ms":"2000",
"common_stream_dir":"3",
"common_address_list":"57710-80-192.168.50.43-111.206.186.250",
"common_has_dup_traffic":"0",
"common_stream_error":"",
"common_stream_trace_id":"7980237763036",
"http_url":"",
"http_host":"www.icbc.com.cn",
"http_domain":"icbc.com.cn",
"http_request_line":"",
"http_response_line":"",
"http_request_header":"",
"http_response_header":"",
"http_request_body":"",
"http_response_body":"",
"http_request_body_key":"",
"http_response_body_key":"",
"http_proxy_flag":"0",
"http_sequence":"0",
"http_snapshot":"",
"http_cookie":"",
"http_referer":"",
"http_user_agent":"",
"http_content_length":"",
"http_content_type":"",
"http_set_cookie":"",
"http_version":"",
"http_response_lantency_ms":"0",
"http_session_duration_ms":"0",
"mail_protocol_type":"",
"mail_account":"",
"mail_from_cmd":"",
"mail_to_cmd":"",
"mail_from":"",
"mail_to":"",
"mail_cc":"",
"mail_bcc":"",
"mail_subject":"",
"mail_subject_charset":"",
"mail_content":"",
"mail_content_charset":"",
"mail_attachment_name":"",
"mail_attachment_name_charset":"",
"mail_attachment_content":"",
"mail_eml_file":"",
"mail_snapshot":"",
"dns_message_id":"0",
"dns_aa":"0",
"dns_tc":"0",
"dns_rd":"0",
"dns_ra":"0",
"dns_rcode":"0",
"dns_qdcount":"0",
"dns_ancount":"0",
"dns_nscount":"0",
"dns_arcount":"0",
"dns_qname":"",
"dns_qtype":"0",
"dns_qclass":"0",
"dns_cname":"",
"dns_sub":"0",
"dns_rr":"",
"ssl_version":"",
"ssl_sni":"",
"ssl_san":"",
"ssl_cn":"",
"ssl_server_side_latency":"0",
"ssl_client_side_latency":"0",
"ssl_server_side_version":"",
"ssl_client_side_version":"",
"ssl_error":"",
"ssl_con_latency_ms":"0",
"ftp_account":"",
"ftp_url":"",
"ftp_content":"",
"bgp_type":"0",
"bgp_as_num":"",
"bgp_route":"",
"voip_calling_account":"",
"voip_called_account":"",
"voip_calling_number":"",
"voip_called_number":"",
"streaming_media_url":"",
"streaming_media_protocol":""
}
],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:21:51.224" endtime="20200401 12:21:51.225"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${LogListResponse.json()}[data][list]</arg>
</arguments>
<assign>
<var>${log}</var>
</assign>
<msg timestamp="20200401 12:21:51.226" level="INFO">${log} = [{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '577...</msg>
<status status="PASS" starttime="20200401 12:21:51.225" endtime="20200401 12:21:51.226"></status>
</kw>
<kw name="${logs} IN [ ${log} ]" type="for">
<kw name="${logs} = [{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '577..." type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logs}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.227" level="INFO">[{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57710', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '111.206.186.250', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '387', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:20:08', 'common_end_time': '2020-04-01 12:20:10', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '2000', 'common_stream_dir': '3', 'common_address_list': '57710-80-192.168.50.43-111.206.186.250', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980237763036', 'http_url': '', 'http_host': 'www.icbc.com.cn', 'http_domain': 'icbc.com.cn', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}]</msg>
<status status="PASS" starttime="20200401 12:21:51.227" endtime="20200401 12:21:51.227"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.227" endtime="20200401 12:21:51.228"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.226" endtime="20200401 12:21:51.228"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>%%%%%%%%%%%%%%%%%%%%%%%%${logs}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.228" level="INFO">%%%%%%%%%%%%%%%%%%%%%%%%[{'common_recv_time': '2020-04-01 12:20:59', 'common_log_id': '48581107529943040', 'common_policy_id': '75', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57710', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '111.206.186.250', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '387', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:20:08', 'common_end_time': '2020-04-01 12:20:10', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '2000', 'common_stream_dir': '3', 'common_address_list': '57710-80-192.168.50.43-111.206.186.250', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980237763036', 'http_url': '', 'http_host': 'www.icbc.com.cn', 'http_domain': 'icbc.com.cn', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}]</msg>
<status status="PASS" starttime="20200401 12:21:51.228" endtime="20200401 12:21:51.229"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${client_ip}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.229" endtime="20200401 12:21:51.229"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${policy_id}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.229" endtime="20200401 12:21:51.230"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${parmkey}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.230" endtime="20200401 12:21:51.230"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}"${parmkey}"</arg>
<arg>${parmvalue}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.231" endtime="20200401 12:21:51.231"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:50.717" endtime="20200401 12:21:51.231"></status>
</kw>
<kw name="DeletePolicyAndObject" library="PolicyObject" type="teardown">
<arguments>
<arg>${policyIds}</arg>
<arg>${objectids}</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyAndObject</arg>
</arguments>
<msg timestamp="20200401 12:21:51.232" level="INFO">toDeletePolicy_DeletePolicyAndObject</msg>
<status status="PASS" starttime="20200401 12:21:51.232" endtime="20200401 12:21:51.233"></status>
</kw>
<kw name="Get Length" library="BuiltIn">
<doc>Returns and logs the length of the given item as an integer.</doc>
<arguments>
<arg>${policyids}</arg>
</arguments>
<assign>
<var>${listlenth}</var>
</assign>
<msg timestamp="20200401 12:21:51.233" level="INFO">Length is 2</msg>
<msg timestamp="20200401 12:21:51.233" level="INFO">${listlenth} = 2</msg>
<status status="PASS" starttime="20200401 12:21:51.233" endtime="20200401 12:21:51.233"></status>
</kw>
<kw name="${var} IN RANGE [ ${listlenth} ]" type="for">
<kw name="${var} = 0" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${var}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.234" level="INFO">0</msg>
<status status="PASS" starttime="20200401 12:21:51.234" endtime="20200401 12:21:51.235"></status>
</kw>
<kw name="DeletePolicy" library="PolicyObject">
<arguments>
<arg>${policyids}[${var}]</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyDeletePolicy</arg>
</arguments>
<msg timestamp="20200401 12:21:51.236" level="INFO">toDeletePolicy_DeletePolicyDeletePolicy</msg>
<status status="PASS" starttime="20200401 12:21:51.235" endtime="20200401 12:21:51.236"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:21:51.237" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:21:51.236" endtime="20200401 12:21:51.237"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.238" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:21:51.237" endtime="20200401 12:21:51.238"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:51.239" level="INFO">DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"policyType":"tsg_security","policyIds":[74]}
json=None</msg>
<msg timestamp="20200401 12:21:51.848" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.239" endtime="20200401 12:21:51.848"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.849" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.849" endtime="20200401 12:21:51.849"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:51.850" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.850" endtime="20200401 12:21:51.851"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:51.852" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:21:51.852" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:21:51.852" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:51.851" endtime="20200401 12:21:51.852"></status>
</kw>
<msg timestamp="20200401 12:21:51.852" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:51.236" endtime="20200401 12:21:51.852"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:21:51.853" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:21:51.853" endtime="20200401 12:21:51.853"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:51.854" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.853" endtime="20200401 12:21:51.854"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:51.854" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:51.854" endtime="20200401 12:21:51.855"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:51.855" endtime="20200401 12:21:51.855"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.235" endtime="20200401 12:21:51.855"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.234" endtime="20200401 12:21:51.855"></status>
</kw>
<kw name="${var} = 1" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${var}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.856" level="INFO">1</msg>
<status status="PASS" starttime="20200401 12:21:51.856" endtime="20200401 12:21:51.856"></status>
</kw>
<kw name="DeletePolicy" library="PolicyObject">
<arguments>
<arg>${policyids}[${var}]</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyDeletePolicy</arg>
</arguments>
<msg timestamp="20200401 12:21:51.857" level="INFO">toDeletePolicy_DeletePolicyDeletePolicy</msg>
<status status="PASS" starttime="20200401 12:21:51.857" endtime="20200401 12:21:51.857"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:21:51.858" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:21:51.858" endtime="20200401 12:21:51.858"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.859" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:21:51.859" endtime="20200401 12:21:51.859"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:51.860" level="INFO">DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"policyType":"tsg_security","policyIds":[75]}
json=None</msg>
<msg timestamp="20200401 12:21:51.990" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.860" endtime="20200401 12:21:51.990"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:21:51.991" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.990" endtime="20200401 12:21:51.992"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:51.993" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:51.992" endtime="20200401 12:21:51.993"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:51.996" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:21:51.996" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:21:51.997" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:51.994" endtime="20200401 12:21:51.997"></status>
</kw>
<msg timestamp="20200401 12:21:51.997" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:51.857" endtime="20200401 12:21:51.998"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:21:51.999" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:21:51.998" endtime="20200401 12:21:51.999"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:52.001" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:52.000" endtime="20200401 12:21:52.001"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.002" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:52.002" endtime="20200401 12:21:52.003"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.003" endtime="20200401 12:21:52.005"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.856" endtime="20200401 12:21:52.005"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.856" endtime="20200401 12:21:52.006"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.234" endtime="20200401 12:21:52.007"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>todeleteobj_DeletePolicyAndObject</arg>
</arguments>
<msg timestamp="20200401 12:21:52.008" level="INFO">todeleteobj_DeletePolicyAndObject</msg>
<status status="PASS" starttime="20200401 12:21:52.007" endtime="20200401 12:21:52.008"></status>
</kw>
<kw name="DeleteObject" library="PolicyObject">
<arguments>
<arg>${objectids}</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>todeleteobj</arg>
</arguments>
<msg timestamp="20200401 12:21:52.010" level="INFO">todeleteobj</msg>
<status status="PASS" starttime="20200401 12:21:52.009" endtime="20200401 12:21:52.010"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>{"objectIds":[${objectids}]}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:21:52.012" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:21:52.011" endtime="20200401 12:21:52.012"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.013" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:21:52.013" endtime="20200401 12:21:52.014"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.015" level="INFO">DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"objectIds":[471]}
json=None</msg>
<msg timestamp="20200401 12:21:52.089" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:52.014" endtime="20200401 12:21:52.089"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.090" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:21:52.089" endtime="20200401 12:21:52.090"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:52.090" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:52.090" endtime="20200401 12:21:52.090"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.090" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:21:52.092" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:21:52.092" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:52.090" endtime="20200401 12:21:52.092"></status>
</kw>
<msg timestamp="20200401 12:21:52.092" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:52.010" endtime="20200401 12:21:52.092"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:21:52.092" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:21:52.092" endtime="20200401 12:21:52.092"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:21:52.093" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:21:52.092" endtime="20200401 12:21:52.093"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.094" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:21:52.093" endtime="20200401 12:21:52.094"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.094" endtime="20200401 12:21:52.094"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:52.008" endtime="20200401 12:21:52.095"></status>
</kw>
<status status="PASS" starttime="20200401 12:21:51.232" endtime="20200401 12:21:52.095"></status>
</kw>
<tags>
<tag>Allow</tag>
<tag>DENY</tag>
<tag>FQDN</tag>
<tag>HTTP</tag>
<tag>IP</tag>
<tag>tsg_adc</tag>
<tag>tsg_security</tag>
</tags>
<status status="PASS" starttime="20200401 12:20:36.948" endtime="20200401 12:21:52.095" critical="yes"></status>
</test>
<test id="s1-s1-s1-s1-s1-t2" name="SecurityPolicy-Allow-Http-00002">
<kw name="AddObject" library="PolicyObject">
<arguments>
<arg>{"opAction":"add","returnData":1,"objectList":{"objectType":"subscriberid","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00002_subid","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["$zmmtest"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[]}}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${object_Subid_Id}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.097" endtime="20200401 12:21:52.098"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:21:52.256" level="INFO">&amp;{httpResponse} = { seconds=0.138607 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$zmmtest'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isIn...</msg>
<status status="PASS" starttime="20200401 12:21:52.098" endtime="20200401 12:21:52.257"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:21:52.257" level="INFO">
{
"code": 200,
"data": {
"objectList": [
{
"addItemList": [
{
"itemId": "",
"keywordArray": [
"$zmmtest"
],
"isHexbin": 0
}
],
"deleteItemIds": [],
"isExclusion": 0,
"isInitialize": 0,
"isValid": 1,
"objectDesc": "",
"objectId": 472,
"objectName": "SecurityPolicy-Allow-Http-00002_subid",
"objectType": "subscriberid",
"opTime": "2020-04-01 12:21:51",
"opUser": 981,
"subObjectIds": [],
"updateItemList": []
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:21:52.257" endtime="20200401 12:21:52.258"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.258" endtime="20200401 12:21:52.260"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.261" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$zmmtest'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objectDesc...</msg>
<status status="PASS" starttime="20200401 12:21:52.260" endtime="20200401 12:21:52.261"></status>
</kw>
<msg timestamp="20200401 12:21:52.266" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['$zmmtest'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objectDesc...</msg>
<status status="PASS" starttime="20200401 12:21:52.097" endtime="20200401 12:21:52.267"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['objectList'][0]['objectId']}</arg>
</arguments>
<assign>
<var>${objectId}</var>
</assign>
<msg timestamp="20200401 12:21:52.269" level="INFO">${objectId} = 472</msg>
<status status="PASS" starttime="20200401 12:21:52.268" endtime="20200401 12:21:52.270"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescodeReturn}</var>
</assign>
<msg timestamp="20200401 12:21:52.271" level="INFO">${rescodeReturn} = 200</msg>
<status status="PASS" starttime="20200401 12:21:52.270" endtime="20200401 12:21:52.271"></status>
</kw>
<msg timestamp="20200401 12:21:52.271" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:21:52.271" level="INFO">${object_Subid_Id} = 472</msg>
<status status="PASS" starttime="20200401 12:21:52.096" endtime="20200401 12:21:52.271"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${object_Subid_Id}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.273" level="INFO">472</msg>
<status status="PASS" starttime="20200401 12:21:52.272" endtime="20200401 12:21:52.273"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${object_Subid_Id}</arg>
</arguments>
<assign>
<var>${objectids}</var>
</assign>
<msg timestamp="20200401 12:21:52.273" level="INFO">${objectids} = 472</msg>
<status status="PASS" starttime="20200401 12:21:52.273" endtime="20200401 12:21:52.273"></status>
</kw>
<kw name="AddObject" library="PolicyObject">
<arguments>
<arg>{"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn_category","objectSubType":"","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00002-Categry","objectDesc":"autotest","subObjectIds":[],"addItemList":[{"keywordArray":["*www.ccb.com"],"itemId":"","isValid":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[],"objectId":""}}</arg>
</arguments>
<assign>
<var>${rescodeip}</var>
<var>${object_Category_Id}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.275" endtime="20200401 12:21:52.275"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:21:52.415" level="INFO">&amp;{httpResponse} = { seconds=0.136421 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*www.ccb.com'], 'isValid': '', 'isHexbin': 0}], 'deleteItemIds': [], 'isE...</msg>
<status status="PASS" starttime="20200401 12:21:52.275" endtime="20200401 12:21:52.415"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:21:52.416" level="INFO">
{
"code": 200,
"data": {
"objectList": [
{
"addItemList": [
{
"itemId": "",
"keywordArray": [
"*www.ccb.com"
],
"isValid": "",
"isHexbin": 0
}
],
"deleteItemIds": [],
"isExclusion": 0,
"isInitialize": 0,
"isValid": 1,
"objectDesc": "autotest",
"objectId": 473,
"objectName": "SecurityPolicy-Allow-Http-00002-Categry",
"objectSubType": "",
"objectType": "fqdn_category",
"opTime": "2020-04-01 12:21:51",
"opUser": 981,
"subObjectIds": [],
"updateItemList": []
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:21:52.416" endtime="20200401 12:21:52.417"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.417" endtime="20200401 12:21:52.419"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.420" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*www.ccb.com'], 'isValid': '', 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isVal...</msg>
<status status="PASS" starttime="20200401 12:21:52.419" endtime="20200401 12:21:52.420"></status>
</kw>
<msg timestamp="20200401 12:21:52.420" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*www.ccb.com'], 'isValid': '', 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isVal...</msg>
<status status="PASS" starttime="20200401 12:21:52.274" endtime="20200401 12:21:52.420"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['objectList'][0]['objectId']}</arg>
</arguments>
<assign>
<var>${objectId}</var>
</assign>
<msg timestamp="20200401 12:21:52.421" level="INFO">${objectId} = 473</msg>
<status status="PASS" starttime="20200401 12:21:52.420" endtime="20200401 12:21:52.421"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescodeReturn}</var>
</assign>
<msg timestamp="20200401 12:21:52.421" level="INFO">${rescodeReturn} = 200</msg>
<status status="PASS" starttime="20200401 12:21:52.421" endtime="20200401 12:21:52.422"></status>
</kw>
<msg timestamp="20200401 12:21:52.422" level="INFO">${rescodeip} = 200</msg>
<msg timestamp="20200401 12:21:52.422" level="INFO">${object_Category_Id} = 473</msg>
<status status="PASS" starttime="20200401 12:21:52.274" endtime="20200401 12:21:52.422"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${object_Category_Id}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.423" level="INFO">473</msg>
<status status="PASS" starttime="20200401 12:21:52.422" endtime="20200401 12:21:52.423"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${object_Subid_Id},${object_Category_Id}</arg>
</arguments>
<assign>
<var>${objectids}</var>
</assign>
<msg timestamp="20200401 12:21:52.423" level="INFO">${objectids} = 472,473</msg>
<status status="PASS" starttime="20200401 12:21:52.423" endtime="20200401 12:21:52.424"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002_deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${object_Subid_Id},"protocolFields":[null]},{"objectId":${object_Category_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<msg timestamp="20200401 12:21:52.424" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002_deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po...</msg>
<status status="PASS" starttime="20200401 12:21:52.424" endtime="20200401 12:21:52.424"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.425" level="INFO">{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002_deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":472,"protocolFields":[null]},{"objectId":473,"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</msg>
<status status="PASS" starttime="20200401 12:21:52.425" endtime="20200401 12:21:52.425"></status>
</kw>
<kw name="AddPolicy" library="PolicyObject">
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${policyId1}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.426" endtime="20200401 12:21:52.427"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:21:52.601" level="INFO">&amp;{httpResponse} = { seconds=0.169178 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 60.0, 'evalu...</msg>
<status status="PASS" starttime="20200401 12:21:52.427" endtime="20200401 12:21:52.602"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:21:52.603" level="INFO">
{
"code": 200,
"data": {
"policyList": [
{
"action": "deny",
"appObjectIdArray": [
2
],
"doLog": 1,
"evaluationLayer": "session_layer",
"evaluationOrder": 60.0,
"evaluationStage": 1,
"isValid": 1,
"newSubIdObjName": "SecurityPolicy-Allow-Http-00002_subid",
"opTime": "2020-04-01 12:21:51",
"opUser": 981,
"policyDesc": "autotest",
"policyId": 76,
"policyName": "SecurityPolicy-Allow-Http-00002_deny",
"policyType": "tsg_security",
"protocol": "HTTP",
"referenceObject": [],
"scheduleId": [],
"userRegion": {
"protocol": "HTTP",
"method": "drop"
},
"userTags": ""
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:21:52.602" endtime="20200401 12:21:52.605"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.605" endtime="20200401 12:21:52.607"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.608" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 60.0, 'evaluationStage': 1, 'isValid': 1, 'newSubId...</msg>
<status status="PASS" starttime="20200401 12:21:52.607" endtime="20200401 12:21:52.608"></status>
</kw>
<msg timestamp="20200401 12:21:52.608" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 60.0, 'evaluationStage': 1, 'isValid': 1, 'newSubId...</msg>
<status status="PASS" starttime="20200401 12:21:52.426" endtime="20200401 12:21:52.608"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['policyList'][0]['policyId']}</arg>
</arguments>
<assign>
<var>${policyId}</var>
</assign>
<msg timestamp="20200401 12:21:52.609" level="INFO">${policyId} = 76</msg>
<status status="PASS" starttime="20200401 12:21:52.609" endtime="20200401 12:21:52.609"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:21:52.610" level="INFO">${rescode} = 200</msg>
<status status="PASS" starttime="20200401 12:21:52.609" endtime="20200401 12:21:52.610"></status>
</kw>
<msg timestamp="20200401 12:21:52.610" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:21:52.610" level="INFO">${policyId1} = 76</msg>
<status status="PASS" starttime="20200401 12:21:52.425" endtime="20200401 12:21:52.610"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${policyId1}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.611" level="INFO">76</msg>
<status status="PASS" starttime="20200401 12:21:52.611" endtime="20200401 12:21:52.611"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId1}]}</arg>
</arguments>
<assign>
<var>${policyIds}</var>
</assign>
<msg timestamp="20200401 12:21:52.612" level="INFO">${policyIds} = {"policyType":"tsg_security","policyIds":[76]}</msg>
<status status="PASS" starttime="20200401 12:21:52.611" endtime="20200401 12:21:52.612"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${object_Subid_Id},"protocolFields":[null]},{"objectId":${object_Category_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<msg timestamp="20200401 12:21:52.612" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00002","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy...</msg>
<status status="PASS" starttime="20200401 12:21:52.612" endtime="20200401 12:21:52.613"></status>
</kw>
<kw name="AddPolicy" library="PolicyObject">
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${policyId2}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.614" endtime="20200401 12:21:52.614"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:21:52.845" level="INFO">&amp;{httpResponse} = { seconds=0.224751 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 61.0, 'eval...</msg>
<status status="PASS" starttime="20200401 12:21:52.614" endtime="20200401 12:21:52.847"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:21:52.849" level="INFO">
{
"code": 200,
"data": {
"policyList": [
{
"action": "allow",
"appObjectIdArray": [
2
],
"doLog": 1,
"evaluationLayer": "session_layer",
"evaluationOrder": 61.0,
"evaluationStage": 1,
"isValid": 1,
"newSubIdObjName": "SecurityPolicy-Allow-Http-00002_subid",
"opTime": "2020-04-01 12:21:51",
"opUser": 981,
"policyDesc": "autotest",
"policyId": 77,
"policyName": "SecurityPolicy-Allow-Http-00002",
"policyType": "tsg_security",
"protocol": "HTTP",
"referenceObject": [],
"scheduleId": [],
"userRegion": {
"protocol": "HTTP"
},
"userTags": ""
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:21:52.848" endtime="20200401 12:21:52.853"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:21:52.854" endtime="20200401 12:21:52.863"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:21:52.865" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 61.0, 'evaluationStage': 1, 'isValid': 1, 'newSubI...</msg>
<status status="PASS" starttime="20200401 12:21:52.864" endtime="20200401 12:21:52.865"></status>
</kw>
<msg timestamp="20200401 12:21:52.866" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 61.0, 'evaluationStage': 1, 'isValid': 1, 'newSubI...</msg>
<status status="PASS" starttime="20200401 12:21:52.613" endtime="20200401 12:21:52.867"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['policyList'][0]['policyId']}</arg>
</arguments>
<assign>
<var>${policyId}</var>
</assign>
<msg timestamp="20200401 12:21:52.868" level="INFO">${policyId} = 77</msg>
<status status="PASS" starttime="20200401 12:21:52.867" endtime="20200401 12:21:52.868"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:21:52.869" level="INFO">${rescode} = 200</msg>
<status status="PASS" starttime="20200401 12:21:52.868" endtime="20200401 12:21:52.869"></status>
</kw>
<msg timestamp="20200401 12:21:52.870" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:21:52.870" level="INFO">${policyId2} = 77</msg>
<status status="PASS" starttime="20200401 12:21:52.613" endtime="20200401 12:21:52.870"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${policyId2}</arg>
</arguments>
<msg timestamp="20200401 12:21:52.871" level="INFO">77</msg>
<status status="PASS" starttime="20200401 12:21:52.871" endtime="20200401 12:21:52.871"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId1}]}</arg>
</arguments>
<assign>
<var>${policyIds1}</var>
</assign>
<msg timestamp="20200401 12:21:52.872" level="INFO">${policyIds1} = {"policyType":"tsg_security","policyIds":[76]}</msg>
<status status="PASS" starttime="20200401 12:21:52.872" endtime="20200401 12:21:52.872"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId2}]}</arg>
</arguments>
<assign>
<var>${policyIds2}</var>
</assign>
<msg timestamp="20200401 12:21:52.873" level="INFO">${policyIds2} = {"policyType":"tsg_security","policyIds":[77]}</msg>
<status status="PASS" starttime="20200401 12:21:52.873" endtime="20200401 12:21:52.873"></status>
</kw>
<kw name="Create List" library="BuiltIn">
<doc>Returns a list containing given items.</doc>
<arguments>
<arg>${policyIds1}</arg>
<arg>${policyIds2}</arg>
</arguments>
<assign>
<var>${policyIds}</var>
</assign>
<msg timestamp="20200401 12:21:52.874" level="INFO">${policyIds} = ['{"policyType":"tsg_security","policyIds":[76]}', '{"policyType":"tsg_security","policyIds":[77]}']</msg>
<status status="PASS" starttime="20200401 12:21:52.874" endtime="20200401 12:21:52.874"></status>
</kw>
<kw name="Sleep" library="BuiltIn">
<doc>Pauses the test executed for the given time.</doc>
<arguments>
<arg>${policyVerificationSleepSeconds}s</arg>
</arguments>
<msg timestamp="20200401 12:22:12.877" level="INFO">Slept 20 seconds</msg>
<status status="PASS" starttime="20200401 12:21:52.874" endtime="20200401 12:22:12.877"></status>
</kw>
<kw name="Get Time" library="BuiltIn">
<doc>Returns the given time in the requested format.</doc>
<assign>
<var>${starttime}</var>
</assign>
<msg timestamp="20200401 12:22:12.878" level="INFO">${starttime} = 2020-04-01 12:22:12</msg>
<status status="PASS" starttime="20200401 12:22:12.878" endtime="20200401 12:22:12.879"></status>
</kw>
<kw name="Run" library="OperatingSystem">
<doc>Runs the given command in the system and returns the output.</doc>
<arguments>
<arg>curl -I \ -m \ 10 \ -o \ /dev/null \ -s \ -w \ \ \%{http_code} \ \ http://www.ccb.com</arg>
</arguments>
<assign>
<var>${commandreturn}</var>
</assign>
<msg timestamp="20200401 12:22:12.922" level="INFO">Running command 'curl -I -m 10 -o /dev/null -s -w %{http_code} http://www.ccb.com 2&gt;&amp;1'.</msg>
<msg timestamp="20200401 12:22:14.828" level="INFO">${commandreturn} = 200</msg>
<status status="PASS" starttime="20200401 12:22:12.879" endtime="20200401 12:22:14.829"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${commandreturn}</arg>
<arg>200</arg>
</arguments>
<status status="PASS" starttime="20200401 12:22:14.829" endtime="20200401 12:22:14.829"></status>
</kw>
<kw name="Sleep" library="BuiltIn">
<doc>Pauses the test executed for the given time.</doc>
<arguments>
<arg>${policyLogVerificationSleepSeconds}s</arg>
</arguments>
<msg timestamp="20200401 12:23:04.831" level="INFO">Slept 50 seconds</msg>
<status status="PASS" starttime="20200401 12:22:14.830" endtime="20200401 12:23:04.833"></status>
</kw>
<kw name="Get Time" library="BuiltIn">
<doc>Returns the given time in the requested format.</doc>
<assign>
<var>${endtime}</var>
</assign>
<msg timestamp="20200401 12:23:04.837" level="INFO">${endtime} = 2020-04-01 12:23:04</msg>
<status status="PASS" starttime="20200401 12:23:04.835" endtime="20200401 12:23:04.838"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${policyId2}</arg>
</arguments>
<assign>
<var>${s}</var>
</assign>
<msg timestamp="20200401 12:23:04.841" level="INFO">${s} = 77</msg>
<status status="PASS" starttime="20200401 12:23:04.839" endtime="20200401 12:23:04.841"></status>
</kw>
<kw name="GetLogList" library="LogVariable">
<arguments>
<arg>security_event_log</arg>
<arg>${starttime}</arg>
<arg>${endtime}</arg>
<arg>${testClentIP}</arg>
<arg>${s}</arg>
<arg>http_host</arg>
<arg>ccb</arg>
</arguments>
<kw name="GetLogCondition" library="LogSchema">
<arguments>
<arg>${logType}</arg>
<arg>${startTime}</arg>
<arg>${endTime}</arg>
<arg>${client_ip}</arg>
<arg>${policy_id}</arg>
</arguments>
<assign>
<var>${logCondition}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Content-Type":"application/x-www-form-urlencoded","Authorization":"${token}"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:04.847" endtime="20200401 12:23:04.848"></status>
</kw>
<kw name="Get" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a GET request to the endpoint.*</doc>
<arguments>
<arg>/v1/log/schema?logType=${logname}</arg>
</arguments>
<assign>
<var>&amp;{LogSchemaResponse}</var>
</assign>
<msg timestamp="20200401 12:23:04.916" level="INFO">&amp;{LogSchemaResponse} = { seconds=0.043569000000000004 | status=200 | body={'code': 200, 'data': {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_s...</msg>
<status status="PASS" starttime="20200401 12:23:04.849" endtime="20200401 12:23:04.917"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logname}</arg>
</arguments>
<msg timestamp="20200401 12:23:04.918" level="INFO">security_event_log</msg>
<status status="PASS" starttime="20200401 12:23:04.917" endtime="20200401 12:23:04.918"></status>
</kw>
<kw name="Output Schema" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON Schema to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:23:04.927" level="INFO">
{
"type": "object",
"properties": {
"code": {
"type": "integer",
"default": 200
},
"data": {
"type": "object",
"properties": {
"doc": {
"type": "object",
"properties": {
"schema_query": {
"type": "object",
"properties": {
"dimensions": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_server_ip",
"common_client_ip",
"common_policy_id",
"common_action",
"common_sled_ip",
"common_server_location",
"common_subscriber_id",
"http_domain"
]
},
"metrics": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_server_ip",
"common_client_ip",
"common_subscriber_id",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num"
]
},
"filters": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_policy_id",
"common_action",
"common_address_type",
"common_server_ip",
"common_client_ip",
"common_server_port",
"common_server_location",
"common_subscriber_id",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"http_domain",
"http_content_type",
"ssl_sni",
"ssl_pinningst",
"ssl_intercept_state"
]
}
},
"required": [
"dimensions",
"filters",
"metrics"
]
},
"schema_type": {
"type": "object",
"properties": {
"BASE": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"HTTP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"http_url",
"http_host",
"http_domain",
"http_request_line",
"http_response_line",
"http_request_header",
"http_response_header",
"http_request_body",
"http_response_body",
"http_request_body_key",
"http_response_body_key",
"http_proxy_flag",
"http_sequence",
"http_snapshot",
"http_cookie",
"http_referer",
"http_user_agent",
"http_content_length",
"http_content_type",
"http_set_cookie",
"http_version",
"http_response_lantency_ms",
"http_session_duration_ms"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"http_url",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"MAIL": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"mail_protocol_type",
"mail_account",
"mail_from_cmd",
"mail_to_cmd",
"mail_from",
"mail_to",
"mail_cc",
"mail_bcc",
"mail_subject",
"mail_subject_charset",
"mail_content",
"mail_content_charset",
"mail_attachment_name",
"mail_attachment_name_charset",
"mail_attachment_content",
"mail_eml_file",
"mail_snapshot"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"mail_from",
"mail_to",
"mail_subject"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"DNS": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"dns_message_id",
"dns_qr",
"dns_opcode",
"dns_aa",
"dns_tc",
"dns_rd",
"dns_ra",
"dns_rcode",
"dns_qdcount",
"dns_ancount",
"dns_nscount",
"dns_arcount",
"dns_qname",
"dns_qtype",
"dns_qclass",
"dns_cname",
"dns_sub",
"dns_rr"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_client_ip",
"dns_qr",
"dns_qname",
"dns_qtype"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"SSL": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"ssl_sni",
"ssl_san",
"ssl_cn",
"ssl_pinningst",
"ssl_intercept_state",
"ssl_server_side_latency",
"ssl_client_side_latency",
"ssl_server_side_version",
"ssl_client_side_version",
"ssl_cert_verify",
"ssl_error",
"ssl_con_latency_ms"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"ssl_sni",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"FTP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"ftp_account",
"ftp_url",
"ftp_content"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"ftp_url",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"BGP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"bgp_type",
"bgp_as_num",
"bgp_route"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"bgp_type",
"bgp_as_num",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"VOIP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"voip_calling_account",
"voip_called_account",
"voip_calling_number",
"voip_called_number"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"voip_calling_account",
"voip_called_account",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
}
},
"required": [
"BASE",
"BGP",
"DNS",
"FTP",
"HTTP",
"MAIL",
"SSL",
"VOIP"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_server_ip",
"common_server_port",
"common_schema_type"
]
}
},
"required": [
"default_columns",
"schema_query",
"schema_type"
]
},
"fields": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"type": {
"type": "string"
},
"doc": {
"type": "object",
"properties": {
"allow_query": {
"type": "string"
},
"constraints": {
"type": "object",
"properties": {
"type": {
"type": "string"
}
},
"required": [
"type"
]
},
"format": {
"type": "object",
"properties": {
"functions": {
"type": "string"
},
"appendTo": {
"type": "string"
},
"param": {
"type": "string"
}
},
"required": [
"functions"
]
},
"data": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"value": {
"type": "string"
}
},
"required": [
"code",
"value"
]
}
},
"visibility": {
"type": "string"
}
}
},
"label": {
"type": "string"
}
},
"required": [
"label",
"name",
"type"
]
},
"default": [
{
"name": "common_recv_time",
"type": "int",
"doc": {
"allow_query": "true",
"constraints": {
"type": "timestamp"
},
"format": {
"functions": "current_timestamp"
}
},
"label": "Receive Time"
},
{
"name": "common_log_id",
"type": "long",
"doc": {
"allow_query": "true",
"format": {
"functions": "snowflake_id"
}
},
"label": "Log ID"
},
{
"name": "common_policy_id",
"type": "int",
"doc": {
"allow_query": "true"
},
"label": "Policy ID"
},
{
"name": "common_subscriber_id",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "Subscriber ID"
},
{
"name": "common_client_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
},
"format": {
"functions": "geo_ip_detail,geo_asn,radius_match",
"appendTo": "common_client_location,common_client_asn,common_subscriber_id"
}
},
"label": "Client IP"
},
{
"name": "common_client_port",
"type": "int",
"label": "Client Port"
},
{
"name": "common_l4_protocol",
"type": "string",
"label": "L4 Protocol"
},
{
"name": "common_address_type",
"type": "int",
"doc": {
"data": [
{
"code": "4",
"value": "ipv4"
},
{
"code": "6",
"value": "ipv6"
}
]
},
"label": "Address Type"
},
{
"name": "common_server_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
},
"format": {
"functions": "geo_ip_country,geo_asn",
"appendTo": "common_server_location,common_server_asn"
}
},
"label": "Server IP"
},
{
"name": "common_server_port",
"type": "int",
"doc": {
"allow_query": "true"
},
"label": "Server Port"
},
{
"name": "common_action",
"type": "int",
"doc": {
"allow_query": "true",
"data": [
{
"code": "0",
"value": "None"
},
{
"code": "1",
"value": "Monitor"
},
{
"code": "2",
"value": "Intercept"
},
{
"code": "16",
"value": "Deny"
},
{
"code": "48",
"value": "Manipulation"
},
{
"code": "128",
"value": "Allow"
}
]
},
"label": "Action"
},
{
"name": "common_direction",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "outbound"
},
{
"code": "1",
"value": "inbound"
}
]
},
"label": "Direction"
},
{
"name": "common_entrance_id",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Entrance ID"
},
{
"name": "common_sled_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
}
},
"label": "Sled IP"
},
{
"name": "common_client_location",
"type": "string",
"label": "Client Location"
},
{
"name": "common_client_asn",
"type": "string",
"label": "Client ASN"
},
{
"name": "common_server_location",
"type": "string",
"label": "Server Location"
},
{
"name": "common_server_asn",
"type": "string",
"label": "Server ASN"
},
{
"name": "common_c2s_pkt_num",
"type": "int",
"label": "Packets Sent"
},
{
"name": "common_s2c_pkt_num",
"type": "int",
"label": "Packets Received"
},
{
"name": "common_c2s_byte_num",
"type": "int",
"label": "Bytes Sent"
},
{
"name": "common_s2c_byte_num",
"type": "int",
"label": "Bytes Received"
},
{
"name": "common_service",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Service"
},
{
"name": "common_schema_type",
"type": "string",
"doc": {
"data": [
{
"code": "BASE",
"value": "BASE"
},
{
"code": "HTTP",
"value": "HTTP"
},
{
"code": "MAIL",
"value": "MAIL"
},
{
"code": "DNS",
"value": "DNS"
},
{
"code": "SSL",
"value": "SSL"
},
{
"code": "FTP",
"value": "FTP"
},
{
"code": "BGP",
"value": "BGP"
},
{
"code": "VOIP",
"value": "VOIP"
},
{
"code": "RADIUS",
"value": "RADIUS"
}
],
"allow_query": "true"
},
"label": "Schema Type"
},
{
"name": "common_user_tags",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "User Tags"
},
{
"name": "common_sub_action",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Sub Action"
},
{
"name": "common_user_region",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "User Region"
},
{
"name": "common_device_id",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Device ID"
},
{
"name": "common_link_id",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Link ID"
},
{
"name": "common_isp",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "ISP"
},
{
"name": "common_encapsulation",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Ethernet"
},
{
"code": "8",
"value": "PPP"
},
{
"code": "12",
"value": "CiscoHDLC"
}
]
},
"label": "Encapsulation"
},
{
"name": "common_app_label",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Application Label"
},
{
"name": "common_app_id",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "NOT SPECIFIED"
},
{
"code": "100001",
"value": "Skype"
},
{
"code": "100101",
"value": "Instagram"
},
{
"code": "100201",
"value": "Youtube"
},
{
"code": "100301",
"value": "Facebook"
},
{
"code": "100401",
"value": "What‘s App"
},
{
"code": "100501",
"value": "Periscope"
},
{
"code": "100601",
"value": "Viber"
},
{
"code": "100701",
"value": "Twitter"
},
{
"code": "100801",
"value": "Vkontakte"
},
{
"code": "100901",
"value": "Telegram"
},
{
"code": "101001",
"value": "Odnoklassniki"
},
{
"code": "101101",
"value": "Mail agent"
},
{
"code": "101201",
"value": "FaceTime"
},
{
"code": "101301",
"value": "Snapchat"
},
{
"code": "101401",
"value": "Google"
},
{
"code": "101501",
"value": "Yandex"
},
{
"code": "101601",
"value": "Yandex Browser Turbo"
},
{
"code": "101701",
"value": "Opera"
},
{
"code": "101702",
"value": "Opera Turbo"
},
{
"code": "101703",
"value": "Opera mini"
},
{
"code": "101801",
"value": "AppStore"
},
{
"code": "101901",
"value": "PlayMarket"
},
{
"code": "102001",
"value": "Drugvokrug social networking"
},
{
"code": "102101",
"value": "Badoo social networking"
},
{
"code": "102201",
"value": "WeChat"
},
{
"code": "102301",
"value": "Zello"
},
{
"code": "102401",
"value": "Freegate"
},
{
"code": "102501",
"value": "Psiphon"
},
{
"code": "102601",
"value": "TOR"
},
{
"code": "102602",
"value": "Tor browser"
},
{
"code": "102603",
"value": "Tor mode"
},
{
"code": "102701",
"value": "Orbot"
},
{
"code": "102801",
"value": "Tunnel Bear VPN"
},
{
"code": "102901",
"value": "HotSpot Shield VPN"
},
{
"code": "103001",
"value": "VPN Master"
},
{
"code": "103101",
"value": "Hola VPN"
},
{
"code": "103201",
"value": "HideMyAss VPN"
},
{
"code": "103301",
"value": "Zenmate VPN"
},
{
"code": "103401",
"value": "SignalPrivateMessenger"
},
{
"code": "200001",
"value": "RFA"
},
{
"code": "200002",
"value": "VOA"
},
{
"code": "200003",
"value": "lantern"
},
{
"code": "200004",
"value": "Line"
},
{
"code": "200005",
"value": "voxer"
},
{
"code": "200006",
"value": "ZeroNet"
},
{
"code": "200007",
"value": "Zalo"
},
{
"code": "200008",
"value": "free_browser"
},
{
"code": "200009",
"value": "Diaspora"
},
{
"code": "200010",
"value": "browsec"
},
{
"code": "200011",
"value": "Chrome_plugin_chuguo"
},
{
"code": "200012",
"value": "GoGo_SocksHttp"
},
{
"code": "200013",
"value": "ultrasurf_chrome"
},
{
"code": "200014",
"value": "pinterest"
},
{
"code": "200015",
"value": "Swisscom"
},
{
"code": "200016",
"value": "Threema"
},
{
"code": "200017",
"value": "Circuit_iOS"
},
{
"code": "200018",
"value": "Chrome_plugin_FastsTunnel"
},
{
"code": "200019",
"value": "OoVoo"
},
{
"code": "200020",
"value": "Vine"
},
{
"code": "200021",
"value": "Keek"
},
{
"code": "200022",
"value": "Hi"
},
{
"code": "200023",
"value": "HeyTell"
},
{
"code": "200024",
"value": "HikeMessenger"
},
{
"code": "200025",
"value": "Nonoh"
},
{
"code": "200026",
"value": "Path"
},
{
"code": "200027",
"value": "Kik"
},
{
"code": "200028",
"value": "BBM"
},
{
"code": "200029",
"value": "Talkray"
},
{
"code": "200030",
"value": "HelloTalk"
},
{
"code": "200031",
"value": "Skout"
},
{
"code": "200032",
"value": "MeetMe"
},
{
"code": "200033",
"value": "Nextdoor"
},
{
"code": "200034",
"value": "Shots"
},
{
"code": "200035",
"value": "Zoosk"
},
{
"code": "200036",
"value": "TextPlus"
},
{
"code": "200037",
"value": "Maaii"
},
{
"code": "200038",
"value": "Ustream"
},
{
"code": "200039",
"value": "Yikyak"
},
{
"code": "200040",
"value": "chatsecure"
},
{
"code": "200041",
"value": "freecalls"
},
{
"code": "200042",
"value": "SignalPrivateMessenger"
},
{
"code": "200043",
"value": "USGOV_CIA"
},
{
"code": "200044",
"value": "USGOV_FBI"
},
{
"code": "200045",
"value": "USGOV_DHS"
},
{
"code": "200046",
"value": "shenxun_Secure_Call_android"
},
{
"code": "200047",
"value": "shenxun_Secure_Call_web"
},
{
"code": "200048",
"value": "UProxy"
},
{
"code": "200049",
"value": "soma"
},
{
"code": "200050",
"value": "PlayerUnknown's_Battlegrounds"
},
{
"code": "200051",
"value": "STEAM"
},
{
"code": "200052",
"value": "dalai_lama"
},
{
"code": "200053",
"value": "Steam_forum"
},
{
"code": "200054",
"value": "Microsoft Online Certificate"
},
{
"code": "200055",
"value": "sogou_spider"
},
{
"code": "200056",
"value": "baidu_mobie"
},
{
"code": "200057",
"value": "Apple Push Service"
},
{
"code": "200058",
"value": "IQIYI"
},
{
"code": "200059",
"value": "baidu_spider"
},
{
"code": "200060",
"value": "Weibo"
},
{
"code": "200061",
"value": "Apple captive service"
},
{
"code": "200062",
"value": "Microsoft wns"
},
{
"code": "200063",
"value": "360_safe_pc"
},
{
"code": "200064",
"value": "Sogou Public Service"
},
{
"code": "200065",
"value": "Lenovo app_POST service"
},
{
"code": "200066",
"value": "Apple securityd service"
},
{
"code": "200067",
"value": "Weather pass"
},
{
"code": "200068",
"value": "Apple Service Pack"
},
{
"code": "200069",
"value": "Fast pressure"
},
{
"code": "200070",
"value": "SemrushBot"
},
{
"code": "200071",
"value": "Adrefs_spider"
},
{
"code": "200072",
"value": "AndroidDownloadManager"
},
{
"code": "200073",
"value": "XenderTop"
},
{
"code": "200074",
"value": "microsoft_update"
},
{
"code": "200075",
"value": "Youku"
},
{
"code": "200076",
"value": "Google_spider"
},
{
"code": "200077",
"value": "Microsoft User Experience and Telemetry Components"
},
{
"code": "200078",
"value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"
},
{
"code": "200079",
"value": "Microsoft ncsi"
},
{
"code": "200080",
"value": "Microsoft Privacy Collection Service"
},
{
"code": "200081",
"value": "uTorrent"
},
{
"code": "200082",
"value": "Edge"
},
{
"code": "200083",
"value": "Lenovo Music Store"
},
{
"code": "200084",
"value": "LieBao"
},
{
"code": "200085",
"value": "majesti_spider"
},
{
"code": "200086",
"value": "DotBot"
},
{
"code": "200087",
"value": "Millet Update"
},
{
"code": "200088",
"value": "Today’s headlines"
},
{
"code": "200089",
"value": "Microsoft live"
},
{
"code": "200090",
"value": "Microsoft OneNote"
},
{
"code": "200091",
"value": "Bing_spider"
},
{
"code": "200092",
"value": "Apple location service"
},
{
"code": "200093",
"value": "Kuaishou"
},
{
"code": "200094",
"value": "LeTV video"
},
{
"code": "200095",
"value": "QQ"
},
{
"code": "200096",
"value": "Wps"
},
{
"code": "200097",
"value": "kugou music"
},
{
"code": "200098",
"value": "kuwo music"
},
{
"code": "200099",
"value": "360_common_service"
},
{
"code": "200100",
"value": "Camera360"
},
{
"code": "200101",
"value": "Outlook"
},
{
"code": "200102",
"value": "zhihu"
},
{
"code": "200103",
"value": "Tencent video"
},
{
"code": "200104",
"value": "funshion"
},
{
"code": "200105",
"value": "QQ shared service"
},
{
"code": "200106",
"value": "Microsoft wdcp service"
},
{
"code": "200107",
"value": "Microsoft Media_center_pc"
},
{
"code": "200108",
"value": "360 phone helper"
},
{
"code": "200109",
"value": "Kingsoft Public Service"
},
{
"code": "200110",
"value": "Ios_wifi connection"
},
{
"code": "200111",
"value": "Teamviewer"
},
{
"code": "200112",
"value": "Baidu cloud disk"
},
{
"code": "200113",
"value": "Tencent News"
},
{
"code": "200114",
"value": "Baidu map"
},
{
"code": "200115",
"value": "Panda TV"
},
{
"code": "200116",
"value": "Thunder"
},
{
"code": "200117",
"value": "NetEase cloud music"
},
{
"code": "200118",
"value": "QQ music"
},
{
"code": "200119",
"value": "Itools"
},
{
"code": "200120",
"value": "Jingdong Finance"
},
{
"code": "200121",
"value": "PycURL"
},
{
"code": "200122",
"value": "Yahoo_Spider"
},
{
"code": "200123",
"value": "Himalayan FM"
},
{
"code": "200124",
"value": "Youdao_dict"
},
{
"code": "200125",
"value": "Microsoft_spynet"
},
{
"code": "200126",
"value": "proximicBot"
},
{
"code": "200127",
"value": "Foxit_reader"
},
{
"code": "200128",
"value": "Sohu Video"
},
{
"code": "200129",
"value": "BlueStacks"
},
{
"code": "200130",
"value": "Beauty group"
},
{
"code": "200131",
"value": "Kmplayer"
},
{
"code": "200132",
"value": "TaoBao"
},
{
"code": "200133",
"value": "Exabot"
},
{
"code": "200134",
"value": "Ubuntu_apt_get"
},
{
"code": "200135",
"value": "Oriental Fortune"
},
{
"code": "200136",
"value": "JikeSpider"
},
{
"code": "200137",
"value": "Itunesstored"
},
{
"code": "200138",
"value": "GAD map"
},
{
"code": "200139",
"value": "ifeng News"
},
{
"code": "200140",
"value": "BoardReaderBot"
},
{
"code": "200141",
"value": "AmazonBot"
},
{
"code": "200142",
"value": "Alipay"
},
{
"code": "200143",
"value": "Alipay security controls"
},
{
"code": "200144",
"value": "360 security guards (antivirus)"
},
{
"code": "200145",
"value": "360 logon service"
},
{
"code": "200146",
"value": "BLP_bbot"
},
{
"code": "200147",
"value": "Keep"
},
{
"code": "200148",
"value": "WiFi universal key"
},
{
"code": "200149",
"value": "Baidu Music"
},
{
"code": "200150",
"value": "Vip.com"
},
{
"code": "200151",
"value": "JD.COM"
},
{
"code": "200152",
"value": "sina"
},
{
"code": "200153",
"value": "youdao Public service"
},
{
"code": "200154",
"value": "Jinshan public service"
},
{
"code": "200155",
"value": "Baidu guard"
},
{
"code": "200156",
"value": "Apple system update service"
},
{
"code": "200157",
"value": "momo"
},
{
"code": "200158",
"value": "CNZZ statistics"
},
{
"code": "200159",
"value": "Microsoft one_drive service"
},
{
"code": "200160",
"value": "WindowsStore"
},
{
"code": "200161",
"value": "duba"
},
{
"code": "200162",
"value": "Baidu HD"
},
{
"code": "200163",
"value": "qunar"
},
{
"code": "200164",
"value": "qianxunyingshi"
},
{
"code": "200165",
"value": "KuaiyanKanShuSpider"
},
{
"code": "200166",
"value": "Mail.RU_Bot_Robot"
},
{
"code": "200167",
"value": "MpCommunication"
},
{
"code": "200168",
"value": "Weather forecast"
},
{
"code": "200169",
"value": "Ltx71_spider"
},
{
"code": "200170",
"value": "Ia_archiver"
},
{
"code": "200171",
"value": "Ali Wangwang"
},
{
"code": "200172",
"value": "UC home page (information)"
},
{
"code": "200173",
"value": "Yeti"
},
{
"code": "200174",
"value": "Rtorrent"
},
{
"code": "200175",
"value": "QQPim"
},
{
"code": "200176",
"value": "NetEase News"
},
{
"code": "200177",
"value": "sina sports"
},
{
"code": "200178",
"value": "Exchange of foreign exchange"
},
{
"code": "200179",
"value": "BlueStacks update"
},
{
"code": "200180",
"value": "youdao"
},
{
"code": "200181",
"value": "QQ computer housekeeper"
},
{
"code": "200182",
"value": "UltraEdit"
},
{
"code": "200183",
"value": "EasouSpider"
},
{
"code": "200184",
"value": "QQ Zone"
},
{
"code": "200185",
"value": "Foxmail"
},
{
"code": "200186",
"value": "Pingdom.com"
},
{
"code": "200187",
"value": "Sina Finance"
},
{
"code": "200188",
"value": "QQ one key login"
},
{
"code": "200189",
"value": "Norton"
},
{
"code": "200190",
"value": "Baidu waimai"
},
{
"code": "200191",
"value": "YaCy"
},
{
"code": "200192",
"value": "Haitong e Haitong"
},
{
"code": "200193",
"value": "AdsBot-Google"
},
{
"code": "200194",
"value": "Guangfa Yijin"
},
{
"code": "200195",
"value": "Ali security program"
},
{
"code": "200196",
"value": "Cliqzbot"
},
{
"code": "200197",
"value": "Mobike"
},
{
"code": "200198",
"value": "Kingsoft PowerWord"
},
{
"code": "200199",
"value": "meishij"
},
{
"code": "200200",
"value": "CCB mobile bank"
},
{
"code": "200201",
"value": "Mega SkyDrive"
},
{
"code": "200202",
"value": "douyu"
},
{
"code": "200203",
"value": "Flamingo_SearchEngine"
},
{
"code": "200204",
"value": "Lenovo shop"
},
{
"code": "200205",
"value": "Uc news"
},
{
"code": "200206",
"value": "Volcano small video"
},
{
"code": "200207",
"value": "Meitu Xiu Xiu"
},
{
"code": "200208",
"value": "Kaspersky"
},
{
"code": "200209",
"value": "AcFun"
},
{
"code": "200210",
"value": "Slackbot"
},
{
"code": "200211",
"value": "Snowball"
},
{
"code": "200212",
"value": "SafeDNSBot"
},
{
"code": "200213",
"value": "Great wisdom"
},
{
"code": "200214",
"value": "Mailbox of NetEase"
},
{
"code": "200215",
"value": "peasecod"
},
{
"code": "200216",
"value": "Gold ten data"
},
{
"code": "200217",
"value": "Linkdexbot"
},
{
"code": "200218",
"value": "Sina blog"
},
{
"code": "200219",
"value": "Ginger"
},
{
"code": "200220",
"value": "Microsoft activation verification"
},
{
"code": "200221",
"value": "Facebot"
},
{
"code": "200222",
"value": "Dangdang"
},
{
"code": "200223",
"value": "QQ cyclone"
},
{
"code": "200224",
"value": "Wp_feedbot"
},
{
"code": "200225",
"value": "ICBC"
},
{
"code": "200226",
"value": "Public service"
},
{
"code": "200227",
"value": "Magpie-crawler"
},
{
"code": "200228",
"value": "xianyu"
},
{
"code": "200229",
"value": "GetIntentBot"
},
{
"code": "200230",
"value": "Papers"
},
{
"code": "200231",
"value": "NewsGator"
},
{
"code": "200232",
"value": "RankFlexBot"
},
{
"code": "200233",
"value": "rogerbot"
},
{
"code": "200234",
"value": "SurdotlyBot"
},
{
"code": "200235",
"value": "CheckMarkNetworkBot"
},
{
"code": "200236",
"value": "pyspider"
},
{
"code": "200237",
"value": "spbot"
},
{
"code": "200238",
"value": "Huaxia Bank"
},
{
"code": "200239",
"value": "glory of king"
},
{
"code": "200240",
"value": "msnbot-Products"
},
{
"code": "200241",
"value": "archive.org"
},
{
"code": "200242",
"value": "applebot"
},
{
"code": "200243",
"value": "alicall"
},
{
"code": "200244",
"value": "Superfeedrbot"
},
{
"code": "200245",
"value": "QQ mailbox"
},
{
"code": "200246",
"value": "coccocbot-webBot"
},
{
"code": "200247",
"value": "dingtalk"
},
{
"code": "200248",
"value": "Dragonbot"
},
{
"code": "200249",
"value": "Mediatoolkitbot"
},
{
"code": "200250",
"value": "bitcomet"
},
{
"code": "200251",
"value": "filetopia"
},
{
"code": "200252",
"value": "flashget"
},
{
"code": "200253",
"value": "oracle"
},
{
"code": "200254",
"value": "yyvoice"
},
{
"code": "200255",
"value": "imesh"
},
{
"code": "200256",
"value": "citrix"
},
{
"code": "200257",
"value": "corba"
},
{
"code": "200258",
"value": "dameware"
},
{
"code": "200259",
"value": "pcanywhere"
},
{
"code": "200260",
"value": "qq_rdp"
},
{
"code": "200261",
"value": "poco"
},
{
"code": "200262",
"value": "qqdownload"
},
{
"code": "200263",
"value": "applejuice"
},
{
"code": "200264",
"value": "stealthnet"
},
{
"code": "200265",
"value": "winmx"
},
{
"code": "200266",
"value": "emule"
},
{
"code": "200267",
"value": "emule_decrypt"
},
{
"code": "200268",
"value": "qvod"
},
{
"code": "200269",
"value": "mysql"
},
{
"code": "200270",
"value": "icecast"
},
{
"code": "200271",
"value": "mms"
},
{
"code": "200272",
"value": "pplive"
},
{
"code": "200273",
"value": "ppstream"
},
{
"code": "200274",
"value": "sopcast"
},
{
"code": "200275",
"value": "tvants"
},
{
"code": "200276",
"value": "sohutv"
},
{
"code": "200277",
"value": "iku"
},
{
"code": "200278",
"value": "qqlive"
},
{
"code": "200279",
"value": "rsync"
},
{
"code": "200280",
"value": "xunyou_speedup"
},
{
"code": "200281",
"value": "msn"
},
{
"code": "200282",
"value": "popo"
},
{
"code": "200283",
"value": "sinauc"
},
{
"code": "200284",
"value": "qqbattle"
},
{
"code": "200285",
"value": "quake"
},
{
"code": "200286",
"value": "xbox"
},
{
"code": "200287",
"value": "wow"
},
{
"code": "200288",
"value": "lol"
},
{
"code": "200289",
"value": "PostgreSQL"
},
{
"code": "200290",
"value": "TDS"
},
{
"code": "200291",
"value": "VMware"
},
{
"code": "200292",
"value": "Kontiki"
},
{
"code": "200293",
"value": "OpenFT"
},
{
"code": "200294",
"value": "Gnutella"
},
{
"code": "200295",
"value": "eDonkey"
},
{
"code": "200296",
"value": "AVI"
},
{
"code": "200297",
"value": "RealMedia"
},
{
"code": "200298",
"value": "Windowsmedia"
},
{
"code": "200299",
"value": "MOVE"
},
{
"code": "200300",
"value": "Feidian"
},
{
"code": "200301",
"value": "Zattoo"
},
{
"code": "200302",
"value": "SHOUTCast"
},
{
"code": "200303",
"value": "TVUplayer"
},
{
"code": "200304",
"value": "VeohTV"
},
{
"code": "200305",
"value": "Soulseek"
},
{
"code": "200306",
"value": "GaduGadu"
},
{
"code": "200307",
"value": "Oscar"
},
{
"code": "200308",
"value": "Yahoo"
},
{
"code": "200309",
"value": "Battlefield"
},
{
"code": "200310",
"value": "Halflife2"
},
{
"code": "200311",
"value": "World of Warcraft"
},
{
"code": "200312",
"value": "USENET"
},
{
"code": "200313",
"value": "AFP"
},
{
"code": "200314",
"value": "Truphone"
},
{
"code": "200315",
"value": "Armagetron"
},
{
"code": "200316",
"value": "CrossFire"
},
{
"code": "200317",
"value": "Dofus"
},
{
"code": "200318",
"value": "Fiesta"
},
{
"code": "200319",
"value": "Florensia"
},
{
"code": "200320",
"value": "Guildwars"
},
{
"code": "200321",
"value": "HTTP Application Activesync"
},
{
"code": "200322",
"value": "MapleStory"
},
{
"code": "200323",
"value": "msSQL"
},
{
"code": "200324",
"value": "WARCRAFT3"
},
{
"code": "200325",
"value": "World of Kung Fu"
},
{
"code": "200326",
"value": "MEEBO"
},
{
"code": "200327",
"value": "DropBox"
},
{
"code": "200328",
"value": "HTTP Proxy"
},
{
"code": "200329",
"value": "Netflix"
},
{
"code": "200330",
"value": "CitrixOnline/GotoMeeting"
},
{
"code": "200331",
"value": "Webex"
},
{
"code": "200332",
"value": "Apple iCloud"
},
{
"code": "200333",
"value": "Apple iTunes"
},
{
"code": "200334",
"value": "WindowsUpdate"
},
{
"code": "200335",
"value": "Tuenti"
},
{
"code": "200336",
"value": "LotusNotes"
},
{
"code": "200337",
"value": "RemoteScan"
},
{
"code": "200338",
"value": "Spotify"
},
{
"code": "200339",
"value": "CiscoVPN"
},
{
"code": "200340",
"value": "TeamSpeak"
},
{
"code": "200341",
"value": "UbuntuONE"
},
{
"code": "200342",
"value": "CNN"
},
{
"code": "200343",
"value": "Wikipedia"
},
{
"code": "200344",
"value": "Collectd"
},
{
"code": "200345",
"value": "Redis"
},
{
"code": "200346",
"value": "ZeroMQ"
},
{
"code": "200347",
"value": "Stracraft"
},
{
"code": "200348",
"value": "Simet"
},
{
"code": "200349",
"value": "OpenSignal"
},
{
"code": "200350",
"value": "99Taxi"
},
{
"code": "200351",
"value": "GloboTV"
},
{
"code": "200352",
"value": "Deezer"
},
{
"code": "200353",
"value": "Microsoft cloud services"
},
{
"code": "200354",
"value": "Twitch"
},
{
"code": "200355",
"value": "KakaoTalk Voice and Chat"
},
{
"code": "200357",
"value": "360.cn"
},
{
"code": "200358",
"value": "360Safeguard_P2P"
},
{
"code": "200359",
"value": "4D"
},
{
"code": "200360",
"value": "acercloud"
},
{
"code": "200361",
"value": "acestream"
},
{
"code": "200362",
"value": "airdroid"
},
{
"code": "200363",
"value": "airmedia"
},
{
"code": "200364",
"value": "akamai"
},
{
"code": "200365",
"value": "akamai_transfer"
},
{
"code": "200366",
"value": "amanda"
},
{
"code": "200367",
"value": "amp"
},
{
"code": "200368",
"value": "Appear.in"
},
{
"code": "200369",
"value": "ares"
},
{
"code": "200370",
"value": "ARKSurvivalEvolved"
},
{
"code": "200371",
"value": "ARMA3Server"
},
{
"code": "200372",
"value": "ARMA2Server"
},
{
"code": "200373",
"value": "AvastSecureDNS"
},
{
"code": "200374",
"value": "azureus"
},
{
"code": "200375",
"value": "backweb"
},
{
"code": "200376",
"value": "BadBaidu"
},
{
"code": "200377",
"value": "baofeng"
},
{
"code": "200378",
"value": "bitext"
},
{
"code": "200379",
"value": "BlackDesertOnline"
},
{
"code": "200380",
"value": "Blizzard"
},
{
"code": "200381",
"value": "bmdp"
},
{
"code": "200382",
"value": "bncs"
},
{
"code": "200383",
"value": "btdht"
},
{
"code": "200384",
"value": "btsync"
},
{
"code": "200385",
"value": "cacaoweb"
},
{
"code": "200386",
"value": "chatango"
},
{
"code": "200387",
"value": "chivalry"
},
{
"code": "200388",
"value": "cirn"
},
{
"code": "200389",
"value": "cisco_sslvpn"
},
{
"code": "200390",
"value": "clash_of_clans"
},
{
"code": "200391",
"value": "Clubbox"
},
{
"code": "200392",
"value": "cod"
},
{
"code": "200393",
"value": "cod_waw"
},
{
"code": "200394",
"value": "combatarms"
},
{
"code": "200395",
"value": "combatarms_p2p"
},
{
"code": "200396",
"value": "ConquerOnline"
},
{
"code": "200397",
"value": "Counterstrike1.6"
},
{
"code": "200398",
"value": "Checkpoint_RDP"
},
{
"code": "200399",
"value": "crashplan"
},
{
"code": "200400",
"value": "crossout"
},
{
"code": "200401",
"value": "cryptic"
},
{
"code": "200402",
"value": "cvs"
},
{
"code": "200403",
"value": "dash"
},
{
"code": "200404",
"value": "dc"
},
{
"code": "200405",
"value": "db2"
},
{
"code": "200406",
"value": "dell_backup"
},
{
"code": "200407",
"value": "Demonware"
},
{
"code": "200408",
"value": "destiny"
},
{
"code": "200409",
"value": "diablo2"
},
{
"code": "200410",
"value": "isakmp"
},
{
"code": "200411",
"value": "jedi"
},
{
"code": "200412",
"value": "jedi_academy"
},
{
"code": "200413",
"value": "jx3online"
},
{
"code": "200414",
"value": "kankan"
},
{
"code": "200415",
"value": "kaseya"
},
{
"code": "200416",
"value": "kazaa"
},
{
"code": "200417",
"value": "kuaibo"
},
{
"code": "200418",
"value": "lifeforge"
},
{
"code": "200419",
"value": "linkproof"
},
{
"code": "200420",
"value": "litecoin"
},
{
"code": "200421",
"value": "maxicloud"
},
{
"code": "200422",
"value": "merakicloud"
},
{
"code": "200423",
"value": "minecraft"
},
{
"code": "200424",
"value": "mongo"
},
{
"code": "200425",
"value": "msoffice_mac"
},
{
"code": "200426",
"value": "munin"
},
{
"code": "200427",
"value": "mzinga"
},
{
"code": "200428",
"value": "n2ping"
},
{
"code": "200429",
"value": "ncsoft"
},
{
"code": "200430",
"value": "netcat_cctv"
},
{
"code": "200431",
"value": "neverwinter"
},
{
"code": "200432",
"value": "newerth"
},
{
"code": "200433",
"value": "nintendo"
},
{
"code": "200434",
"value": "nntps"
},
{
"code": "200435",
"value": "noction"
},
{
"code": "200436",
"value": "noe"
},
{
"code": "200437",
"value": "norton_backup"
},
{
"code": "200438",
"value": "omegle"
},
{
"code": "200439",
"value": "opaserv"
},
{
"code": "200440",
"value": "orbit"
},
{
"code": "200441",
"value": "ourworld"
},
{
"code": "200442",
"value": "overwatch"
},
{
"code": "200443",
"value": "diablo3"
},
{
"code": "200444",
"value": "dianping"
},
{
"code": "200445",
"value": "dianshijia"
},
{
"code": "200446",
"value": "discord"
},
{
"code": "200447",
"value": "dogecoin"
},
{
"code": "200448",
"value": "dota2"
},
{
"code": "200449",
"value": "douyu_chat"
},
{
"code": "200450",
"value": "doyo"
},
{
"code": "200451",
"value": "driveshare"
},
{
"code": "200452",
"value": "dtls"
},
{
"code": "200453",
"value": "dueling_network"
},
{
"code": "200454",
"value": "dvrns"
},
{
"code": "200455",
"value": "dxp"
},
{
"code": "200456",
"value": "ea_games"
},
{
"code": "200457",
"value": "epson"
},
{
"code": "200458",
"value": "eso"
},
{
"code": "200459",
"value": "etrust"
},
{
"code": "200460",
"value": "fasp"
},
{
"code": "200461",
"value": "finalfantasy_xiv"
},
{
"code": "200462",
"value": "flash"
},
{
"code": "200463",
"value": "fliggy"
},
{
"code": "200464",
"value": "fortinet"
},
{
"code": "200465",
"value": "foscam"
},
{
"code": "200466",
"value": "freechal"
},
{
"code": "200467",
"value": "fring"
},
{
"code": "200468",
"value": "fuckcoin"
},
{
"code": "200469",
"value": "gamespy"
},
{
"code": "200470",
"value": "gangsofspace"
},
{
"code": "200471",
"value": "garena"
},
{
"code": "200472",
"value": "gearsofwar"
},
{
"code": "200473",
"value": "giop"
},
{
"code": "200474",
"value": "git"
},
{
"code": "200475",
"value": "glupteba"
},
{
"code": "200476",
"value": "gnutella2"
},
{
"code": "200477",
"value": "gokuchat"
},
{
"code": "200478",
"value": "google_hangouts"
},
{
"code": "200479",
"value": "gotomeeting"
},
{
"code": "200480",
"value": "gprs_tunnel"
},
{
"code": "200481",
"value": "graal_online_era"
},
{
"code": "200482",
"value": "gsm"
},
{
"code": "200483",
"value": "h1z1"
},
{
"code": "200484",
"value": "halo_online"
},
{
"code": "200485",
"value": "hamachi"
},
{
"code": "200486",
"value": "harveys"
},
{
"code": "200487",
"value": "hearthstone"
},
{
"code": "200488",
"value": "heroes_generals"
},
{
"code": "200489",
"value": "hots"
},
{
"code": "200490",
"value": "icp"
},
{
"code": "200491",
"value": "icq"
},
{
"code": "200492",
"value": "id"
},
{
"code": "200493",
"value": "idrive_sync"
},
{
"code": "200494",
"value": "ipmsg"
},
{
"code": "200495",
"value": "ipop"
},
{
"code": "200496",
"value": "ipsharkk"
},
{
"code": "200497",
"value": "palringo"
},
{
"code": "200498",
"value": "paltalk"
},
{
"code": "200499",
"value": "pando"
},
{
"code": "200500",
"value": "panipani"
},
{
"code": "200501",
"value": "pdbox"
},
{
"code": "200502",
"value": "planetside2"
},
{
"code": "200503",
"value": "portmap_rpc"
},
{
"code": "200504",
"value": "ps4_remoteplay"
},
{
"code": "200505",
"value": "psn"
},
{
"code": "200506",
"value": "psn_store"
},
{
"code": "200507",
"value": "punkbuster"
},
{
"code": "200508",
"value": "pyzor"
},
{
"code": "200509",
"value": "qcloud_ilvb"
},
{
"code": "200510",
"value": "qqpcmgr"
},
{
"code": "200511",
"value": "ramsey_dash"
},
{
"code": "200512",
"value": "razor"
},
{
"code": "200513",
"value": "rbls"
},
{
"code": "200514",
"value": "realvnc"
},
{
"code": "200515",
"value": "relay"
},
{
"code": "200516",
"value": "revolver_nblbt"
},
{
"code": "200517",
"value": "rising_storm"
},
{
"code": "200518",
"value": "roblox"
},
{
"code": "200519",
"value": "robocraft"
},
{
"code": "200520",
"value": "rpc_scan"
},
{
"code": "200521",
"value": "runescape"
},
{
"code": "200522",
"value": "sanandreas"
},
{
"code": "200523",
"value": "saprouter"
},
{
"code": "200524",
"value": "secondlife"
},
{
"code": "200525",
"value": "serialnumberd"
},
{
"code": "200526",
"value": "silkroadonline"
},
{
"code": "200527",
"value": "smite"
},
{
"code": "200528",
"value": "snapvpn"
},
{
"code": "200529",
"value": "spamfighter"
},
{
"code": "200530",
"value": "speedin"
},
{
"code": "200531",
"value": "speedtest"
},
{
"code": "200532",
"value": "spotify_broadcast"
},
{
"code": "200533",
"value": "sqlexp"
},
{
"code": "200534",
"value": "starcitizen"
},
{
"code": "200535",
"value": "starcraft"
},
{
"code": "200536",
"value": "starleaf"
},
{
"code": "200537",
"value": "steam_friends"
},
{
"code": "200538",
"value": "storm_worm"
},
{
"code": "200539",
"value": "stratum"
},
{
"code": "200540",
"value": "supl"
},
{
"code": "200541",
"value": "svn"
},
{
"code": "200542",
"value": "talesrunner"
},
{
"code": "200543",
"value": "tankix"
},
{
"code": "200544",
"value": "telecomkey"
},
{
"code": "200545",
"value": "telnet_exploit"
},
{
"code": "200546",
"value": "tencent_games"
},
{
"code": "200547",
"value": "tenfivecoin"
},
{
"code": "200548",
"value": "tensafe"
},
{
"code": "200549",
"value": "tera"
},
{
"code": "200550",
"value": "tetrisonline"
},
{
"code": "200551",
"value": "thq"
},
{
"code": "200552",
"value": "tip"
},
{
"code": "200553",
"value": "torchlight2"
},
{
"code": "200554",
"value": "traceroute"
},
{
"code": "200555",
"value": "trackmania"
},
{
"code": "200556",
"value": "tremulous"
},
{
"code": "200557",
"value": "trion"
},
{
"code": "200558",
"value": "trojan_zeroaccess"
},
{
"code": "200559",
"value": "twitcasting"
},
{
"code": "200560",
"value": "twitch_irc"
},
{
"code": "200561",
"value": "ubisoft_games"
},
{
"code": "200562",
"value": "umeye"
},
{
"code": "200563",
"value": "vainglory"
},
{
"code": "200564",
"value": "ventrilo"
},
{
"code": "200565",
"value": "vivox"
},
{
"code": "200566",
"value": "vodlocker"
},
{
"code": "200567",
"value": "vpnrobot"
},
{
"code": "200568",
"value": "vpn_unlimited"
},
{
"code": "200569",
"value": "vxworks_exploit"
},
{
"code": "200570",
"value": "warthunder"
},
{
"code": "200571",
"value": "weblogic"
},
{
"code": "200572",
"value": "web_junk"
},
{
"code": "200573",
"value": "weiqi"
},
{
"code": "200574",
"value": "win_message"
},
{
"code": "200575",
"value": "wizard101"
},
{
"code": "200576",
"value": "wns"
},
{
"code": "200577",
"value": "wolf_et"
},
{
"code": "200578",
"value": "worm_22105"
},
{
"code": "200579",
"value": "wuala"
},
{
"code": "200580",
"value": "xfire_p2p"
},
{
"code": "200581",
"value": "xiami"
},
{
"code": "200582",
"value": "xunlei"
},
{
"code": "200583",
"value": "xunlei_accel"
},
{
"code": "200584",
"value": "xunlei_jsq"
},
{
"code": "200585",
"value": "xunyou"
},
{
"code": "200586",
"value": "xymon"
},
{
"code": "200587",
"value": "yahoo_error"
},
{
"code": "200588",
"value": "yahoo_games"
},
{
"code": "200589",
"value": "yahoo_webcam"
},
{
"code": "200590",
"value": "zabbix"
},
{
"code": "200591",
"value": "zeroaccess"
},
{
"code": "200592",
"value": "zoom"
},
{
"code": "200593",
"value": "zynga"
},
{
"code": "200594",
"value": "ICMP_Flood"
},
{
"code": "200595",
"value": "IPFRAG_Flood"
},
{
"code": "200596",
"value": "SYN_Flood"
},
{
"code": "200597",
"value": "ACK_Flood"
},
{
"code": "200598",
"value": "RST_Flood"
},
{
"code": "200599",
"value": "DNS_Flood"
},
{
"code": "200600",
"value": "NTP_Flood"
},
{
"code": "200601",
"value": "UDP_Flood"
},
{
"code": "200602",
"value": "HTTP_Flood"
},
{
"code": "200603",
"value": "SSDP_Flood"
},
{
"code": "200604",
"value": "baiduP2P"
},
{
"code": "200605",
"value": "CSGlobalOffensive"
},
{
"code": "200606",
"value": "AllSeeingEye"
},
{
"code": "200607",
"value": "Bittorrent_Extension"
},
{
"code": "200608",
"value": "BitTorrentSync"
},
{
"code": "200609",
"value": "Call_of_Duty"
},
{
"code": "200612",
"value": "CitrixICA"
},
{
"code": "200613",
"value": "Citrix_Jedi"
},
{
"code": "200614",
"value": "ClashOfClans"
},
{
"code": "200615",
"value": "Canon_BJNP"
},
{
"code": "200617",
"value": "DoyoP2P"
},
{
"code": "200618",
"value": "FortiClientSSLVPN"
},
{
"code": "200619",
"value": "GTA_SanAndreas_Multiplayer"
},
{
"code": "200620",
"value": "HalfLife"
},
{
"code": "200621",
"value": "IBM-DB2"
},
{
"code": "200622",
"value": "Flash_Player"
},
{
"code": "200623",
"value": "Kugou"
},
{
"code": "200624",
"value": "LeagueOfLegends"
},
{
"code": "200625",
"value": "GluptebaBackdoor"
},
{
"code": "200626",
"value": "MedalOfHonor"
},
{
"code": "200628",
"value": "MultiTheftAuto"
},
{
"code": "200631",
"value": "NetcoreScan"
},
{
"code": "200632",
"value": "NeverwinterNights"
},
{
"code": "200633",
"value": "NoctionIRP"
},
{
"code": "200634",
"value": "JavaObjectSerialised"
},
{
"code": "200635",
"value": "RealPlayer"
},
{
"code": "200636",
"value": "TeamFortress2"
},
{
"code": "200637",
"value": "TheCrew"
},
{
"code": "200638",
"value": "TurboVPN"
},
{
"code": "200639",
"value": "MSN_Voice"
},
{
"code": "200640",
"value": "MaplestoryChina"
},
{
"code": "200641",
"value": "Message4U"
},
{
"code": "200642",
"value": "MongoDB"
},
{
"code": "200643",
"value": "NDTThroughput"
},
{
"code": "200644",
"value": "NET-MFP"
},
{
"code": "200645",
"value": "WindowsMessenger"
},
{
"code": "200646",
"value": "WolfensteinEnemyTerritory"
},
{
"code": "200647",
"value": "XboxLive"
},
{
"code": "200649",
"value": "RBL"
},
{
"code": "200650",
"value": "RPC_Exploit"
},
{
"code": "200651",
"value": "Rejection"
},
{
"code": "200655",
"value": "Silverplatter_DXP"
},
{
"code": "200659",
"value": "TencentWNS"
},
{
"code": "200660",
"value": "TrionGames"
},
{
"code": "200661",
"value": "Trojan.Win32.Generic!SB"
},
{
"code": "200666",
"value": "WorldOfWarcraft"
},
{
"code": "200667",
"value": "YY"
},
{
"code": "200669",
"value": "nopayload"
},
{
"code": "200670",
"value": "No_FirstPkt"
},
{
"code": "200671",
"value": "Invalid"
}
],
"visibility": "disabled"
},
"label": "Application ID"
},
{
"name": "common_protocol_id",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "NOT SPECIFIED"
},
{
"code": "10000",
"value": "NOT SPECIFIED"
},
{
"code": "10001",
"value": "TCP"
},
{
"code": "10002",
"value": "UDP"
},
{
"code": "10003",
"value": "DNS"
},
{
"code": "10004",
"value": "FTP"
},
{
"code": "10005",
"value": "FTPS"
},
{
"code": "10006",
"value": "GRE"
},
{
"code": "10007",
"value": "HTTP"
},
{
"code": "10008",
"value": "HTTPS"
},
{
"code": "10009",
"value": "ICMP"
},
{
"code": "10010",
"value": "IKE"
},
{
"code": "10011",
"value": "IMAP"
},
{
"code": "10012",
"value": "IMAPS"
},
{
"code": "10013",
"value": "IPSEC"
},
{
"code": "10014",
"value": "XMPP"
},
{
"code": "10015",
"value": "L2TP"
},
{
"code": "10016",
"value": "NTP"
},
{
"code": "10017",
"value": "POP3"
},
{
"code": "10018",
"value": "POP3 SSL"
},
{
"code": "10019",
"value": "PPTP"
},
{
"code": "10020",
"value": "Quic"
},
{
"code": "10021",
"value": "SIP"
},
{
"code": "10022",
"value": "smb"
},
{
"code": "10023",
"value": "SMTP"
},
{
"code": "10024",
"value": "SMTPS"
},
{
"code": "10025",
"value": "SPDY"
},
{
"code": "10028",
"value": "SSH"
},
{
"code": "10029",
"value": "SSL"
},
{
"code": "10030",
"value": "SOCKS"
},
{
"code": "10031",
"value": "BITTORRENT"
},
{
"code": "10032",
"value": "RTSP"
},
{
"code": "10033",
"value": "TELNET"
},
{
"code": "10034",
"value": "UTP"
},
{
"code": "10035",
"value": "FASTTRACK"
},
{
"code": "10036",
"value": "SKINNY"
},
{
"code": "10037",
"value": "IAX"
},
{
"code": "10038",
"value": "MGCP"
},
{
"code": "10039",
"value": "RTCP"
},
{
"code": "10040",
"value": "RTP"
},
{
"code": "10041",
"value": "VNC"
},
{
"code": "10042",
"value": "XDMCP"
},
{
"code": "10043",
"value": "RDP"
},
{
"code": "10044",
"value": "AIMINI"
},
{
"code": "10045",
"value": "IPP"
},
{
"code": "10046",
"value": "NFS"
},
{
"code": "10047",
"value": "TFTP"
},
{
"code": "10048",
"value": "BGP"
},
{
"code": "10049",
"value": "DHCP"
},
{
"code": "10050",
"value": "DHCPV6"
},
{
"code": "10051",
"value": "FINGER"
},
{
"code": "10052",
"value": "KERBEROS"
},
{
"code": "10053",
"value": "LDAP"
},
{
"code": "10054",
"value": "MDNS"
},
{
"code": "10055",
"value": "NNTP"
},
{
"code": "10056",
"value": "SNMP"
},
{
"code": "10057",
"value": "SSDP"
},
{
"code": "10058",
"value": "SYSLOG"
},
{
"code": "10059",
"value": "WHOIS"
},
{
"code": "10060",
"value": "RADIUS"
},
{
"code": "10061",
"value": "OPENVPN"
},
{
"code": "10062",
"value": "STUN"
},
{
"code": "10063",
"value": "TEREDO"
},
{
"code": "10064",
"value": "GTP"
},
{
"code": "10065",
"value": "RTMP"
},
{
"code": "10066",
"value": "chargen_tcp_udp"
},
{
"code": "10067",
"value": "llmnr_udp"
},
{
"code": "10068",
"value": "nbns_udp"
},
{
"code": "10069",
"value": "NETBIOS"
},
{
"code": "10070",
"value": "DirectDownloadLink"
},
{
"code": "10071",
"value": "I23V5"
},
{
"code": "10072",
"value": "DirectConnect"
},
{
"code": "10073",
"value": "OFF"
},
{
"code": "10074",
"value": "OGG"
},
{
"code": "10075",
"value": "MPEG"
},
{
"code": "10076",
"value": "IRC"
},
{
"code": "10077",
"value": "Jabber"
},
{
"code": "10078",
"value": "VRRP"
},
{
"code": "10079",
"value": "IGMP"
},
{
"code": "10080",
"value": "EGP"
},
{
"code": "10081",
"value": "SCTP"
},
{
"code": "10082",
"value": "OSPF"
},
{
"code": "10083",
"value": "IP in IP"
},
{
"code": "10084",
"value": "ICMPv6"
},
{
"code": "10085",
"value": "DCE RPC"
},
{
"code": "10086",
"value": "NetFlow_IPFIX"
},
{
"code": "10087",
"value": "sFlow"
},
{
"code": "10088",
"value": "HTTP Connect (SSL over HTTP)"
},
{
"code": "10089",
"value": "SAP"
},
{
"code": "10090",
"value": "UPnP"
},
{
"code": "10091",
"value": "H323"
},
{
"code": "10092",
"value": "Megaco"
},
{
"code": "10094",
"value": "bacnet"
},
{
"code": "10096",
"value": "bjnp"
},
{
"code": "10097",
"value": "cgp"
},
{
"code": "10098",
"value": "dahua"
},
{
"code": "10099",
"value": "dcc"
},
{
"code": "10100",
"value": "kademlia"
},
{
"code": "10101",
"value": "lansync"
},
{
"code": "10102",
"value": "ldap_ad"
},
{
"code": "10103",
"value": "llp2p"
},
{
"code": "10104",
"value": "mfnp"
},
{
"code": "10105",
"value": "mp2p"
},
{
"code": "10106",
"value": "msn_cache"
},
{
"code": "10107",
"value": "msn_video"
},
{
"code": "10108",
"value": "msnc"
},
{
"code": "10109",
"value": "netflow"
},
{
"code": "10110",
"value": "notes_rpc"
},
{
"code": "10111",
"value": "esp"
},
{
"code": "10112",
"value": "fbcdn_ssl"
},
{
"code": "10113",
"value": "forticlient_sslvpn"
},
{
"code": "10114",
"value": "rfb"
},
{
"code": "10115",
"value": "rtmfp"
},
{
"code": "10117",
"value": "slp"
},
{
"code": "10118",
"value": "steam_inhomebroadcast"
},
{
"code": "10119",
"value": "steam_localbroadcast"
},
{
"code": "10120",
"value": "tpkt"
},
{
"code": "10121",
"value": "xmpps"
},
{
"code": "10122",
"value": "S7COMM"
},
{
"code": "10123",
"value": "CitrixCGP"
},
{
"code": "10124",
"value": "ID_Protocol"
},
{
"code": "10125",
"value": "SMTP_Secure"
},
{
"code": "10126",
"value": "NAT-PMP"
}
],
"visibility": "disabled"
},
"label": "Protocol ID"
},
{
"name": "common_start_time",
"type": "int",
"doc": {
"constraints": {
"type": "timestamp"
},
"visibility": "hidden"
},
"label": "Start Time"
},
{
"name": "common_end_time",
"type": "int",
"doc": {
"constraints": {
"type": "timestamp"
},
"visibility": "hidden"
},
"label": "End Time"
},
{
"name": "common_establish_latency_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Establish Latency(ms)"
},
{
"name": "common_con_duration_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Duration(ms)"
},
{
"name": "common_stream_dir",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "c2s"
},
{
"code": "2",
"value": "s2c"
},
{
"code": "3",
"value": "double"
}
]
},
"label": "Stream Direction"
},
{
"name": "common_address_list",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Address List"
},
{
"name": "common_has_dup_traffic",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "No"
},
{
"code": "1",
"value": "Yes"
}
],
"visibility": "hidden"
},
"label": "Duplication Traffic"
},
{
"name": "common_stream_error",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Stream Error"
},
{
"name": "common_stream_trace_id",
"type": "long",
"doc": {
"allow_query": "true"
},
"label": "Session ID"
},
{
"name": "http_url",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "URL"
},
{
"name": "http_host",
"type": "string",
"doc": {
"format": {
"functions": "sub_domain",
"appendTo": "http_domain"
}
},
"label": "Host"
},
{
"name": "http_domain",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "Domain"
},
{
"name": "http_request_line",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Request Line"
},
{
"name": "http_response_line",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Response Line"
},
{
"name": "http_request_header",
"type": "string",
"label": "Request Headers"
},
{
"name": "http_response_header",
"type": "string",
"label": "Response Headers"
},
{
"name": "http_request_body",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "Request Body"
},
{
"name": "http_response_body",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "Response Body"
},
{
"name": "http_request_body_key",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Request Body Key"
},
{
"name": "http_response_body_key",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Response Body Key"
},
{
"name": "http_proxy_flag",
"type": "int",
"label": "Proxy Flag"
},
{
"name": "http_sequence",
"type": "int",
"label": "Sequence"
},
{
"name": "http_snapshot",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Http Snapshot"
},
{
"name": "http_cookie",
"type": "string",
"label": "Cookie"
},
{
"name": "http_referer",
"type": "string",
"label": "Referer"
},
{
"name": "http_user_agent",
"type": "string",
"label": "User Agent"
},
{
"name": "http_content_length",
"type": "string",
"label": "Content Length"
},
{
"name": "http_content_type",
"type": "string",
"label": "Content Type"
},
{
"name": "http_set_cookie",
"type": "string",
"label": "Set Cookie"
},
{
"name": "http_version",
"type": "string",
"label": "Version"
},
{
"name": "http_response_lantency_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Response Latency(ms)"
},
{
"name": "http_session_duration_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Session Duration(ms)"
},
{
"name": "mail_protocol_type",
"type": "string",
"label": "Protocol Type"
},
{
"name": "mail_account",
"type": "string",
"label": "Account"
},
{
"name": "mail_from_cmd",
"type": "string",
"label": "From CMD"
},
{
"name": "mail_to_cmd",
"type": "string",
"label": "To CMD"
},
{
"name": "mail_from",
"type": "string",
"doc": {
"constraints": {
"type": "email"
}
},
"label": "From"
},
{
"name": "mail_to",
"type": "string",
"doc": {
"constraints": {
"type": "email"
}
},
"label": "To"
},
{
"name": "mail_cc",
"type": "string",
"label": "CC"
},
{
"name": "mail_bcc",
"type": "string",
"label": "BCC"
},
{
"name": "mail_subject",
"type": "string",
"doc": {
"format": {
"functions": "decode_of_base64",
"param": "mail_subject_charset"
}
},
"label": "Subject"
},
{
"name": "mail_subject_charset",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Subject Charset"
},
{
"name": "mail_content",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Content"
},
{
"name": "mail_content_charset",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Content Charset"
},
{
"name": "mail_attachment_name",
"type": "string",
"doc": {
"format": {
"functions": "decode_of_base64",
"param": "mail_attachment_name_charset"
}
},
"label": "Attachment"
},
{
"name": "mail_attachment_name_charset",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Attachment Charset"
},
{
"name": "mail_attachment_content",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Attachment Content"
},
{
"name": "mail_eml_file",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "EML File"
},
{
"name": "mail_snapshot",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Snapshot"
},
{
"name": "dns_message_id",
"type": "int",
"label": "Message ID"
},
{
"name": "dns_qr",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "QUERY"
},
{
"code": "1",
"value": "REESPONSE"
}
]
},
"label": "QR"
},
{
"name": "dns_opcode",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "QUERY"
},
{
"code": "1",
"value": "IQUERY"
},
{
"code": "2",
"value": "STATUS"
},
{
"code": "5",
"value": "UPDATE"
}
]
},
"label": "OPCODE"
},
{
"name": "dns_aa",
"type": "int",
"label": "AA"
},
{
"name": "dns_tc",
"type": "int",
"label": "TC"
},
{
"name": "dns_rd",
"type": "int",
"label": "RD"
},
{
"name": "dns_ra",
"type": "int",
"label": "RA"
},
{
"name": "dns_rcode",
"type": "int",
"label": "RCODE"
},
{
"name": "dns_qdcount",
"type": "int",
"label": "QDCOUNT"
},
{
"name": "dns_ancount",
"type": "int",
"label": "ANCOUNT"
},
{
"name": "dns_nscount",
"type": "int",
"label": "NSCOUNT"
},
{
"name": "dns_arcount",
"type": "int",
"label": "ARCOUNT"
},
{
"name": "dns_qname",
"type": "string",
"label": "QNAME"
},
{
"name": "dns_qtype",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "A"
},
{
"code": "2",
"value": "NS"
},
{
"code": "5",
"value": "CNAME"
},
{
"code": "6",
"value": "SOA"
},
{
"code": "11",
"value": "WKS"
},
{
"code": "12",
"value": "PTR"
},
{
"code": "13",
"value": "HINFO"
},
{
"code": "11",
"value": "WKS"
},
{
"code": "15",
"value": "MX"
},
{
"code": "28",
"value": "AAAA"
}
]
},
"label": "QTYPE"
},
{
"name": "dns_qclass",
"type": "int",
"label": "QCLASS"
},
{
"name": "dns_cname",
"type": "string",
"label": "CNAME"
},
{
"name": "dns_sub",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "DNS"
},
{
"code": "2",
"value": "DNSSEC"
}
]
},
"label": "SUB"
},
{
"name": "dns_rr",
"type": "string",
"label": "RR"
},
{
"name": "ssl_version",
"type": "string",
"label": "Version"
},
{
"name": "ssl_sni",
"type": "string",
"doc": {
"allow_query": "true",
"format": {
"functions": "sub_domain",
"appendTo": "http_domain"
}
},
"label": "SNI"
},
{
"name": "ssl_san",
"type": "string",
"label": "SAN"
},
{
"name": "ssl_cn",
"type": "string",
"label": "CN"
},
{
"name": "ssl_pinningst",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Not Pinning"
},
{
"code": "1",
"value": "Pinning"
},
{
"code": "2",
"value": "Maybe Pinning"
}
]
},
"label": "Pinning"
},
{
"name": "ssl_intercept_state",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Passthrough"
},
{
"code": "1",
"value": "Intercept"
},
{
"code": "2",
"value": "Shutdown"
}
]
},
"label": "Intercept State"
},
{
"name": "ssl_server_side_latency",
"type": "int",
"label": "Server Side Latency(ms)"
},
{
"name": "ssl_client_side_latency",
"type": "int",
"label": "Client Side Latency(ms)"
},
{
"name": "ssl_server_side_version",
"type": "string",
"label": "Server Side Version"
},
{
"name": "ssl_client_side_version",
"type": "string",
"label": "Client Side Version"
},
{
"name": "ssl_cert_verify",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "No"
},
{
"code": "1",
"value": "Yes"
}
]
},
"label": "Certificate Verify"
},
{
"name": "ssl_error",
"type": "string",
"label": "Error"
},
{
"name": "ssl_con_latency_ms",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Connection Latency(ms)"
},
{
"name": "ftp_account",
"type": "string",
"label": "Account"
},
{
"name": "ftp_url",
"type": "string",
"label": "URL"
},
{
"name": "ftp_content",
"type": "string",
"label": "Content"
},
{
"name": "bgp_type",
"type": "int",
"label": "Type"
},
{
"name": "bgp_as_num",
"type": "string",
"label": "AS Number"
},
{
"name": "bgp_route",
"type": "string",
"label": "Route"
},
{
"name": "voip_calling_account",
"type": "string",
"label": "Calling Account"
},
{
"name": "voip_called_account",
"type": "string",
"label": "Called Account"
},
{
"name": "voip_calling_number",
"type": "string",
"label": "Calling Number"
},
{
"name": "voip_called_number",
"type": "string",
"label": "Called Number"
},
{
"name": "streaming_media_url",
"type": "string",
"label": "Media URL"
},
{
"name": "streaming_media_protocol",
"type": "string",
"label": "Media Protocol"
}
]
}
},
"required": [
"doc",
"fields"
]
},
"msg": {
"type": "string",
"default": "Success"
},
"success": {
"type": "boolean",
"default": true
}
},
"required": [
"code",
"data",
"msg",
"success"
]
}</msg>
<status status="PASS" starttime="20200401 12:23:04.918" endtime="20200401 12:23:05.129"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.129" endtime="20200401 12:23:05.158"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${LogSchemaResponse.body['data']}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.161" level="INFO">{'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'common_server_location', 'common_subscriber_id', 'http_domain'], 'metrics': ['common_server_ip', 'common_client_ip', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num'], 'filters': ['common_policy_id', 'common_action', 'common_address_type', 'common_server_ip', 'common_client_ip', 'common_server_port', 'common_server_location', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'http_domain', 'http_content_type', 'ssl_sni', 'ssl_pinningst', 'ssl_intercept_state']}, 'schema_type': {'BASE': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port']}, 'HTTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'http_url', 'http_host', 'http_domain', 'http_request_line', 'http_response_line', 'http_request_header', 'http_response_header', 'http_request_body', 'http_response_body', 'http_request_body_key', 'http_response_body_key', 'http_proxy_flag', 'http_sequence', 'http_snapshot', 'http_cookie', 'http_referer', 'http_user_agent', 'http_content_length', 'http_content_type', 'http_set_cookie', 'http_version', 'http_response_lantency_ms', 'http_session_duration_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'http_url', 'common_server_port']}, 'MAIL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'mail_protocol_type', 'mail_account', 'mail_from_cmd', 'mail_to_cmd', 'mail_from', 'mail_to', 'mail_cc', 'mail_bcc', 'mail_subject', 'mail_subject_charset', 'mail_content', 'mail_content_charset', 'mail_attachment_name', 'mail_attachment_name_charset', 'mail_attachment_content', 'mail_eml_file', 'mail_snapshot'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'mail_from', 'mail_to', 'mail_subject']}, 'DNS': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'dns_message_id', 'dns_qr', 'dns_opcode', 'dns_aa', 'dns_tc', 'dns_rd', 'dns_ra', 'dns_rcode', 'dns_qdcount', 'dns_ancount', 'dns_nscount', 'dns_arcount', 'dns_qname', 'dns_qtype', 'dns_qclass', 'dns_cname', 'dns_sub', 'dns_rr'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_client_ip', 'dns_qr', 'dns_qname', 'dns_qtype']}, 'SSL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ssl_sni', 'ssl_san', 'ssl_cn', 'ssl_pinningst', 'ssl_intercept_state', 'ssl_server_side_latency', 'ssl_client_side_latency', 'ssl_server_side_version', 'ssl_client_side_version', 'ssl_cert_verify', 'ssl_error', 'ssl_con_latency_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ssl_sni', 'common_server_ip', 'common_server_port']}, 'FTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ftp_account', 'ftp_url', 'ftp_content'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ftp_url', 'common_server_ip', 'common_server_port']}, 'BGP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'bgp_type', 'bgp_as_num', 'bgp_route'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'bgp_type', 'bgp_as_num', 'common_server_ip', 'common_server_port']}, 'VOIP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'voip_calling_account', 'voip_called_account', 'voip_calling_number', 'voip_called_number'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'voip_calling_account', 'voip_called_account', 'common_server_ip', 'common_server_port']}}, 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port', 'common_schema_type']}, 'fields': [{'name': 'common_recv_time', 'type': 'int', 'doc': {'allow_query': 'true', 'constraints': {'type': 'timestamp'}, 'format': {'functions': 'current_timestamp'}}, 'label': 'Receive Time'}, {'name': 'common_log_id', 'type': 'long', 'doc': {'allow_query': 'true', 'format': {'functions': 'snowflake_id'}}, 'label': 'Log ID'}, {'name': 'common_policy_id', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Policy ID'}, {'name': 'common_subscriber_id', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Subscriber ID'}, {'name': 'common_client_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_detail,geo_asn,radius_match', 'appendTo': 'common_client_location,common_client_asn,common_subscriber_id'}}, 'label': 'Client IP'}, {'name': 'common_client_port', 'type': 'int', 'label': 'Client Port'}, {'name': 'common_l4_protocol', 'type': 'string', 'label': 'L4 Protocol'}, {'name': 'common_address_type', 'type': 'int', 'doc': {'data': [{'code': '4', 'value': 'ipv4'}, {'code': '6', 'value': 'ipv6'}]}, 'label': 'Address Type'}, {'name': 'common_server_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_country,geo_asn', 'appendTo': 'common_server_location,common_server_asn'}}, 'label': 'Server IP'}, {'name': 'common_server_port', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Server Port'}, {'name': 'common_action', 'type': 'int', 'doc': {'allow_query': 'true', 'data': [{'code': '0', 'value': 'None'}, {'code': '1', 'value': 'Monitor'}, {'code': '2', 'value': 'Intercept'}, {'code': '16', 'value': 'Deny'}, {'code': '48', 'value': 'Manipulation'}, {'code': '128', 'value': 'Allow'}]}, 'label': 'Action'}, {'name': 'common_direction', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'outbound'}, {'code': '1', 'value': 'inbound'}]}, 'label': 'Direction'}, {'name': 'common_entrance_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Entrance ID'}, {'name': 'common_sled_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}}, 'label': 'Sled IP'}, {'name': 'common_client_location', 'type': 'string', 'label': 'Client Location'}, {'name': 'common_client_asn', 'type': 'string', 'label': 'Client ASN'}, {'name': 'common_server_location', 'type': 'string', 'label': 'Server Location'}, {'name': 'common_server_asn', 'type': 'string', 'label': 'Server ASN'}, {'name': 'common_c2s_pkt_num', 'type': 'int', 'label': 'Packets Sent'}, {'name': 'common_s2c_pkt_num', 'type': 'int', 'label': 'Packets Received'}, {'name': 'common_c2s_byte_num', 'type': 'int', 'label': 'Bytes Sent'}, {'name': 'common_s2c_byte_num', 'type': 'int', 'label': 'Bytes Received'}, {'name': 'common_service', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Service'}, {'name': 'common_schema_type', 'type': 'string', 'doc': {'data': [{'code': 'BASE', 'value': 'BASE'}, {'code': 'HTTP', 'value': 'HTTP'}, {'code': 'MAIL', 'value': 'MAIL'}, {'code': 'DNS', 'value': 'DNS'}, {'code': 'SSL', 'value': 'SSL'}, {'code': 'FTP', 'value': 'FTP'}, {'code': 'BGP', 'value': 'BGP'}, {'code': 'VOIP', 'value': 'VOIP'}, {'code': 'RADIUS', 'value': 'RADIUS'}], 'allow_query': 'true'}, 'label': 'Schema Type'}, {'name': 'common_user_tags', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'User Tags'}, {'name': 'common_sub_action', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Sub Action'}, {'name': 'common_user_region', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'User Region'}, {'name': 'common_device_id', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Device ID'}, {'name': 'common_link_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Link ID'}, {'name': 'common_isp', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'ISP'}, {'name': 'common_encapsulation', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Ethernet'}, {'code': '8', 'value': 'PPP'}, {'code': '12', 'value': 'CiscoHDLC'}]}, 'label': 'Encapsulation'}, {'name': 'common_app_label', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Application Label'}, {'name': 'common_app_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '100001', 'value': 'Skype'}, {'code': '100101', 'value': 'Instagram'}, {'code': '100201', 'value': 'Youtube'}, {'code': '100301', 'value': 'Facebook'}, {'code': '100401', 'value': 'What‘s App'}, {'code': '100501', 'value': 'Periscope'}, {'code': '100601', 'value': 'Viber'}, {'code': '100701', 'value': 'Twitter'}, {'code': '100801', 'value': 'Vkontakte'}, {'code': '100901', 'value': 'Telegram'}, {'code': '101001', 'value': 'Odnoklassniki'}, {'code': '101101', 'value': 'Mail agent'}, {'code': '101201', 'value': 'FaceTime'}, {'code': '101301', 'value': 'Snapchat'}, {'code': '101401', 'value': 'Google'}, {'code': '101501', 'value': 'Yandex'}, {'code': '101601', 'value': 'Yandex Browser Turbo'}, {'code': '101701', 'value': 'Opera'}, {'code': '101702', 'value': 'Opera Turbo'}, {'code': '101703', 'value': 'Opera mini'}, {'code': '101801', 'value': 'AppStore'}, {'code': '101901', 'value': 'PlayMarket'}, {'code': '102001', 'value': 'Drugvokrug social networking'}, {'code': '102101', 'value': 'Badoo social networking'}, {'code': '102201', 'value': 'WeChat'}, {'code': '102301', 'value': 'Zello'}, {'code': '102401', 'value': 'Freegate'}, {'code': '102501', 'value': 'Psiphon'}, {'code': '102601', 'value': 'TOR'}, {'code': '102602', 'value': 'Tor browser'}, {'code': '102603', 'value': 'Tor mode'}, {'code': '102701', 'value': 'Orbot'}, {'code': '102801', 'value': 'Tunnel Bear VPN'}, {'code': '102901', 'value': 'HotSpot Shield VPN'}, {'code': '103001', 'value': 'VPN Master'}, {'code': '103101', 'value': 'Hola VPN'}, {'code': '103201', 'value': 'HideMyAss VPN'}, {'code': '103301', 'value': 'Zenmate VPN'}, {'code': '103401', 'value': 'SignalPrivateMessenger'}, {'code': '200001', 'value': 'RFA'}, {'code': '200002', 'value': 'VOA'}, {'code': '200003', 'value': 'lantern'}, {'code': '200004', 'value': 'Line'}, {'code': '200005', 'value': 'voxer'}, {'code': '200006', 'value': 'ZeroNet'}, {'code': '200007', 'value': 'Zalo'}, {'code': '200008', 'value': 'free_browser'}, {'code': '200009', 'value': 'Diaspora'}, {'code': '200010', 'value': 'browsec'}, {'code': '200011', 'value': 'Chrome_plugin_chuguo'}, {'code': '200012', 'value': 'GoGo_SocksHttp'}, {'code': '200013', 'value': 'ultrasurf_chrome'}, {'code': '200014', 'value': 'pinterest'}, {'code': '200015', 'value': 'Swisscom'}, {'code': '200016', 'value': 'Threema'}, {'code': '200017', 'value': 'Circuit_iOS'}, {'code': '200018', 'value': 'Chrome_plugin_FastsTunnel'}, {'code': '200019', 'value': 'OoVoo'}, {'code': '200020', 'value': 'Vine'}, {'code': '200021', 'value': 'Keek'}, {'code': '200022', 'value': 'Hi'}, {'code': '200023', 'value': 'HeyTell'}, {'code': '200024', 'value': 'HikeMessenger'}, {'code': '200025', 'value': 'Nonoh'}, {'code': '200026', 'value': 'Path'}, {'code': '200027', 'value': 'Kik'}, {'code': '200028', 'value': 'BBM'}, {'code': '200029', 'value': 'Talkray'}, {'code': '200030', 'value': 'HelloTalk'}, {'code': '200031', 'value': 'Skout'}, {'code': '200032', 'value': 'MeetMe'}, {'code': '200033', 'value': 'Nextdoor'}, {'code': '200034', 'value': 'Shots'}, {'code': '200035', 'value': 'Zoosk'}, {'code': '200036', 'value': 'TextPlus'}, {'code': '200037', 'value': 'Maaii'}, {'code': '200038', 'value': 'Ustream'}, {'code': '200039', 'value': 'Yikyak'}, {'code': '200040', 'value': 'chatsecure'}, {'code': '200041', 'value': 'freecalls'}, {'code': '200042', 'value': 'SignalPrivateMessenger'}, {'code': '200043', 'value': 'USGOV_CIA'}, {'code': '200044', 'value': 'USGOV_FBI'}, {'code': '200045', 'value': 'USGOV_DHS'}, {'code': '200046', 'value': 'shenxun_Secure_Call_android'}, {'code': '200047', 'value': 'shenxun_Secure_Call_web'}, {'code': '200048', 'value': 'UProxy'}, {'code': '200049', 'value': 'soma'}, {'code': '200050', 'value': "PlayerUnknown's_Battlegrounds"}, {'code': '200051', 'value': 'STEAM'}, {'code': '200052', 'value': 'dalai_lama'}, {'code': '200053', 'value': 'Steam_forum'}, {'code': '200054', 'value': 'Microsoft Online Certificate'}, {'code': '200055', 'value': 'sogou_spider'}, {'code': '200056', 'value': 'baidu_mobie'}, {'code': '200057', 'value': 'Apple Push Service'}, {'code': '200058', 'value': 'IQIYI'}, {'code': '200059', 'value': 'baidu_spider'}, {'code': '200060', 'value': 'Weibo'}, {'code': '200061', 'value': 'Apple captive service'}, {'code': '200062', 'value': 'Microsoft wns'}, {'code': '200063', 'value': '360_safe_pc'}, {'code': '200064', 'value': 'Sogou Public Service'}, {'code': '200065', 'value': 'Lenovo app_POST service'}, {'code': '200066', 'value': 'Apple securityd service'}, {'code': '200067', 'value': 'Weather pass'}, {'code': '200068', 'value': 'Apple Service Pack'}, {'code': '200069', 'value': 'Fast pressure'}, {'code': '200070', 'value': 'SemrushBot'}, {'code': '200071', 'value': 'Adrefs_spider'}, {'code': '200072', 'value': 'AndroidDownloadManager'}, {'code': '200073', 'value': 'XenderTop'}, {'code': '200074', 'value': 'microsoft_update'}, {'code': '200075', 'value': 'Youku'}, {'code': '200076', 'value': 'Google_spider'}, {'code': '200077', 'value': 'Microsoft User Experience and Telemetry Components'}, {'code': '200078', 'value': 'MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT'}, {'code': '200079', 'value': 'Microsoft ncsi'}, {'code': '200080', 'value': 'Microsoft Privacy Collection Service'}, {'code': '200081', 'value': 'uTorrent'}, {'code': '200082', 'value': 'Edge'}, {'code': '200083', 'value': 'Lenovo Music Store'}, {'code': '200084', 'value': 'LieBao'}, {'code': '200085', 'value': 'majesti_spider'}, {'code': '200086', 'value': 'DotBot'}, {'code': '200087', 'value': 'Millet Update'}, {'code': '200088', 'value': 'Today’s headlines'}, {'code': '200089', 'value': 'Microsoft live'}, {'code': '200090', 'value': 'Microsoft OneNote'}, {'code': '200091', 'value': 'Bing_spider'}, {'code': '200092', 'value': 'Apple location service'}, {'code': '200093', 'value': 'Kuaishou'}, {'code': '200094', 'value': 'LeTV video'}, {'code': '200095', 'value': 'QQ'}, {'code': '200096', 'value': 'Wps'}, {'code': '200097', 'value': 'kugou music'}, {'code': '200098', 'value': 'kuwo music'}, {'code': '200099', 'value': '360_common_service'}, {'code': '200100', 'value': 'Camera360'}, {'code': '200101', 'value': 'Outlook'}, {'code': '200102', 'value': 'zhihu'}, {'code': '200103', 'value': 'Tencent video'}, {'code': '200104', 'value': 'funshion'}, {'code': '200105', 'value': 'QQ shared service'}, {'code': '200106', 'value': 'Microsoft wdcp service'}, {'code': '200107', 'value': 'Microsoft Media_center_pc'}, {'code': '200108', 'value': '360 phone helper'}, {'code': '200109', 'value': 'Kingsoft Public Service'}, {'code': '200110', 'value': 'Ios_wifi connection'}, {'code': '200111', 'value': 'Teamviewer'}, {'code': '200112', 'value': 'Baidu cloud disk'}, {'code': '200113', 'value': 'Tencent News'}, {'code': '200114', 'value': 'Baidu map'}, {'code': '200115', 'value': 'Panda TV'}, {'code': '200116', 'value': 'Thunder'}, {'code': '200117', 'value': 'NetEase cloud music'}, {'code': '200118', 'value': 'QQ music'}, {'code': '200119', 'value': 'Itools'}, {'code': '200120', 'value': 'Jingdong Finance'}, {'code': '200121', 'value': 'PycURL'}, {'code': '200122', 'value': 'Yahoo_Spider'}, {'code': '200123', 'value': 'Himalayan FM'}, {'code': '200124', 'value': 'Youdao_dict'}, {'code': '200125', 'value': 'Microsoft_spynet'}, {'code': '200126', 'value': 'proximicBot'}, {'code': '200127', 'value': 'Foxit_reader'}, {'code': '200128', 'value': 'Sohu Video'}, {'code': '200129', 'value': 'BlueStacks'}, {'code': '200130', 'value': 'Beauty group'}, {'code': '200131', 'value': 'Kmplayer'}, {'code': '200132', 'value': 'TaoBao'}, {'code': '200133', 'value': 'Exabot'}, {'code': '200134', 'value': 'Ubuntu_apt_get'}, {'code': '200135', 'value': 'Oriental Fortune'}, {'code': '200136', 'value': 'JikeSpider'}, {'code': '200137', 'value': 'Itunesstored'}, {'code': '200138', 'value': 'GAD map'}, {'code': '200139', 'value': 'ifeng News'}, {'code': '200140', 'value': 'BoardReaderBot'}, {'code': '200141', 'value': 'AmazonBot'}, {'code': '200142', 'value': 'Alipay'}, {'code': '200143', 'value': 'Alipay security controls'}, {'code': '200144', 'value': '360 security guards (antivirus)'}, {'code': '200145', 'value': '360 logon service'}, {'code': '200146', 'value': 'BLP_bbot'}, {'code': '200147', 'value': 'Keep'}, {'code': '200148', 'value': 'WiFi universal key'}, {'code': '200149', 'value': 'Baidu Music'}, {'code': '200150', 'value': 'Vip.com'}, {'code': '200151', 'value': 'JD.COM'}, {'code': '200152', 'value': 'sina'}, {'code': '200153', 'value': 'youdao Public service'}, {'code': '200154', 'value': 'Jinshan public service'}, {'code': '200155', 'value': 'Baidu guard'}, {'code': '200156', 'value': 'Apple system update service'}, {'code': '200157', 'value': 'momo'}, {'code': '200158', 'value': 'CNZZ statistics'}, {'code': '200159', 'value': 'Microsoft one_drive service'}, {'code': '200160', 'value': 'WindowsStore'}, {'code': '200161', 'value': 'duba'}, {'code': '200162', 'value': 'Baidu HD'}, {'code': '200163', 'value': 'qunar'}, {'code': '200164', 'value': 'qianxunyingshi'}, {'code': '200165', 'value': 'KuaiyanKanShuSpider'}, {'code': '200166', 'value': 'Mail.RU_Bot_Robot'}, {'code': '200167', 'value': 'MpCommunication'}, {'code': '200168', 'value': 'Weather forecast'}, {'code': '200169', 'value': 'Ltx71_spider'}, {'code': '200170', 'value': 'Ia_archiver'}, {'code': '200171', 'value': 'Ali Wangwang'}, {'code': '200172', 'value': 'UC home page (information)'}, {'code': '200173', 'value': 'Yeti'}, {'code': '200174', 'value': 'Rtorrent'}, {'code': '200175', 'value': 'QQPim'}, {'code': '200176', 'value': 'NetEase News'}, {'code': '200177', 'value': 'sina sports'}, {'code': '200178', 'value': 'Exchange of foreign exchange'}, {'code': '200179', 'value': 'BlueStacks update'}, {'code': '200180', 'value': 'youdao'}, {'code': '200181', 'value': 'QQ computer housekeeper'}, {'code': '200182', 'value': 'UltraEdit'}, {'code': '200183', 'value': 'EasouSpider'}, {'code': '200184', 'value': 'QQ Zone'}, {'code': '200185', 'value': 'Foxmail'}, {'code': '200186', 'value': 'Pingdom.com'}, {'code': '200187', 'value': 'Sina Finance'}, {'code': '200188', 'value': 'QQ one key login'}, {'code': '200189', 'value': 'Norton'}, {'code': '200190', 'value': 'Baidu waimai'}, {'code': '200191', 'value': 'YaCy'}, {'code': '200192', 'value': 'Haitong e Haitong'}, {'code': '200193', 'value': 'AdsBot-Google'}, {'code': '200194', 'value': 'Guangfa Yijin'}, {'code': '200195', 'value': 'Ali security program'}, {'code': '200196', 'value': 'Cliqzbot'}, {'code': '200197', 'value': 'Mobike'}, {'code': '200198', 'value': 'Kingsoft PowerWord'}, {'code': '200199', 'value': 'meishij'}, {'code': '200200', 'value': 'CCB mobile bank'}, {'code': '200201', 'value': 'Mega SkyDrive'}, {'code': '200202', 'value': 'douyu'}, {'code': '200203', 'value': 'Flamingo_SearchEngine'}, {'code': '200204', 'value': 'Lenovo shop'}, {'code': '200205', 'value': 'Uc news'}, {'code': '200206', 'value': 'Volcano small video'}, {'code': '200207', 'value': 'Meitu Xiu Xiu'}, {'code': '200208', 'value': 'Kaspersky'}, {'code': '200209', 'value': 'AcFun'}, {'code': '200210', 'value': 'Slackbot'}, {'code': '200211', 'value': 'Snowball'}, {'code': '200212', 'value': 'SafeDNSBot'}, {'code': '200213', 'value': 'Great wisdom'}, {'code': '200214', 'value': 'Mailbox of NetEase'}, {'code': '200215', 'value': 'peasecod'}, {'code': '200216', 'value': 'Gold ten data'}, {'code': '200217', 'value': 'Linkdexbot'}, {'code': '200218', 'value': 'Sina blog'}, {'code': '200219', 'value': 'Ginger'}, {'code': '200220', 'value': 'Microsoft activation verification'}, {'code': '200221', 'value': 'Facebot'}, {'code': '200222', 'value': 'Dangdang'}, {'code': '200223', 'value': 'QQ cyclone'}, {'code': '200224', 'value': 'Wp_feedbot'}, {'code': '200225', 'value': 'ICBC'}, {'code': '200226', 'value': 'Public service'}, {'code': '200227', 'value': 'Magpie-crawler'}, {'code': '200228', 'value': 'xianyu'}, {'code': '200229', 'value': 'GetIntentBot'}, {'code': '200230', 'value': 'Papers'}, {'code': '200231', 'value': 'NewsGator'}, {'code': '200232', 'value': 'RankFlexBot'}, {'code': '200233', 'value': 'rogerbot'}, {'code': '200234', 'value': 'SurdotlyBot'}, {'code': '200235', 'value': 'CheckMarkNetworkBot'}, {'code': '200236', 'value': 'pyspider'}, {'code': '200237', 'value': 'spbot'}, {'code': '200238', 'value': 'Huaxia Bank'}, {'code': '200239', 'value': 'glory of king'}, {'code': '200240', 'value': 'msnbot-Products'}, {'code': '200241', 'value': 'archive.org'}, {'code': '200242', 'value': 'applebot'}, {'code': '200243', 'value': 'alicall'}, {'code': '200244', 'value': 'Superfeedrbot'}, {'code': '200245', 'value': 'QQ mailbox'}, {'code': '200246', 'value': 'coccocbot-webBot'}, {'code': '200247', 'value': 'dingtalk'}, {'code': '200248', 'value': 'Dragonbot'}, {'code': '200249', 'value': 'Mediatoolkitbot'}, {'code': '200250', 'value': 'bitcomet'}, {'code': '200251', 'value': 'filetopia'}, {'code': '200252', 'value': 'flashget'}, {'code': '200253', 'value': 'oracle'}, {'code': '200254', 'value': 'yyvoice'}, {'code': '200255', 'value': 'imesh'}, {'code': '200256', 'value': 'citrix'}, {'code': '200257', 'value': 'corba'}, {'code': '200258', 'value': 'dameware'}, {'code': '200259', 'value': 'pcanywhere'}, {'code': '200260', 'value': 'qq_rdp'}, {'code': '200261', 'value': 'poco'}, {'code': '200262', 'value': 'qqdownload'}, {'code': '200263', 'value': 'applejuice'}, {'code': '200264', 'value': 'stealthnet'}, {'code': '200265', 'value': 'winmx'}, {'code': '200266', 'value': 'emule'}, {'code': '200267', 'value': 'emule_decrypt'}, {'code': '200268', 'value': 'qvod'}, {'code': '200269', 'value': 'mysql'}, {'code': '200270', 'value': 'icecast'}, {'code': '200271', 'value': 'mms'}, {'code': '200272', 'value': 'pplive'}, {'code': '200273', 'value': 'ppstream'}, {'code': '200274', 'value': 'sopcast'}, {'code': '200275', 'value': 'tvants'}, {'code': '200276', 'value': 'sohutv'}, {'code': '200277', 'value': 'iku'}, {'code': '200278', 'value': 'qqlive'}, {'code': '200279', 'value': 'rsync'}, {'code': '200280', 'value': 'xunyou_speedup'}, {'code': '200281', 'value': 'msn'}, {'code': '200282', 'value': 'popo'}, {'code': '200283', 'value': 'sinauc'}, {'code': '200284', 'value': 'qqbattle'}, {'code': '200285', 'value': 'quake'}, {'code': '200286', 'value': 'xbox'}, {'code': '200287', 'value': 'wow'}, {'code': '200288', 'value': 'lol'}, {'code': '200289', 'value': 'PostgreSQL'}, {'code': '200290', 'value': 'TDS'}, {'code': '200291', 'value': 'VMware'}, {'code': '200292', 'value': 'Kontiki'}, {'code': '200293', 'value': 'OpenFT'}, {'code': '200294', 'value': 'Gnutella'}, {'code': '200295', 'value': 'eDonkey'}, {'code': '200296', 'value': 'AVI'}, {'code': '200297', 'value': 'RealMedia'}, {'code': '200298', 'value': 'Windowsmedia'}, {'code': '200299', 'value': 'MOVE'}, {'code': '200300', 'value': 'Feidian'}, {'code': '200301', 'value': 'Zattoo'}, {'code': '200302', 'value': 'SHOUTCast'}, {'code': '200303', 'value': 'TVUplayer'}, {'code': '200304', 'value': 'VeohTV'}, {'code': '200305', 'value': 'Soulseek'}, {'code': '200306', 'value': 'GaduGadu'}, {'code': '200307', 'value': 'Oscar'}, {'code': '200308', 'value': 'Yahoo'}, {'code': '200309', 'value': 'Battlefield'}, {'code': '200310', 'value': 'Halflife2'}, {'code': '200311', 'value': 'World of Warcraft'}, {'code': '200312', 'value': 'USENET'}, {'code': '200313', 'value': 'AFP'}, {'code': '200314', 'value': 'Truphone'}, {'code': '200315', 'value': 'Armagetron'}, {'code': '200316', 'value': 'CrossFire'}, {'code': '200317', 'value': 'Dofus'}, {'code': '200318', 'value': 'Fiesta'}, {'code': '200319', 'value': 'Florensia'}, {'code': '200320', 'value': 'Guildwars'}, {'code': '200321', 'value': 'HTTP Application Activesync'}, {'code': '200322', 'value': 'MapleStory'}, {'code': '200323', 'value': 'msSQL'}, {'code': '200324', 'value': 'WARCRAFT3'}, {'code': '200325', 'value': 'World of Kung Fu'}, {'code': '200326', 'value': 'MEEBO'}, {'code': '200327', 'value': 'DropBox'}, {'code': '200328', 'value': 'HTTP Proxy'}, {'code': '200329', 'value': 'Netflix'}, {'code': '200330', 'value': 'CitrixOnline/GotoMeeting'}, {'code': '200331', 'value': 'Webex'}, {'code': '200332', 'value': 'Apple iCloud'}, {'code': '200333', 'value': 'Apple iTunes'}, {'code': '200334', 'value': 'WindowsUpdate'}, {'code': '200335', 'value': 'Tuenti'}, {'code': '200336', 'value': 'LotusNotes'}, {'code': '200337', 'value': 'RemoteScan'}, {'code': '200338', 'value': 'Spotify'}, {'code': '200339', 'value': 'CiscoVPN'}, {'code': '200340', 'value': 'TeamSpeak'}, {'code': '200341', 'value': 'UbuntuONE'}, {'code': '200342', 'value': 'CNN'}, {'code': '200343', 'value': 'Wikipedia'}, {'code': '200344', 'value': 'Collectd'}, {'code': '200345', 'value': 'Redis'}, {'code': '200346', 'value': 'ZeroMQ'}, {'code': '200347', 'value': 'Stracraft'}, {'code': '200348', 'value': 'Simet'}, {'code': '200349', 'value': 'OpenSignal'}, {'code': '200350', 'value': '99Taxi'}, {'code': '200351', 'value': 'GloboTV'}, {'code': '200352', 'value': 'Deezer'}, {'code': '200353', 'value': 'Microsoft cloud services'}, {'code': '200354', 'value': 'Twitch'}, {'code': '200355', 'value': 'KakaoTalk Voice and Chat'}, {'code': '200357', 'value': '360.cn'}, {'code': '200358', 'value': '360Safeguard_P2P'}, {'code': '200359', 'value': '4D'}, {'code': '200360', 'value': 'acercloud'}, {'code': '200361', 'value': 'acestream'}, {'code': '200362', 'value': 'airdroid'}, {'code': '200363', 'value': 'airmedia'}, {'code': '200364', 'value': 'akamai'}, {'code': '200365', 'value': 'akamai_transfer'}, {'code': '200366', 'value': 'amanda'}, {'code': '200367', 'value': 'amp'}, {'code': '200368', 'value': 'Appear.in'}, {'code': '200369', 'value': 'ares'}, {'code': '200370', 'value': 'ARKSurvivalEvolved'}, {'code': '200371', 'value': 'ARMA3Server'}, {'code': '200372', 'value': 'ARMA2Server'}, {'code': '200373', 'value': 'AvastSecureDNS'}, {'code': '200374', 'value': 'azureus'}, {'code': '200375', 'value': 'backweb'}, {'code': '200376', 'value': 'BadBaidu'}, {'code': '200377', 'value': 'baofeng'}, {'code': '200378', 'value': 'bitext'}, {'code': '200379', 'value': 'BlackDesertOnline'}, {'code': '200380', 'value': 'Blizzard'}, {'code': '200381', 'value': 'bmdp'}, {'code': '200382', 'value': 'bncs'}, {'code': '200383', 'value': 'btdht'}, {'code': '200384', 'value': 'btsync'}, {'code': '200385', 'value': 'cacaoweb'}, {'code': '200386', 'value': 'chatango'}, {'code': '200387', 'value': 'chivalry'}, {'code': '200388', 'value': 'cirn'}, {'code': '200389', 'value': 'cisco_sslvpn'}, {'code': '200390', 'value': 'clash_of_clans'}, {'code': '200391', 'value': 'Clubbox'}, {'code': '200392', 'value': 'cod'}, {'code': '200393', 'value': 'cod_waw'}, {'code': '200394', 'value': 'combatarms'}, {'code': '200395', 'value': 'combatarms_p2p'}, {'code': '200396', 'value': 'ConquerOnline'}, {'code': '200397', 'value': 'Counterstrike1.6'}, {'code': '200398', 'value': 'Checkpoint_RDP'}, {'code': '200399', 'value': 'crashplan'}, {'code': '200400', 'value': 'crossout'}, {'code': '200401', 'value': 'cryptic'}, {'code': '200402', 'value': 'cvs'}, {'code': '200403', 'value': 'dash'}, {'code': '200404', 'value': 'dc'}, {'code': '200405', 'value': 'db2'}, {'code': '200406', 'value': 'dell_backup'}, {'code': '200407', 'value': 'Demonware'}, {'code': '200408', 'value': 'destiny'}, {'code': '200409', 'value': 'diablo2'}, {'code': '200410', 'value': 'isakmp'}, {'code': '200411', 'value': 'jedi'}, {'code': '200412', 'value': 'jedi_academy'}, {'code': '200413', 'value': 'jx3online'}, {'code': '200414', 'value': 'kankan'}, {'code': '200415', 'value': 'kaseya'}, {'code': '200416', 'value': 'kazaa'}, {'code': '200417', 'value': 'kuaibo'}, {'code': '200418', 'value': 'lifeforge'}, {'code': '200419', 'value': 'linkproof'}, {'code': '200420', 'value': 'litecoin'}, {'code': '200421', 'value': 'maxicloud'}, {'code': '200422', 'value': 'merakicloud'}, {'code': '200423', 'value': 'minecraft'}, {'code': '200424', 'value': 'mongo'}, {'code': '200425', 'value': 'msoffice_mac'}, {'code': '200426', 'value': 'munin'}, {'code': '200427', 'value': 'mzinga'}, {'code': '200428', 'value': 'n2ping'}, {'code': '200429', 'value': 'ncsoft'}, {'code': '200430', 'value': 'netcat_cctv'}, {'code': '200431', 'value': 'neverwinter'}, {'code': '200432', 'value': 'newerth'}, {'code': '200433', 'value': 'nintendo'}, {'code': '200434', 'value': 'nntps'}, {'code': '200435', 'value': 'noction'}, {'code': '200436', 'value': 'noe'}, {'code': '200437', 'value': 'norton_backup'}, {'code': '200438', 'value': 'omegle'}, {'code': '200439', 'value': 'opaserv'}, {'code': '200440', 'value': 'orbit'}, {'code': '200441', 'value': 'ourworld'}, {'code': '200442', 'value': 'overwatch'}, {'code': '200443', 'value': 'diablo3'}, {'code': '200444', 'value': 'dianping'}, {'code': '200445', 'value': 'dianshijia'}, {'code': '200446', 'value': 'discord'}, {'code': '200447', 'value': 'dogecoin'}, {'code': '200448', 'value': 'dota2'}, {'code': '200449', 'value': 'douyu_chat'}, {'code': '200450', 'value': 'doyo'}, {'code': '200451', 'value': 'driveshare'}, {'code': '200452', 'value': 'dtls'}, {'code': '200453', 'value': 'dueling_network'}, {'code': '200454', 'value': 'dvrns'}, {'code': '200455', 'value': 'dxp'}, {'code': '200456', 'value': 'ea_games'}, {'code': '200457', 'value': 'epson'}, {'code': '200458', 'value': 'eso'}, {'code': '200459', 'value': 'etrust'}, {'code': '200460', 'value': 'fasp'}, {'code': '200461', 'value': 'finalfantasy_xiv'}, {'code': '200462', 'value': 'flash'}, {'code': '200463', 'value': 'fliggy'}, {'code': '200464', 'value': 'fortinet'}, {'code': '200465', 'value': 'foscam'}, {'code': '200466', 'value': 'freechal'}, {'code': '200467', 'value': 'fring'}, {'code': '200468', 'value': 'fuckcoin'}, {'code': '200469', 'value': 'gamespy'}, {'code': '200470', 'value': 'gangsofspace'}, {'code': '200471', 'value': 'garena'}, {'code': '200472', 'value': 'gearsofwar'}, {'code': '200473', 'value': 'giop'}, {'code': '200474', 'value': 'git'}, {'code': '200475', 'value': 'glupteba'}, {'code': '200476', 'value': 'gnutella2'}, {'code': '200477', 'value': 'gokuchat'}, {'code': '200478', 'value': 'google_hangouts'}, {'code': '200479', 'value': 'gotomeeting'}, {'code': '200480', 'value': 'gprs_tunnel'}, {'code': '200481', 'value': 'graal_online_era'}, {'code': '200482', 'value': 'gsm'}, {'code': '200483', 'value': 'h1z1'}, {'code': '200484', 'value': 'halo_online'}, {'code': '200485', 'value': 'hamachi'}, {'code': '200486', 'value': 'harveys'}, {'code': '200487', 'value': 'hearthstone'}, {'code': '200488', 'value': 'heroes_generals'}, {'code': '200489', 'value': 'hots'}, {'code': '200490', 'value': 'icp'}, {'code': '200491', 'value': 'icq'}, {'code': '200492', 'value': 'id'}, {'code': '200493', 'value': 'idrive_sync'}, {'code': '200494', 'value': 'ipmsg'}, {'code': '200495', 'value': 'ipop'}, {'code': '200496', 'value': 'ipsharkk'}, {'code': '200497', 'value': 'palringo'}, {'code': '200498', 'value': 'paltalk'}, {'code': '200499', 'value': 'pando'}, {'code': '200500', 'value': 'panipani'}, {'code': '200501', 'value': 'pdbox'}, {'code': '200502', 'value': 'planetside2'}, {'code': '200503', 'value': 'portmap_rpc'}, {'code': '200504', 'value': 'ps4_remoteplay'}, {'code': '200505', 'value': 'psn'}, {'code': '200506', 'value': 'psn_store'}, {'code': '200507', 'value': 'punkbuster'}, {'code': '200508', 'value': 'pyzor'}, {'code': '200509', 'value': 'qcloud_ilvb'}, {'code': '200510', 'value': 'qqpcmgr'}, {'code': '200511', 'value': 'ramsey_dash'}, {'code': '200512', 'value': 'razor'}, {'code': '200513', 'value': 'rbls'}, {'code': '200514', 'value': 'realvnc'}, {'code': '200515', 'value': 'relay'}, {'code': '200516', 'value': 'revolver_nblbt'}, {'code': '200517', 'value': 'rising_storm'}, {'code': '200518', 'value': 'roblox'}, {'code': '200519', 'value': 'robocraft'}, {'code': '200520', 'value': 'rpc_scan'}, {'code': '200521', 'value': 'runescape'}, {'code': '200522', 'value': 'sanandreas'}, {'code': '200523', 'value': 'saprouter'}, {'code': '200524', 'value': 'secondlife'}, {'code': '200525', 'value': 'serialnumberd'}, {'code': '200526', 'value': 'silkroadonline'}, {'code': '200527', 'value': 'smite'}, {'code': '200528', 'value': 'snapvpn'}, {'code': '200529', 'value': 'spamfighter'}, {'code': '200530', 'value': 'speedin'}, {'code': '200531', 'value': 'speedtest'}, {'code': '200532', 'value': 'spotify_broadcast'}, {'code': '200533', 'value': 'sqlexp'}, {'code': '200534', 'value': 'starcitizen'}, {'code': '200535', 'value': 'starcraft'}, {'code': '200536', 'value': 'starleaf'}, {'code': '200537', 'value': 'steam_friends'}, {'code': '200538', 'value': 'storm_worm'}, {'code': '200539', 'value': 'stratum'}, {'code': '200540', 'value': 'supl'}, {'code': '200541', 'value': 'svn'}, {'code': '200542', 'value': 'talesrunner'}, {'code': '200543', 'value': 'tankix'}, {'code': '200544', 'value': 'telecomkey'}, {'code': '200545', 'value': 'telnet_exploit'}, {'code': '200546', 'value': 'tencent_games'}, {'code': '200547', 'value': 'tenfivecoin'}, {'code': '200548', 'value': 'tensafe'}, {'code': '200549', 'value': 'tera'}, {'code': '200550', 'value': 'tetrisonline'}, {'code': '200551', 'value': 'thq'}, {'code': '200552', 'value': 'tip'}, {'code': '200553', 'value': 'torchlight2'}, {'code': '200554', 'value': 'traceroute'}, {'code': '200555', 'value': 'trackmania'}, {'code': '200556', 'value': 'tremulous'}, {'code': '200557', 'value': 'trion'}, {'code': '200558', 'value': 'trojan_zeroaccess'}, {'code': '200559', 'value': 'twitcasting'}, {'code': '200560', 'value': 'twitch_irc'}, {'code': '200561', 'value': 'ubisoft_games'}, {'code': '200562', 'value': 'umeye'}, {'code': '200563', 'value': 'vainglory'}, {'code': '200564', 'value': 'ventrilo'}, {'code': '200565', 'value': 'vivox'}, {'code': '200566', 'value': 'vodlocker'}, {'code': '200567', 'value': 'vpnrobot'}, {'code': '200568', 'value': 'vpn_unlimited'}, {'code': '200569', 'value': 'vxworks_exploit'}, {'code': '200570', 'value': 'warthunder'}, {'code': '200571', 'value': 'weblogic'}, {'code': '200572', 'value': 'web_junk'}, {'code': '200573', 'value': 'weiqi'}, {'code': '200574', 'value': 'win_message'}, {'code': '200575', 'value': 'wizard101'}, {'code': '200576', 'value': 'wns'}, {'code': '200577', 'value': 'wolf_et'}, {'code': '200578', 'value': 'worm_22105'}, {'code': '200579', 'value': 'wuala'}, {'code': '200580', 'value': 'xfire_p2p'}, {'code': '200581', 'value': 'xiami'}, {'code': '200582', 'value': 'xunlei'}, {'code': '200583', 'value': 'xunlei_accel'}, {'code': '200584', 'value': 'xunlei_jsq'}, {'code': '200585', 'value': 'xunyou'}, {'code': '200586', 'value': 'xymon'}, {'code': '200587', 'value': 'yahoo_error'}, {'code': '200588', 'value': 'yahoo_games'}, {'code': '200589', 'value': 'yahoo_webcam'}, {'code': '200590', 'value': 'zabbix'}, {'code': '200591', 'value': 'zeroaccess'}, {'code': '200592', 'value': 'zoom'}, {'code': '200593', 'value': 'zynga'}, {'code': '200594', 'value': 'ICMP_Flood'}, {'code': '200595', 'value': 'IPFRAG_Flood'}, {'code': '200596', 'value': 'SYN_Flood'}, {'code': '200597', 'value': 'ACK_Flood'}, {'code': '200598', 'value': 'RST_Flood'}, {'code': '200599', 'value': 'DNS_Flood'}, {'code': '200600', 'value': 'NTP_Flood'}, {'code': '200601', 'value': 'UDP_Flood'}, {'code': '200602', 'value': 'HTTP_Flood'}, {'code': '200603', 'value': 'SSDP_Flood'}, {'code': '200604', 'value': 'baiduP2P'}, {'code': '200605', 'value': 'CSGlobalOffensive'}, {'code': '200606', 'value': 'AllSeeingEye'}, {'code': '200607', 'value': 'Bittorrent_Extension'}, {'code': '200608', 'value': 'BitTorrentSync'}, {'code': '200609', 'value': 'Call_of_Duty'}, {'code': '200612', 'value': 'CitrixICA'}, {'code': '200613', 'value': 'Citrix_Jedi'}, {'code': '200614', 'value': 'ClashOfClans'}, {'code': '200615', 'value': 'Canon_BJNP'}, {'code': '200617', 'value': 'DoyoP2P'}, {'code': '200618', 'value': 'FortiClientSSLVPN'}, {'code': '200619', 'value': 'GTA_SanAndreas_Multiplayer'}, {'code': '200620', 'value': 'HalfLife'}, {'code': '200621', 'value': 'IBM-DB2'}, {'code': '200622', 'value': 'Flash_Player'}, {'code': '200623', 'value': 'Kugou'}, {'code': '200624', 'value': 'LeagueOfLegends'}, {'code': '200625', 'value': 'GluptebaBackdoor'}, {'code': '200626', 'value': 'MedalOfHonor'}, {'code': '200628', 'value': 'MultiTheftAuto'}, {'code': '200631', 'value': 'NetcoreScan'}, {'code': '200632', 'value': 'NeverwinterNights'}, {'code': '200633', 'value': 'NoctionIRP'}, {'code': '200634', 'value': 'JavaObjectSerialised'}, {'code': '200635', 'value': 'RealPlayer'}, {'code': '200636', 'value': 'TeamFortress2'}, {'code': '200637', 'value': 'TheCrew'}, {'code': '200638', 'value': 'TurboVPN'}, {'code': '200639', 'value': 'MSN_Voice'}, {'code': '200640', 'value': 'MaplestoryChina'}, {'code': '200641', 'value': 'Message4U'}, {'code': '200642', 'value': 'MongoDB'}, {'code': '200643', 'value': 'NDTThroughput'}, {'code': '200644', 'value': 'NET-MFP'}, {'code': '200645', 'value': 'WindowsMessenger'}, {'code': '200646', 'value': 'WolfensteinEnemyTerritory'}, {'code': '200647', 'value': 'XboxLive'}, {'code': '200649', 'value': 'RBL'}, {'code': '200650', 'value': 'RPC_Exploit'}, {'code': '200651', 'value': 'Rejection'}, {'code': '200655', 'value': 'Silverplatter_DXP'}, {'code': '200659', 'value': 'TencentWNS'}, {'code': '200660', 'value': 'TrionGames'}, {'code': '200661', 'value': 'Trojan.Win32.Generic!SB'}, {'code': '200666', 'value': 'WorldOfWarcraft'}, {'code': '200667', 'value': 'YY'}, {'code': '200669', 'value': 'nopayload'}, {'code': '200670', 'value': 'No_FirstPkt'}, {'code': '200671', 'value': 'Invalid'}], 'visibility': 'disabled'}, 'label': 'Application ID'}, {'name': 'common_protocol_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '10000', 'value': 'NOT SPECIFIED'}, {'code': '10001', 'value': 'TCP'}, {'code': '10002', 'value': 'UDP'}, {'code': '10003', 'value': 'DNS'}, {'code': '10004', 'value': 'FTP'}, {'code': '10005', 'value': 'FTPS'}, {'code': '10006', 'value': 'GRE'}, {'code': '10007', 'value': 'HTTP'}, {'code': '10008', 'value': 'HTTPS'}, {'code': '10009', 'value': 'ICMP'}, {'code': '10010', 'value': 'IKE'}, {'code': '10011', 'value': 'IMAP'}, {'code': '10012', 'value': 'IMAPS'}, {'code': '10013', 'value': 'IPSEC'}, {'code': '10014', 'value': 'XMPP'}, {'code': '10015', 'value': 'L2TP'}, {'code': '10016', 'value': 'NTP'}, {'code': '10017', 'value': 'POP3'}, {'code': '10018', 'value': 'POP3 SSL'}, {'code': '10019', 'value': 'PPTP'}, {'code': '10020', 'value': 'Quic'}, {'code': '10021', 'value': 'SIP'}, {'code': '10022', 'value': 'smb'}, {'code': '10023', 'value': 'SMTP'}, {'code': '10024', 'value': 'SMTPS'}, {'code': '10025', 'value': 'SPDY'}, {'code': '10028', 'value': 'SSH'}, {'code': '10029', 'value': 'SSL'}, {'code': '10030', 'value': 'SOCKS'}, {'code': '10031', 'value': 'BITTORRENT'}, {'code': '10032', 'value': 'RTSP'}, {'code': '10033', 'value': 'TELNET'}, {'code': '10034', 'value': 'UTP'}, {'code': '10035', 'value': 'FASTTRACK'}, {'code': '10036', 'value': 'SKINNY'}, {'code': '10037', 'value': 'IAX'}, {'code': '10038', 'value': 'MGCP'}, {'code': '10039', 'value': 'RTCP'}, {'code': '10040', 'value': 'RTP'}, {'code': '10041', 'value': 'VNC'}, {'code': '10042', 'value': 'XDMCP'}, {'code': '10043', 'value': 'RDP'}, {'code': '10044', 'value': 'AIMINI'}, {'code': '10045', 'value': 'IPP'}, {'code': '10046', 'value': 'NFS'}, {'code': '10047', 'value': 'TFTP'}, {'code': '10048', 'value': 'BGP'}, {'code': '10049', 'value': 'DHCP'}, {'code': '10050', 'value': 'DHCPV6'}, {'code': '10051', 'value': 'FINGER'}, {'code': '10052', 'value': 'KERBEROS'}, {'code': '10053', 'value': 'LDAP'}, {'code': '10054', 'value': 'MDNS'}, {'code': '10055', 'value': 'NNTP'}, {'code': '10056', 'value': 'SNMP'}, {'code': '10057', 'value': 'SSDP'}, {'code': '10058', 'value': 'SYSLOG'}, {'code': '10059', 'value': 'WHOIS'}, {'code': '10060', 'value': 'RADIUS'}, {'code': '10061', 'value': 'OPENVPN'}, {'code': '10062', 'value': 'STUN'}, {'code': '10063', 'value': 'TEREDO'}, {'code': '10064', 'value': 'GTP'}, {'code': '10065', 'value': 'RTMP'}, {'code': '10066', 'value': 'chargen_tcp_udp'}, {'code': '10067', 'value': 'llmnr_udp'}, {'code': '10068', 'value': 'nbns_udp'}, {'code': '10069', 'value': 'NETBIOS'}, {'code': '10070', 'value': 'DirectDownloadLink'}, {'code': '10071', 'value': 'I23V5'}, {'code': '10072', 'value': 'DirectConnect'}, {'code': '10073', 'value': 'OFF'}, {'code': '10074', 'value': 'OGG'}, {'code': '10075', 'value': 'MPEG'}, {'code': '10076', 'value': 'IRC'}, {'code': '10077', 'value': 'Jabber'}, {'code': '10078', 'value': 'VRRP'}, {'code': '10079', 'value': 'IGMP'}, {'code': '10080', 'value': 'EGP'}, {'code': '10081', 'value': 'SCTP'}, {'code': '10082', 'value': 'OSPF'}, {'code': '10083', 'value': 'IP in IP'}, {'code': '10084', 'value': 'ICMPv6'}, {'code': '10085', 'value': 'DCE RPC'}, {'code': '10086', 'value': 'NetFlow_IPFIX'}, {'code': '10087', 'value': 'sFlow'}, {'code': '10088', 'value': 'HTTP Connect (SSL over HTTP)'}, {'code': '10089', 'value': 'SAP'}, {'code': '10090', 'value': 'UPnP'}, {'code': '10091', 'value': 'H323'}, {'code': '10092', 'value': 'Megaco'}, {'code': '10094', 'value': 'bacnet'}, {'code': '10096', 'value': 'bjnp'}, {'code': '10097', 'value': 'cgp'}, {'code': '10098', 'value': 'dahua'}, {'code': '10099', 'value': 'dcc'}, {'code': '10100', 'value': 'kademlia'}, {'code': '10101', 'value': 'lansync'}, {'code': '10102', 'value': 'ldap_ad'}, {'code': '10103', 'value': 'llp2p'}, {'code': '10104', 'value': 'mfnp'}, {'code': '10105', 'value': 'mp2p'}, {'code': '10106', 'value': 'msn_cache'}, {'code': '10107', 'value': 'msn_video'}, {'code': '10108', 'value': 'msnc'}, {'code': '10109', 'value': 'netflow'}, {'code': '10110', 'value': 'notes_rpc'}, {'code': '10111', 'value': 'esp'}, {'code': '10112', 'value': 'fbcdn_ssl'}, {'code': '10113', 'value': 'forticlient_sslvpn'}, {'code': '10114', 'value': 'rfb'}, {'code': '10115', 'value': 'rtmfp'}, {'code': '10117', 'value': 'slp'}, {'code': '10118', 'value': 'steam_inhomebroadcast'}, {'code': '10119', 'value': 'steam_localbroadcast'}, {'code': '10120', 'value': 'tpkt'}, {'code': '10121', 'value': 'xmpps'}, {'code': '10122', 'value': 'S7COMM'}, {'code': '10123', 'value': 'CitrixCGP'}, {'code': '10124', 'value': 'ID_Protocol'}, {'code': '10125', 'value': 'SMTP_Secure'}, {'code': '10126', 'value': 'NAT-PMP'}], 'visibility': 'disabled'}, 'label': 'Protocol ID'}, {'name': 'common_start_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'Start Time'}, {'name': 'common_end_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'End Time'}, {'name': 'common_establish_latency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Establish Latency(ms)'}, {'name': 'common_con_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Duration(ms)'}, {'name': 'common_stream_dir', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'c2s'}, {'code': '2', 'value': 's2c'}, {'code': '3', 'value': 'double'}]}, 'label': 'Stream Direction'}, {'name': 'common_address_list', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Address List'}, {'name': 'common_has_dup_traffic', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}], 'visibility': 'hidden'}, 'label': 'Duplication Traffic'}, {'name': 'common_stream_error', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Stream Error'}, {'name': 'common_stream_trace_id', 'type': 'long', 'doc': {'allow_query': 'true'}, 'label': 'Session ID'}, {'name': 'http_url', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'URL'}, {'name': 'http_host', 'type': 'string', 'doc': {'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'Host'}, {'name': 'http_domain', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Domain'}, {'name': 'http_request_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Request Line'}, {'name': 'http_response_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Response Line'}, {'name': 'http_request_header', 'type': 'string', 'label': 'Request Headers'}, {'name': 'http_response_header', 'type': 'string', 'label': 'Response Headers'}, {'name': 'http_request_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Request Body'}, {'name': 'http_response_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Response Body'}, {'name': 'http_request_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Request Body Key'}, {'name': 'http_response_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Response Body Key'}, {'name': 'http_proxy_flag', 'type': 'int', 'label': 'Proxy Flag'}, {'name': 'http_sequence', 'type': 'int', 'label': 'Sequence'}, {'name': 'http_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Http Snapshot'}, {'name': 'http_cookie', 'type': 'string', 'label': 'Cookie'}, {'name': 'http_referer', 'type': 'string', 'label': 'Referer'}, {'name': 'http_user_agent', 'type': 'string', 'label': 'User Agent'}, {'name': 'http_content_length', 'type': 'string', 'label': 'Content Length'}, {'name': 'http_content_type', 'type': 'string', 'label': 'Content Type'}, {'name': 'http_set_cookie', 'type': 'string', 'label': 'Set Cookie'}, {'name': 'http_version', 'type': 'string', 'label': 'Version'}, {'name': 'http_response_lantency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Response Latency(ms)'}, {'name': 'http_session_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Session Duration(ms)'}, {'name': 'mail_protocol_type', 'type': 'string', 'label': 'Protocol Type'}, {'name': 'mail_account', 'type': 'string', 'label': 'Account'}, {'name': 'mail_from_cmd', 'type': 'string', 'label': 'From CMD'}, {'name': 'mail_to_cmd', 'type': 'string', 'label': 'To CMD'}, {'name': 'mail_from', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'From'}, {'name': 'mail_to', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'To'}, {'name': 'mail_cc', 'type': 'string', 'label': 'CC'}, {'name': 'mail_bcc', 'type': 'string', 'label': 'BCC'}, {'name': 'mail_subject', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_subject_charset'}}, 'label': 'Subject'}, {'name': 'mail_subject_charset', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Subject Charset'}, {'name': 'mail_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content'}, {'name': 'mail_content_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content Charset'}, {'name': 'mail_attachment_name', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_attachment_name_charset'}}, 'label': 'Attachment'}, {'name': 'mail_attachment_name_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Charset'}, {'name': 'mail_attachment_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Content'}, {'name': 'mail_eml_file', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'EML File'}, {'name': 'mail_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Snapshot'}, {'name': 'dns_message_id', 'type': 'int', 'label': 'Message ID'}, {'name': 'dns_qr', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'REESPONSE'}]}, 'label': 'QR'}, {'name': 'dns_opcode', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'IQUERY'}, {'code': '2', 'value': 'STATUS'}, {'code': '5', 'value': 'UPDATE'}]}, 'label': 'OPCODE'}, {'name': 'dns_aa', 'type': 'int', 'label': 'AA'}, {'name': 'dns_tc', 'type': 'int', 'label': 'TC'}, {'name': 'dns_rd', 'type': 'int', 'label': 'RD'}, {'name': 'dns_ra', 'type': 'int', 'label': 'RA'}, {'name': 'dns_rcode', 'type': 'int', 'label': 'RCODE'}, {'name': 'dns_qdcount', 'type': 'int', 'label': 'QDCOUNT'}, {'name': 'dns_ancount', 'type': 'int', 'label': 'ANCOUNT'}, {'name': 'dns_nscount', 'type': 'int', 'label': 'NSCOUNT'}, {'name': 'dns_arcount', 'type': 'int', 'label': 'ARCOUNT'}, {'name': 'dns_qname', 'type': 'string', 'label': 'QNAME'}, {'name': 'dns_qtype', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'A'}, {'code': '2', 'value': 'NS'}, {'code': '5', 'value': 'CNAME'}, {'code': '6', 'value': 'SOA'}, {'code': '11', 'value': 'WKS'}, {'code': '12', 'value': 'PTR'}, {'code': '13', 'value': 'HINFO'}, {'code': '11', 'value': 'WKS'}, {'code': '15', 'value': 'MX'}, {'code': '28', 'value': 'AAAA'}]}, 'label': 'QTYPE'}, {'name': 'dns_qclass', 'type': 'int', 'label': 'QCLASS'}, {'name': 'dns_cname', 'type': 'string', 'label': 'CNAME'}, {'name': 'dns_sub', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'DNS'}, {'code': '2', 'value': 'DNSSEC'}]}, 'label': 'SUB'}, {'name': 'dns_rr', 'type': 'string', 'label': 'RR'}, {'name': 'ssl_version', 'type': 'string', 'label': 'Version'}, {'name': 'ssl_sni', 'type': 'string', 'doc': {'allow_query': 'true', 'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'SNI'}, {'name': 'ssl_san', 'type': 'string', 'label': 'SAN'}, {'name': 'ssl_cn', 'type': 'string', 'label': 'CN'}, {'name': 'ssl_pinningst', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Not Pinning'}, {'code': '1', 'value': 'Pinning'}, {'code': '2', 'value': 'Maybe Pinning'}]}, 'label': 'Pinning'}, {'name': 'ssl_intercept_state', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Passthrough'}, {'code': '1', 'value': 'Intercept'}, {'code': '2', 'value': 'Shutdown'}]}, 'label': 'Intercept State'}, {'name': 'ssl_server_side_latency', 'type': 'int', 'label': 'Server Side Latency(ms)'}, {'name': 'ssl_client_side_latency', 'type': 'int', 'label': 'Client Side Latency(ms)'}, {'name': 'ssl_server_side_version', 'type': 'string', 'label': 'Server Side Version'}, {'name': 'ssl_client_side_version', 'type': 'string', 'label': 'Client Side Version'}, {'name': 'ssl_cert_verify', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}]}, 'label': 'Certificate Verify'}, {'name': 'ssl_error', 'type': 'string', 'label': 'Error'}, {'name': 'ssl_con_latency_ms', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Connection Latency(ms)'}, {'name': 'ftp_account', 'type': 'string', 'label': 'Account'}, {'name': 'ftp_url', 'type': 'string', 'label': 'URL'}, {'name': 'ftp_content', 'type': 'string', 'label': 'Content'}, {'name': 'bgp_type', 'type': 'int', 'label': 'Type'}, {'name': 'bgp_as_num', 'type': 'string', 'label': 'AS Number'}, {'name': 'bgp_route', 'type': 'string', 'label': 'Route'}, {'name': 'voip_calling_account', 'type': 'string', 'label': 'Calling Account'}, {'name': 'voip_called_account', 'type': 'string', 'label': 'Called Account'}, {'name': 'voip_calling_number', 'type': 'string', 'label': 'Calling Number'}, {'name': 'voip_called_number', 'type': 'string', 'label': 'Called Number'}, {'name': 'streaming_media_url', 'type': 'string', 'label': 'Media URL'}, {'name': 'streaming_media_protocol', 'type': 'string', 'label': 'Media Protocol'}]}</msg>
<status status="PASS" starttime="20200401 12:23:05.158" endtime="20200401 12:23:05.162"></status>
</kw>
<kw name="Evaluate" library="BuiltIn">
<doc>Evaluates the given expression in Python and returns the results.</doc>
<arguments>
<arg>json.dumps(eval(str(${LogSchemaResponse.body['data']['fields']})))</arg>
<arg>json</arg>
</arguments>
<assign>
<var>${field}</var>
</assign>
<msg timestamp="20200401 12:23:05.186" level="INFO">${field} = [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "com...</msg>
<status status="PASS" starttime="20200401 12:23:05.162" endtime="20200401 12:23:05.186"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${field}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.187" level="INFO">[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}]</msg>
<status status="PASS" starttime="20200401 12:23:05.187" endtime="20200401 12:23:05.188"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>30</arg>
</arguments>
<assign>
<var>${pageSize}</var>
</assign>
<msg timestamp="20200401 12:23:05.188" level="INFO">${pageSize} = 30</msg>
<status status="PASS" starttime="20200401 12:23:05.188" endtime="20200401 12:23:05.189"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>1</arg>
</arguments>
<assign>
<var>${pageNo}</var>
</assign>
<msg timestamp="20200401 12:23:05.189" level="INFO">${pageNo} = 1</msg>
<status status="PASS" starttime="20200401 12:23:05.189" endtime="20200401 12:23:05.189"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>[{"value":["${startTime}","${endTime}"],"symbol":"between","field":"common_recv_time","type":"timestamp"}]</arg>
</arguments>
<assign>
<var>${condition}</var>
</assign>
<msg timestamp="20200401 12:23:05.190" level="INFO">${condition} = [{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}]</msg>
<status status="PASS" starttime="20200401 12:23:05.189" endtime="20200401 12:23:05.190"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"pageNo":${pageNo},"pageSize":${pageSize},"logType":"${logname}","fields":${field},"start_common_recv_time":"${startTime}","end_common_recv_time":"${endTime}","conditions":${condition} ,"common_client_ips":"${client_ip}","common_policy_ids":"${policy_id}"}</arg>
</arguments>
<assign>
<var>${logCondition}</var>
</assign>
<msg timestamp="20200401 12:23:05.191" level="INFO">${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function...</msg>
<status status="PASS" starttime="20200401 12:23:05.190" endtime="20200401 12:23:05.191"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>this time query condition:${logCondition}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.192" level="INFO">this time query condition:{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:22:12","end_common_recv_time":"2020-04-01 12:23:04","conditions":[{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"77"}</msg>
<status status="PASS" starttime="20200401 12:23:05.192" endtime="20200401 12:23:05.193"></status>
</kw>
<msg timestamp="20200401 12:23:05.193" level="INFO">${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function...</msg>
<status status="PASS" starttime="20200401 12:23:04.845" endtime="20200401 12:23:05.194"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logCondition}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.195" level="INFO">{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:22:12","end_common_recv_time":"2020-04-01 12:23:04","conditions":[{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"77"}</msg>
<status status="PASS" starttime="20200401 12:23:05.194" endtime="20200401 12:23:05.196"></status>
</kw>
<kw name="PostRemoteData" library="LogSchema">
<arguments>
<arg>/log/list</arg>
<arg>${logCondition}</arg>
</arguments>
<assign>
<var>${LogListResponse}</var>
</assign>
<kw name="Create Dictionary" library="BuiltIn">
<doc>Creates and returns a dictionary based on the given ``items``.</doc>
<arguments>
<arg>Content-Type=application/json</arg>
<arg>Authorization=${token}</arg>
</arguments>
<assign>
<var>${header}</var>
</assign>
<msg timestamp="20200401 12:23:05.197" level="INFO">${header} = {'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}</msg>
<status status="PASS" starttime="20200401 12:23:05.197" endtime="20200401 12:23:05.197"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}/${version}</arg>
<arg>headers=${header}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.198" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080/v1, headers={'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:23:05.198" endtime="20200401 12:23:05.201"></status>
</kw>
<kw name="Post Request" library="RequestsLibrary">
<doc>Send a POST request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${url}</arg>
<arg>data=${data}</arg>
<arg>headers=${header}</arg>
</arguments>
<assign>
<var>${remoteResponse}</var>
</assign>
<msg timestamp="20200401 12:23:05.204" level="INFO">POST Request using : uri=/log/list, params=None, files=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}
data={"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:22:12","end_common_recv_time":"2020-04-01 12:23:04","conditions":[{"value":["2020-04-01 12:22:12","2020-04-01 12:23:04"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"77"}
json=None</msg>
<msg timestamp="20200401 12:23:05.302" level="INFO">${remoteResponse} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.202" endtime="20200401 12:23:05.302"></status>
</kw>
<msg timestamp="20200401 12:23:05.302" level="INFO">${LogListResponse} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.196" endtime="20200401 12:23:05.302"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${LogListResponse.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.303" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.303" endtime="20200401 12:23:05.303"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${LogListResponse.content}</arg>
</arguments>
<assign>
<var>${returnData}</var>
</assign>
<msg timestamp="20200401 12:23:05.304" level="INFO">To JSON using : content={
"code":200,
"data":{
"list":[],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:23:05.304" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:23:05.305" level="INFO">${returnData} = {'code': 200, 'data': {'list': [], 'pageNo': 1, 'pageSize': 30, 'pages': 0, 'total': 0}, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.304" endtime="20200401 12:23:05.305"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${returnData}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${responseCode}</var>
</assign>
<msg timestamp="20200401 12:23:05.305" level="INFO">${responseCode} = 200</msg>
<status status="PASS" starttime="20200401 12:23:05.305" endtime="20200401 12:23:05.306"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${responseCode}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.306" level="INFO">200</msg>
<status status="PASS" starttime="20200401 12:23:05.306" endtime="20200401 12:23:05.306"></status>
</kw>
<kw name="Should Be Equal" library="BuiltIn">
<doc>Fails if the given objects are unequal.</doc>
<arguments>
<arg>${responseCode}</arg>
<arg>${200}</arg>
<arg>security_event_log \ \ test query list failed</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.307" endtime="20200401 12:23:05.307"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>this time request security_event_log \ table logRecord \ : ${LogListResponse.content}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.308" level="INFO">this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:23:05.307" endtime="20200401 12:23:05.308"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>this time request security_event_log \ table logRecord \ : ${LogListResponse.content}</arg>
</arguments>
<assign>
<var>${a}</var>
</assign>
<msg timestamp="20200401 12:23:05.309" level="INFO">${a} = this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:23:05.308" endtime="20200401 12:23:05.309"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${a}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.309" level="INFO">this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:23:05.309" endtime="20200401 12:23:05.310"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${LogListResponse.json()}[data][list]</arg>
</arguments>
<assign>
<var>${log}</var>
</assign>
<msg timestamp="20200401 12:23:05.311" level="INFO">${log} = []</msg>
<status status="PASS" starttime="20200401 12:23:05.310" endtime="20200401 12:23:05.311"></status>
</kw>
<kw name="${logs} IN [ ${log} ]" type="for">
<kw name="${logs} = []" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logs}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.312" level="INFO">[]</msg>
<status status="PASS" starttime="20200401 12:23:05.311" endtime="20200401 12:23:05.312"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.311" endtime="20200401 12:23:05.312"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.311" endtime="20200401 12:23:05.312"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>%%%%%%%%%%%%%%%%%%%%%%%%${logs}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.313" level="INFO">%%%%%%%%%%%%%%%%%%%%%%%%[]</msg>
<status status="PASS" starttime="20200401 12:23:05.313" endtime="20200401 12:23:05.313"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${client_ip}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.314" level="FAIL">'[]""' does not contain '192.168.50.43'</msg>
<status status="FAIL" starttime="20200401 12:23:05.313" endtime="20200401 12:23:05.314"></status>
</kw>
<status status="FAIL" starttime="20200401 12:23:04.843" endtime="20200401 12:23:05.314"></status>
</kw>
<kw name="DeletePolicyAndObject" library="PolicyObject" type="teardown">
<arguments>
<arg>${policyIds}</arg>
<arg>${objectids}</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyAndObject</arg>
</arguments>
<msg timestamp="20200401 12:23:05.315" level="INFO">toDeletePolicy_DeletePolicyAndObject</msg>
<status status="PASS" starttime="20200401 12:23:05.315" endtime="20200401 12:23:05.315"></status>
</kw>
<kw name="Get Length" library="BuiltIn">
<doc>Returns and logs the length of the given item as an integer.</doc>
<arguments>
<arg>${policyids}</arg>
</arguments>
<assign>
<var>${listlenth}</var>
</assign>
<msg timestamp="20200401 12:23:05.316" level="INFO">Length is 2</msg>
<msg timestamp="20200401 12:23:05.316" level="INFO">${listlenth} = 2</msg>
<status status="PASS" starttime="20200401 12:23:05.316" endtime="20200401 12:23:05.316"></status>
</kw>
<kw name="${var} IN RANGE [ ${listlenth} ]" type="for">
<kw name="${var} = 0" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${var}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.317" level="INFO">0</msg>
<status status="PASS" starttime="20200401 12:23:05.317" endtime="20200401 12:23:05.317"></status>
</kw>
<kw name="DeletePolicy" library="PolicyObject">
<arguments>
<arg>${policyids}[${var}]</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyDeletePolicy</arg>
</arguments>
<msg timestamp="20200401 12:23:05.318" level="INFO">toDeletePolicy_DeletePolicyDeletePolicy</msg>
<status status="PASS" starttime="20200401 12:23:05.318" endtime="20200401 12:23:05.318"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:23:05.319" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:23:05.319" endtime="20200401 12:23:05.319"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.320" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:23:05.320" endtime="20200401 12:23:05.321"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.321" level="INFO">DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"policyType":"tsg_security","policyIds":[76]}
json=None</msg>
<msg timestamp="20200401 12:23:05.463" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.321" endtime="20200401 12:23:05.464"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.466" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.465" endtime="20200401 12:23:05.466"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.467" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.467" endtime="20200401 12:23:05.468"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.469" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:23:05.469" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:23:05.470" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.468" endtime="20200401 12:23:05.470"></status>
</kw>
<msg timestamp="20200401 12:23:05.471" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.319" endtime="20200401 12:23:05.471"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:23:05.472" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:23:05.471" endtime="20200401 12:23:05.472"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.473" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.473" endtime="20200401 12:23:05.473"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.474" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.474" endtime="20200401 12:23:05.475"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.475" endtime="20200401 12:23:05.476"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.317" endtime="20200401 12:23:05.476"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.317" endtime="20200401 12:23:05.476"></status>
</kw>
<kw name="${var} = 1" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${var}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.477" level="INFO">1</msg>
<status status="PASS" starttime="20200401 12:23:05.477" endtime="20200401 12:23:05.478"></status>
</kw>
<kw name="DeletePolicy" library="PolicyObject">
<arguments>
<arg>${policyids}[${var}]</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyDeletePolicy</arg>
</arguments>
<msg timestamp="20200401 12:23:05.479" level="INFO">toDeletePolicy_DeletePolicyDeletePolicy</msg>
<status status="PASS" starttime="20200401 12:23:05.479" endtime="20200401 12:23:05.479"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:23:05.481" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:23:05.480" endtime="20200401 12:23:05.481"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.482" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:23:05.481" endtime="20200401 12:23:05.482"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.483" level="INFO">DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"policyType":"tsg_security","policyIds":[77]}
json=None</msg>
<msg timestamp="20200401 12:23:05.562" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.483" endtime="20200401 12:23:05.563"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.563" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.563" endtime="20200401 12:23:05.563"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.564" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.564" endtime="20200401 12:23:05.564"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.565" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:23:05.565" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:23:05.565" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.564" endtime="20200401 12:23:05.565"></status>
</kw>
<msg timestamp="20200401 12:23:05.566" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.480" endtime="20200401 12:23:05.566"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:23:05.566" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:23:05.566" endtime="20200401 12:23:05.566"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.567" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.566" endtime="20200401 12:23:05.567"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.567" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.567" endtime="20200401 12:23:05.568"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.568" endtime="20200401 12:23:05.568"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.478" endtime="20200401 12:23:05.568"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.477" endtime="20200401 12:23:05.569"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.316" endtime="20200401 12:23:05.569"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>todeleteobj_DeletePolicyAndObject</arg>
</arguments>
<msg timestamp="20200401 12:23:05.569" level="INFO">todeleteobj_DeletePolicyAndObject</msg>
<status status="PASS" starttime="20200401 12:23:05.569" endtime="20200401 12:23:05.569"></status>
</kw>
<kw name="DeleteObject" library="PolicyObject">
<arguments>
<arg>${objectids}</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>todeleteobj</arg>
</arguments>
<msg timestamp="20200401 12:23:05.570" level="INFO">todeleteobj</msg>
<status status="PASS" starttime="20200401 12:23:05.570" endtime="20200401 12:23:05.570"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>{"objectIds":[${objectids}]}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:23:05.571" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:23:05.571" endtime="20200401 12:23:05.572"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.572" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:23:05.572" endtime="20200401 12:23:05.572"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.573" level="INFO">DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"objectIds":[472,473]}
json=None</msg>
<msg timestamp="20200401 12:23:05.662" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.573" endtime="20200401 12:23:05.662"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.663" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.663" endtime="20200401 12:23:05.663"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.664" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.663" endtime="20200401 12:23:05.664"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.665" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:23:05.665" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:23:05.665" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.664" endtime="20200401 12:23:05.665"></status>
</kw>
<msg timestamp="20200401 12:23:05.666" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.571" endtime="20200401 12:23:05.666"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:23:05.667" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:23:05.666" endtime="20200401 12:23:05.667"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:23:05.667" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:23:05.667" endtime="20200401 12:23:05.668"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.668" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:23:05.668" endtime="20200401 12:23:05.669"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.669" endtime="20200401 12:23:05.669"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.570" endtime="20200401 12:23:05.670"></status>
</kw>
<status status="PASS" starttime="20200401 12:23:05.314" endtime="20200401 12:23:05.670"></status>
</kw>
<tags>
<tag>Allow</tag>
<tag>Category</tag>
<tag>DENY</tag>
<tag>HTTP</tag>
<tag>SubID</tag>
<tag>tsg_adc</tag>
<tag>tsg_security</tag>
</tags>
<status status="FAIL" starttime="20200401 12:21:52.096" endtime="20200401 12:23:05.670" critical="yes">'[]""' does not contain '192.168.50.43'</status>
</test>
<test id="s1-s1-s1-s1-s1-t3" name="SecurityPolicy-Allow-Http-00003">
<kw name="AddObject" library="PolicyObject">
<arguments>
<arg>{"opAction":"add","returnData":1,"objectList":{"objectType":"fqdn","objectSubType":"","isValid":1,"isInitialize":0,"isExclusion":0,"objectName":"SecurityPolicy-Allow-Http-00001_FQDN_xiaozhu","objectDesc":"","subObjectIds":[],"addItemList":[{"keywordArray":["*.xiaozhu.com"],"itemId":"","isHexbin":0}],"updateItemList":[],"deleteItemIds":[]}}</arg>
</arguments>
<assign>
<var>${rescodeip}</var>
<var>${object_FQDN_Id}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.673" endtime="20200401 12:23:05.673"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:23:05.931" level="INFO">&amp;{httpResponse} = { seconds=0.253226 | status=200 | body={'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*.xiaozhu.com'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, ...</msg>
<status status="PASS" starttime="20200401 12:23:05.673" endtime="20200401 12:23:05.931"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:23:05.932" level="INFO">
{
"code": 200,
"data": {
"objectList": [
{
"addItemList": [
{
"itemId": "",
"keywordArray": [
"*.xiaozhu.com"
],
"isHexbin": 0
}
],
"deleteItemIds": [],
"isExclusion": 0,
"isInitialize": 0,
"isValid": 1,
"objectDesc": "",
"objectId": 474,
"objectName": "SecurityPolicy-Allow-Http-00001_FQDN_xiaozhu",
"objectSubType": "",
"objectType": "fqdn",
"opTime": "2020-04-01 12:23:04",
"opUser": 981,
"subObjectIds": [],
"updateItemList": []
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:23:05.931" endtime="20200401 12:23:05.933"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.933" endtime="20200401 12:23:05.935"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:05.936" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*.xiaozhu.com'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objec...</msg>
<status status="PASS" starttime="20200401 12:23:05.936" endtime="20200401 12:23:05.936"></status>
</kw>
<msg timestamp="20200401 12:23:05.937" level="INFO">${response} = {'code': 200, 'data': {'objectList': [{'addItemList': [{'itemId': '', 'keywordArray': ['*.xiaozhu.com'], 'isHexbin': 0}], 'deleteItemIds': [], 'isExclusion': 0, 'isInitialize': 0, 'isValid': 1, 'objec...</msg>
<status status="PASS" starttime="20200401 12:23:05.672" endtime="20200401 12:23:05.937"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['objectList'][0]['objectId']}</arg>
</arguments>
<assign>
<var>${objectId}</var>
</assign>
<msg timestamp="20200401 12:23:05.937" level="INFO">${objectId} = 474</msg>
<status status="PASS" starttime="20200401 12:23:05.937" endtime="20200401 12:23:05.937"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescodeReturn}</var>
</assign>
<msg timestamp="20200401 12:23:05.938" level="INFO">${rescodeReturn} = 200</msg>
<status status="PASS" starttime="20200401 12:23:05.938" endtime="20200401 12:23:05.938"></status>
</kw>
<msg timestamp="20200401 12:23:05.939" level="INFO">${rescodeip} = 200</msg>
<msg timestamp="20200401 12:23:05.939" level="INFO">${object_FQDN_Id} = 474</msg>
<status status="PASS" starttime="20200401 12:23:05.672" endtime="20200401 12:23:05.939"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${object_FQDN_Id}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.940" level="INFO">474</msg>
<status status="PASS" starttime="20200401 12:23:05.939" endtime="20200401 12:23:05.940"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${object_FQDN_Id}</arg>
</arguments>
<assign>
<var>${objectids}</var>
</assign>
<msg timestamp="20200401 12:23:05.940" level="INFO">${objectids} = 474</msg>
<status status="PASS" starttime="20200401 12:23:05.940" endtime="20200401 12:23:05.941"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<msg timestamp="20200401 12:23:05.941" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po...</msg>
<status status="PASS" starttime="20200401 12:23:05.941" endtime="20200401 12:23:05.941"></status>
</kw>
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>'${addTestClentIPFlag}'=='1'</arg>
<arg>set variable</arg>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.942" endtime="20200401 12:23:05.942"></status>
</kw>
<msg timestamp="20200401 12:23:05.943" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"po...</msg>
<status status="PASS" starttime="20200401 12:23:05.942" endtime="20200401 12:23:05.943"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<msg timestamp="20200401 12:23:05.944" level="INFO">{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001_Deny","policyType":"tsg_security","action":"deny","userTags":"","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP","method":"drop"},"referenceObject":[{"objectId":470,"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":474,"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</msg>
<status status="PASS" starttime="20200401 12:23:05.943" endtime="20200401 12:23:05.944"></status>
</kw>
<kw name="AddPolicy" library="PolicyObject">
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${policyId1}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:05.945" endtime="20200401 12:23:05.945"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:23:06.189" level="INFO">&amp;{httpResponse} = { seconds=0.240316 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 62.0, 'evalu...</msg>
<status status="PASS" starttime="20200401 12:23:05.946" endtime="20200401 12:23:06.189"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:23:06.190" level="INFO">
{
"code": 200,
"data": {
"policyList": [
{
"action": "deny",
"appObjectIdArray": [
2
],
"doLog": 1,
"evaluationLayer": "session_layer",
"evaluationOrder": 62.0,
"evaluationStage": 1,
"isValid": 1,
"newSrcIpObjName": "autotestLocalIPObject_192.168.50.43",
"opTime": "2020-04-01 12:23:04",
"opUser": 981,
"policyDesc": "autotest",
"policyId": 78,
"policyName": "SecurityPolicy-Allow-Http-00001_Deny",
"policyType": "tsg_security",
"protocol": "HTTP",
"referenceObject": [],
"scheduleId": [],
"userRegion": {
"protocol": "HTTP",
"method": "drop"
},
"userTags": ""
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:23:06.190" endtime="20200401 12:23:06.191"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:06.191" endtime="20200401 12:23:06.193"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:06.194" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 62.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp...</msg>
<status status="PASS" starttime="20200401 12:23:06.194" endtime="20200401 12:23:06.194"></status>
</kw>
<msg timestamp="20200401 12:23:06.195" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'deny', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 62.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcIp...</msg>
<status status="PASS" starttime="20200401 12:23:05.944" endtime="20200401 12:23:06.195"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['policyList'][0]['policyId']}</arg>
</arguments>
<assign>
<var>${policyId}</var>
</assign>
<msg timestamp="20200401 12:23:06.196" level="INFO">${policyId} = 78</msg>
<status status="PASS" starttime="20200401 12:23:06.195" endtime="20200401 12:23:06.196"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:23:06.196" level="INFO">${rescode} = 200</msg>
<status status="PASS" starttime="20200401 12:23:06.196" endtime="20200401 12:23:06.197"></status>
</kw>
<msg timestamp="20200401 12:23:06.197" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:23:06.197" level="INFO">${policyId1} = 78</msg>
<status status="PASS" starttime="20200401 12:23:05.944" endtime="20200401 12:23:06.197"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${policyId1}</arg>
</arguments>
<msg timestamp="20200401 12:23:06.198" level="INFO">78</msg>
<status status="PASS" starttime="20200401 12:23:06.198" endtime="20200401 12:23:06.198"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId1}]}</arg>
</arguments>
<assign>
<var>${policyIds}</var>
</assign>
<msg timestamp="20200401 12:23:06.199" level="INFO">${policyIds} = {"policyType":"tsg_security","policyIds":[78]}</msg>
<status status="PASS" starttime="20200401 12:23:06.198" endtime="20200401 12:23:06.199"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<msg timestamp="20200401 12:23:06.200" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00003","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy...</msg>
<status status="PASS" starttime="20200401 12:23:06.199" endtime="20200401 12:23:06.200"></status>
</kw>
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>'${addTestClentIPFlag}'=='1'</arg>
<arg>set variable</arg>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<assign>
<var>${addPolicyStr}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"${userTagIds}","doBlacklist":0,"doLog":1,"policyDesc":"autotest","effectiveRange":{"tag_sets":[[]]},"userRegion":{"protocol":"HTTP"},"referenceObject":[{"objectId":${testClentID},"protocolFields":["TSG_SECURITY_SOURCE_ADDR"]},{"objectId":${object_FQDN_Id},"protocolFields":["TSG_FIELD_HTTP_HOST"]}],"isValid":1,"scheduleId":[],"appObjectIdArray":[2]}}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:06.201" endtime="20200401 12:23:06.201"></status>
</kw>
<msg timestamp="20200401 12:23:06.201" level="INFO">${addPolicyStr} = {"opAction":"add","returnData":1,"policyList":{"policyId":"","policyName":"SecurityPolicy-Allow-Http-00001","policyType":"tsg_security","action":"allow","userTags":"","doBlacklist":0,"doLog":1,"policy...</msg>
<status status="PASS" starttime="20200401 12:23:06.200" endtime="20200401 12:23:06.202"></status>
</kw>
<kw name="AddPolicy" library="PolicyObject">
<arguments>
<arg>${addPolicyStr}</arg>
</arguments>
<assign>
<var>${rescode}</var>
<var>${policyId2}</var>
</assign>
<kw name="BasePostRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>body=${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:06.203" endtime="20200401 12:23:06.203"></status>
</kw>
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>${apistr}</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>&amp;{httpResponse}</var>
</assign>
<msg timestamp="20200401 12:23:06.489" level="INFO">&amp;{httpResponse} = { seconds=0.28247000000000005 | status=200 | body={'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': ...</msg>
<status status="PASS" starttime="20200401 12:23:06.204" endtime="20200401 12:23:06.489"></status>
</kw>
<kw name="Output" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:23:06.490" level="INFO">
{
"code": 200,
"data": {
"policyList": [
{
"action": "allow",
"appObjectIdArray": [
2
],
"doLog": 1,
"evaluationLayer": "session_layer",
"evaluationOrder": 63.0,
"evaluationStage": 1,
"isValid": 1,
"newSrcIpObjName": "autotestLocalIPObject_192.168.50.43",
"opTime": "2020-04-01 12:23:05",
"opUser": 981,
"policyDesc": "autotest",
"policyId": 79,
"policyName": "SecurityPolicy-Allow-Http-00001",
"policyType": "tsg_security",
"protocol": "HTTP",
"referenceObject": [],
"scheduleId": [],
"userRegion": {
"protocol": "HTTP"
},
"userTags": ""
}
]
},
"msg": "Success",
"success": true
}</msg>
<status status="PASS" starttime="20200401 12:23:06.490" endtime="20200401 12:23:06.491"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:06.491" endtime="20200401 12:23:06.493"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${httpResponse.body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:23:06.494" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 63.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI...</msg>
<status status="PASS" starttime="20200401 12:23:06.494" endtime="20200401 12:23:06.494"></status>
</kw>
<msg timestamp="20200401 12:23:06.494" level="INFO">${response} = {'code': 200, 'data': {'policyList': [{'action': 'allow', 'appObjectIdArray': [2], 'doLog': 1, 'evaluationLayer': 'session_layer', 'evaluationOrder': 63.0, 'evaluationStage': 1, 'isValid': 1, 'newSrcI...</msg>
<status status="PASS" starttime="20200401 12:23:06.202" endtime="20200401 12:23:06.495"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['data']['policyList'][0]['policyId']}</arg>
</arguments>
<assign>
<var>${policyId}</var>
</assign>
<msg timestamp="20200401 12:23:06.495" level="INFO">${policyId} = 79</msg>
<status status="PASS" starttime="20200401 12:23:06.495" endtime="20200401 12:23:06.495"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${response['code']}</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:23:06.496" level="INFO">${rescode} = 200</msg>
<status status="PASS" starttime="20200401 12:23:06.496" endtime="20200401 12:23:06.496"></status>
</kw>
<msg timestamp="20200401 12:23:06.496" level="INFO">${rescode} = 200</msg>
<msg timestamp="20200401 12:23:06.496" level="INFO">${policyId2} = 79</msg>
<status status="PASS" starttime="20200401 12:23:06.202" endtime="20200401 12:23:06.497"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${policyId2}</arg>
</arguments>
<msg timestamp="20200401 12:23:06.497" level="INFO">79</msg>
<status status="PASS" starttime="20200401 12:23:06.497" endtime="20200401 12:23:06.497"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId2}]}</arg>
</arguments>
<assign>
<var>${policyIds2}</var>
</assign>
<msg timestamp="20200401 12:23:06.498" level="INFO">${policyIds2} = {"policyType":"tsg_security","policyIds":[79]}</msg>
<status status="PASS" starttime="20200401 12:23:06.497" endtime="20200401 12:23:06.498"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"policyType":"tsg_security","policyIds":[${policyId1}]}</arg>
</arguments>
<assign>
<var>${policyIds1}</var>
</assign>
<msg timestamp="20200401 12:23:06.499" level="INFO">${policyIds1} = {"policyType":"tsg_security","policyIds":[78]}</msg>
<status status="PASS" starttime="20200401 12:23:06.498" endtime="20200401 12:23:06.499"></status>
</kw>
<kw name="Create List" library="BuiltIn">
<doc>Returns a list containing given items.</doc>
<arguments>
<arg>${policyIds1}</arg>
<arg>${policyIds2}</arg>
</arguments>
<assign>
<var>${policyIds}</var>
</assign>
<msg timestamp="20200401 12:23:06.500" level="INFO">${policyIds} = ['{"policyType":"tsg_security","policyIds":[78]}', '{"policyType":"tsg_security","policyIds":[79]}']</msg>
<status status="PASS" starttime="20200401 12:23:06.499" endtime="20200401 12:23:06.500"></status>
</kw>
<kw name="Get Time" library="BuiltIn">
<doc>Returns the given time in the requested format.</doc>
<assign>
<var>${starttime}</var>
</assign>
<msg timestamp="20200401 12:23:06.500" level="INFO">${starttime} = 2020-04-01 12:23:06</msg>
<status status="PASS" starttime="20200401 12:23:06.500" endtime="20200401 12:23:06.500"></status>
</kw>
<kw name="Sleep" library="BuiltIn">
<doc>Pauses the test executed for the given time.</doc>
<arguments>
<arg>${policyVerificationSleepSeconds}s</arg>
</arguments>
<msg timestamp="20200401 12:23:26.502" level="INFO">Slept 20 seconds</msg>
<status status="PASS" starttime="20200401 12:23:06.501" endtime="20200401 12:23:26.502"></status>
</kw>
<kw name="Run" library="OperatingSystem">
<doc>Runs the given command in the system and returns the output.</doc>
<arguments>
<arg>curl -I \ -m \ 10 \ -o \ /dev/null \ -s \ -w \ \ \%{http_code} \ \ http://www.xiaozhu.com/</arg>
</arguments>
<assign>
<var>${commandreturn}</var>
</assign>
<msg timestamp="20200401 12:23:26.545" level="INFO">Running command 'curl -I -m 10 -o /dev/null -s -w %{http_code} http://www.xiaozhu.com/ 2&gt;&amp;1'.</msg>
<msg timestamp="20200401 12:23:36.010" level="INFO">${commandreturn} = 200</msg>
<status status="PASS" starttime="20200401 12:23:26.503" endtime="20200401 12:23:36.011"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${commandreturn}</arg>
<arg>200</arg>
</arguments>
<status status="PASS" starttime="20200401 12:23:36.011" endtime="20200401 12:23:36.012"></status>
</kw>
<kw name="Sleep" library="BuiltIn">
<doc>Pauses the test executed for the given time.</doc>
<arguments>
<arg>${policyLogVerificationSleepSeconds}s</arg>
</arguments>
<msg timestamp="20200401 12:24:26.014" level="INFO">Slept 50 seconds</msg>
<status status="PASS" starttime="20200401 12:23:36.013" endtime="20200401 12:24:26.014"></status>
</kw>
<kw name="Get Time" library="BuiltIn">
<doc>Returns the given time in the requested format.</doc>
<assign>
<var>${endtime}</var>
</assign>
<msg timestamp="20200401 12:24:26.015" level="INFO">${endtime} = 2020-04-01 12:24:26</msg>
<status status="PASS" starttime="20200401 12:24:26.015" endtime="20200401 12:24:26.016"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${policyId2}</arg>
</arguments>
<assign>
<var>${s}</var>
</assign>
<msg timestamp="20200401 12:24:26.016" level="INFO">${s} = 79</msg>
<status status="PASS" starttime="20200401 12:24:26.016" endtime="20200401 12:24:26.016"></status>
</kw>
<kw name="GetLogList" library="LogVariable">
<arguments>
<arg>security_event_log</arg>
<arg>${starttime}</arg>
<arg>${endtime}</arg>
<arg>${testClentIP}</arg>
<arg>${s}</arg>
<arg>http_host</arg>
<arg>.xiaozhu.com</arg>
</arguments>
<kw name="GetLogCondition" library="LogSchema">
<arguments>
<arg>${logType}</arg>
<arg>${startTime}</arg>
<arg>${endTime}</arg>
<arg>${client_ip}</arg>
<arg>${policy_id}</arg>
</arguments>
<assign>
<var>${logCondition}</var>
</assign>
<kw name="Set Headers" library="REST">
<tags>
<tag>settings</tag>
</tags>
<doc>*Sets new request headers or updates the existing.*</doc>
<arguments>
<arg>{"Content-Type":"application/x-www-form-urlencoded","Authorization":"${token}"}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.018" endtime="20200401 12:24:26.018"></status>
</kw>
<kw name="Get" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a GET request to the endpoint.*</doc>
<arguments>
<arg>/v1/log/schema?logType=${logname}</arg>
</arguments>
<assign>
<var>&amp;{LogSchemaResponse}</var>
</assign>
<msg timestamp="20200401 12:24:26.250" level="INFO">&amp;{LogSchemaResponse} = { seconds=0.182528 | status=200 | body={'code': 200, 'data': {'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'co...</msg>
<status status="PASS" starttime="20200401 12:24:26.018" endtime="20200401 12:24:26.250"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logname}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.251" level="INFO">security_event_log</msg>
<status status="PASS" starttime="20200401 12:24:26.251" endtime="20200401 12:24:26.251"></status>
</kw>
<kw name="Output Schema" library="REST">
<tags>
<tag>I/O</tag>
</tags>
<doc>*Outputs JSON Schema to terminal or a file.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<msg timestamp="20200401 12:24:26.261" level="INFO">
{
"type": "object",
"properties": {
"code": {
"type": "integer",
"default": 200
},
"data": {
"type": "object",
"properties": {
"doc": {
"type": "object",
"properties": {
"schema_query": {
"type": "object",
"properties": {
"dimensions": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_server_ip",
"common_client_ip",
"common_policy_id",
"common_action",
"common_sled_ip",
"common_server_location",
"common_subscriber_id",
"http_domain"
]
},
"metrics": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_server_ip",
"common_client_ip",
"common_subscriber_id",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num"
]
},
"filters": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_policy_id",
"common_action",
"common_address_type",
"common_server_ip",
"common_client_ip",
"common_server_port",
"common_server_location",
"common_subscriber_id",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"http_domain",
"http_content_type",
"ssl_sni",
"ssl_pinningst",
"ssl_intercept_state"
]
}
},
"required": [
"dimensions",
"filters",
"metrics"
]
},
"schema_type": {
"type": "object",
"properties": {
"BASE": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"HTTP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"http_url",
"http_host",
"http_domain",
"http_request_line",
"http_response_line",
"http_request_header",
"http_response_header",
"http_request_body",
"http_response_body",
"http_request_body_key",
"http_response_body_key",
"http_proxy_flag",
"http_sequence",
"http_snapshot",
"http_cookie",
"http_referer",
"http_user_agent",
"http_content_length",
"http_content_type",
"http_set_cookie",
"http_version",
"http_response_lantency_ms",
"http_session_duration_ms"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"http_url",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"MAIL": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"mail_protocol_type",
"mail_account",
"mail_from_cmd",
"mail_to_cmd",
"mail_from",
"mail_to",
"mail_cc",
"mail_bcc",
"mail_subject",
"mail_subject_charset",
"mail_content",
"mail_content_charset",
"mail_attachment_name",
"mail_attachment_name_charset",
"mail_attachment_content",
"mail_eml_file",
"mail_snapshot"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"mail_from",
"mail_to",
"mail_subject"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"DNS": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"dns_message_id",
"dns_qr",
"dns_opcode",
"dns_aa",
"dns_tc",
"dns_rd",
"dns_ra",
"dns_rcode",
"dns_qdcount",
"dns_ancount",
"dns_nscount",
"dns_arcount",
"dns_qname",
"dns_qtype",
"dns_qclass",
"dns_cname",
"dns_sub",
"dns_rr"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_client_ip",
"dns_qr",
"dns_qname",
"dns_qtype"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"SSL": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"ssl_sni",
"ssl_san",
"ssl_cn",
"ssl_pinningst",
"ssl_intercept_state",
"ssl_server_side_latency",
"ssl_client_side_latency",
"ssl_server_side_version",
"ssl_client_side_version",
"ssl_cert_verify",
"ssl_error",
"ssl_con_latency_ms"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"ssl_sni",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"FTP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"ftp_account",
"ftp_url",
"ftp_content"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"ftp_url",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"BGP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"bgp_type",
"bgp_as_num",
"bgp_route"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"bgp_type",
"bgp_as_num",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
},
"VOIP": {
"type": "object",
"properties": {
"columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_client_port",
"common_l4_protocol",
"common_address_type",
"common_server_ip",
"common_server_port",
"common_action",
"common_direction",
"common_entrance_id",
"common_sled_ip",
"common_client_location",
"common_client_asn",
"common_server_location",
"common_server_asn",
"common_c2s_pkt_num",
"common_s2c_pkt_num",
"common_c2s_byte_num",
"common_s2c_byte_num",
"common_service",
"common_schema_type",
"common_user_tags",
"common_sub_action",
"common_user_region",
"common_device_id",
"common_link_id",
"common_isp",
"common_encapsulation",
"common_app_label",
"common_app_id",
"common_protocol_id",
"common_start_time",
"common_end_time",
"common_establish_latency_ms",
"common_con_duration_ms",
"common_stream_dir",
"common_address_list",
"common_has_dup_traffic",
"common_stream_error",
"common_stream_trace_id",
"voip_calling_account",
"voip_called_account",
"voip_calling_number",
"voip_called_number"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"voip_calling_account",
"voip_called_account",
"common_server_ip",
"common_server_port"
]
}
},
"required": [
"columns",
"default_columns"
]
}
},
"required": [
"BASE",
"BGP",
"DNS",
"FTP",
"HTTP",
"MAIL",
"SSL",
"VOIP"
]
},
"default_columns": {
"type": "array",
"items": {
"type": "string"
},
"default": [
"common_recv_time",
"common_log_id",
"common_policy_id",
"common_subscriber_id",
"common_client_ip",
"common_server_ip",
"common_server_port",
"common_schema_type"
]
}
},
"required": [
"default_columns",
"schema_query",
"schema_type"
]
},
"fields": {
"type": "array",
"items": {
"type": "object",
"properties": {
"name": {
"type": "string"
},
"type": {
"type": "string"
},
"doc": {
"type": "object",
"properties": {
"allow_query": {
"type": "string"
},
"constraints": {
"type": "object",
"properties": {
"type": {
"type": "string"
}
},
"required": [
"type"
]
},
"format": {
"type": "object",
"properties": {
"functions": {
"type": "string"
},
"appendTo": {
"type": "string"
},
"param": {
"type": "string"
}
},
"required": [
"functions"
]
},
"data": {
"type": "array",
"items": {
"type": "object",
"properties": {
"code": {
"type": "string"
},
"value": {
"type": "string"
}
},
"required": [
"code",
"value"
]
}
},
"visibility": {
"type": "string"
}
}
},
"label": {
"type": "string"
}
},
"required": [
"label",
"name",
"type"
]
},
"default": [
{
"name": "common_recv_time",
"type": "int",
"doc": {
"allow_query": "true",
"constraints": {
"type": "timestamp"
},
"format": {
"functions": "current_timestamp"
}
},
"label": "Receive Time"
},
{
"name": "common_log_id",
"type": "long",
"doc": {
"allow_query": "true",
"format": {
"functions": "snowflake_id"
}
},
"label": "Log ID"
},
{
"name": "common_policy_id",
"type": "int",
"doc": {
"allow_query": "true"
},
"label": "Policy ID"
},
{
"name": "common_subscriber_id",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "Subscriber ID"
},
{
"name": "common_client_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
},
"format": {
"functions": "geo_ip_detail,geo_asn,radius_match",
"appendTo": "common_client_location,common_client_asn,common_subscriber_id"
}
},
"label": "Client IP"
},
{
"name": "common_client_port",
"type": "int",
"label": "Client Port"
},
{
"name": "common_l4_protocol",
"type": "string",
"label": "L4 Protocol"
},
{
"name": "common_address_type",
"type": "int",
"doc": {
"data": [
{
"code": "4",
"value": "ipv4"
},
{
"code": "6",
"value": "ipv6"
}
]
},
"label": "Address Type"
},
{
"name": "common_server_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
},
"format": {
"functions": "geo_ip_country,geo_asn",
"appendTo": "common_server_location,common_server_asn"
}
},
"label": "Server IP"
},
{
"name": "common_server_port",
"type": "int",
"doc": {
"allow_query": "true"
},
"label": "Server Port"
},
{
"name": "common_action",
"type": "int",
"doc": {
"allow_query": "true",
"data": [
{
"code": "0",
"value": "None"
},
{
"code": "1",
"value": "Monitor"
},
{
"code": "2",
"value": "Intercept"
},
{
"code": "16",
"value": "Deny"
},
{
"code": "48",
"value": "Manipulation"
},
{
"code": "128",
"value": "Allow"
}
]
},
"label": "Action"
},
{
"name": "common_direction",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "outbound"
},
{
"code": "1",
"value": "inbound"
}
]
},
"label": "Direction"
},
{
"name": "common_entrance_id",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Entrance ID"
},
{
"name": "common_sled_ip",
"type": "string",
"doc": {
"allow_query": "true",
"constraints": {
"type": "ip"
}
},
"label": "Sled IP"
},
{
"name": "common_client_location",
"type": "string",
"label": "Client Location"
},
{
"name": "common_client_asn",
"type": "string",
"label": "Client ASN"
},
{
"name": "common_server_location",
"type": "string",
"label": "Server Location"
},
{
"name": "common_server_asn",
"type": "string",
"label": "Server ASN"
},
{
"name": "common_c2s_pkt_num",
"type": "int",
"label": "Packets Sent"
},
{
"name": "common_s2c_pkt_num",
"type": "int",
"label": "Packets Received"
},
{
"name": "common_c2s_byte_num",
"type": "int",
"label": "Bytes Sent"
},
{
"name": "common_s2c_byte_num",
"type": "int",
"label": "Bytes Received"
},
{
"name": "common_service",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Service"
},
{
"name": "common_schema_type",
"type": "string",
"doc": {
"data": [
{
"code": "BASE",
"value": "BASE"
},
{
"code": "HTTP",
"value": "HTTP"
},
{
"code": "MAIL",
"value": "MAIL"
},
{
"code": "DNS",
"value": "DNS"
},
{
"code": "SSL",
"value": "SSL"
},
{
"code": "FTP",
"value": "FTP"
},
{
"code": "BGP",
"value": "BGP"
},
{
"code": "VOIP",
"value": "VOIP"
},
{
"code": "RADIUS",
"value": "RADIUS"
}
],
"allow_query": "true"
},
"label": "Schema Type"
},
{
"name": "common_user_tags",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "User Tags"
},
{
"name": "common_sub_action",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Sub Action"
},
{
"name": "common_user_region",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "User Region"
},
{
"name": "common_device_id",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Device ID"
},
{
"name": "common_link_id",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Link ID"
},
{
"name": "common_isp",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "ISP"
},
{
"name": "common_encapsulation",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Ethernet"
},
{
"code": "8",
"value": "PPP"
},
{
"code": "12",
"value": "CiscoHDLC"
}
]
},
"label": "Encapsulation"
},
{
"name": "common_app_label",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Application Label"
},
{
"name": "common_app_id",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "NOT SPECIFIED"
},
{
"code": "100001",
"value": "Skype"
},
{
"code": "100101",
"value": "Instagram"
},
{
"code": "100201",
"value": "Youtube"
},
{
"code": "100301",
"value": "Facebook"
},
{
"code": "100401",
"value": "What‘s App"
},
{
"code": "100501",
"value": "Periscope"
},
{
"code": "100601",
"value": "Viber"
},
{
"code": "100701",
"value": "Twitter"
},
{
"code": "100801",
"value": "Vkontakte"
},
{
"code": "100901",
"value": "Telegram"
},
{
"code": "101001",
"value": "Odnoklassniki"
},
{
"code": "101101",
"value": "Mail agent"
},
{
"code": "101201",
"value": "FaceTime"
},
{
"code": "101301",
"value": "Snapchat"
},
{
"code": "101401",
"value": "Google"
},
{
"code": "101501",
"value": "Yandex"
},
{
"code": "101601",
"value": "Yandex Browser Turbo"
},
{
"code": "101701",
"value": "Opera"
},
{
"code": "101702",
"value": "Opera Turbo"
},
{
"code": "101703",
"value": "Opera mini"
},
{
"code": "101801",
"value": "AppStore"
},
{
"code": "101901",
"value": "PlayMarket"
},
{
"code": "102001",
"value": "Drugvokrug social networking"
},
{
"code": "102101",
"value": "Badoo social networking"
},
{
"code": "102201",
"value": "WeChat"
},
{
"code": "102301",
"value": "Zello"
},
{
"code": "102401",
"value": "Freegate"
},
{
"code": "102501",
"value": "Psiphon"
},
{
"code": "102601",
"value": "TOR"
},
{
"code": "102602",
"value": "Tor browser"
},
{
"code": "102603",
"value": "Tor mode"
},
{
"code": "102701",
"value": "Orbot"
},
{
"code": "102801",
"value": "Tunnel Bear VPN"
},
{
"code": "102901",
"value": "HotSpot Shield VPN"
},
{
"code": "103001",
"value": "VPN Master"
},
{
"code": "103101",
"value": "Hola VPN"
},
{
"code": "103201",
"value": "HideMyAss VPN"
},
{
"code": "103301",
"value": "Zenmate VPN"
},
{
"code": "103401",
"value": "SignalPrivateMessenger"
},
{
"code": "200001",
"value": "RFA"
},
{
"code": "200002",
"value": "VOA"
},
{
"code": "200003",
"value": "lantern"
},
{
"code": "200004",
"value": "Line"
},
{
"code": "200005",
"value": "voxer"
},
{
"code": "200006",
"value": "ZeroNet"
},
{
"code": "200007",
"value": "Zalo"
},
{
"code": "200008",
"value": "free_browser"
},
{
"code": "200009",
"value": "Diaspora"
},
{
"code": "200010",
"value": "browsec"
},
{
"code": "200011",
"value": "Chrome_plugin_chuguo"
},
{
"code": "200012",
"value": "GoGo_SocksHttp"
},
{
"code": "200013",
"value": "ultrasurf_chrome"
},
{
"code": "200014",
"value": "pinterest"
},
{
"code": "200015",
"value": "Swisscom"
},
{
"code": "200016",
"value": "Threema"
},
{
"code": "200017",
"value": "Circuit_iOS"
},
{
"code": "200018",
"value": "Chrome_plugin_FastsTunnel"
},
{
"code": "200019",
"value": "OoVoo"
},
{
"code": "200020",
"value": "Vine"
},
{
"code": "200021",
"value": "Keek"
},
{
"code": "200022",
"value": "Hi"
},
{
"code": "200023",
"value": "HeyTell"
},
{
"code": "200024",
"value": "HikeMessenger"
},
{
"code": "200025",
"value": "Nonoh"
},
{
"code": "200026",
"value": "Path"
},
{
"code": "200027",
"value": "Kik"
},
{
"code": "200028",
"value": "BBM"
},
{
"code": "200029",
"value": "Talkray"
},
{
"code": "200030",
"value": "HelloTalk"
},
{
"code": "200031",
"value": "Skout"
},
{
"code": "200032",
"value": "MeetMe"
},
{
"code": "200033",
"value": "Nextdoor"
},
{
"code": "200034",
"value": "Shots"
},
{
"code": "200035",
"value": "Zoosk"
},
{
"code": "200036",
"value": "TextPlus"
},
{
"code": "200037",
"value": "Maaii"
},
{
"code": "200038",
"value": "Ustream"
},
{
"code": "200039",
"value": "Yikyak"
},
{
"code": "200040",
"value": "chatsecure"
},
{
"code": "200041",
"value": "freecalls"
},
{
"code": "200042",
"value": "SignalPrivateMessenger"
},
{
"code": "200043",
"value": "USGOV_CIA"
},
{
"code": "200044",
"value": "USGOV_FBI"
},
{
"code": "200045",
"value": "USGOV_DHS"
},
{
"code": "200046",
"value": "shenxun_Secure_Call_android"
},
{
"code": "200047",
"value": "shenxun_Secure_Call_web"
},
{
"code": "200048",
"value": "UProxy"
},
{
"code": "200049",
"value": "soma"
},
{
"code": "200050",
"value": "PlayerUnknown's_Battlegrounds"
},
{
"code": "200051",
"value": "STEAM"
},
{
"code": "200052",
"value": "dalai_lama"
},
{
"code": "200053",
"value": "Steam_forum"
},
{
"code": "200054",
"value": "Microsoft Online Certificate"
},
{
"code": "200055",
"value": "sogou_spider"
},
{
"code": "200056",
"value": "baidu_mobie"
},
{
"code": "200057",
"value": "Apple Push Service"
},
{
"code": "200058",
"value": "IQIYI"
},
{
"code": "200059",
"value": "baidu_spider"
},
{
"code": "200060",
"value": "Weibo"
},
{
"code": "200061",
"value": "Apple captive service"
},
{
"code": "200062",
"value": "Microsoft wns"
},
{
"code": "200063",
"value": "360_safe_pc"
},
{
"code": "200064",
"value": "Sogou Public Service"
},
{
"code": "200065",
"value": "Lenovo app_POST service"
},
{
"code": "200066",
"value": "Apple securityd service"
},
{
"code": "200067",
"value": "Weather pass"
},
{
"code": "200068",
"value": "Apple Service Pack"
},
{
"code": "200069",
"value": "Fast pressure"
},
{
"code": "200070",
"value": "SemrushBot"
},
{
"code": "200071",
"value": "Adrefs_spider"
},
{
"code": "200072",
"value": "AndroidDownloadManager"
},
{
"code": "200073",
"value": "XenderTop"
},
{
"code": "200074",
"value": "microsoft_update"
},
{
"code": "200075",
"value": "Youku"
},
{
"code": "200076",
"value": "Google_spider"
},
{
"code": "200077",
"value": "Microsoft User Experience and Telemetry Components"
},
{
"code": "200078",
"value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"
},
{
"code": "200079",
"value": "Microsoft ncsi"
},
{
"code": "200080",
"value": "Microsoft Privacy Collection Service"
},
{
"code": "200081",
"value": "uTorrent"
},
{
"code": "200082",
"value": "Edge"
},
{
"code": "200083",
"value": "Lenovo Music Store"
},
{
"code": "200084",
"value": "LieBao"
},
{
"code": "200085",
"value": "majesti_spider"
},
{
"code": "200086",
"value": "DotBot"
},
{
"code": "200087",
"value": "Millet Update"
},
{
"code": "200088",
"value": "Today’s headlines"
},
{
"code": "200089",
"value": "Microsoft live"
},
{
"code": "200090",
"value": "Microsoft OneNote"
},
{
"code": "200091",
"value": "Bing_spider"
},
{
"code": "200092",
"value": "Apple location service"
},
{
"code": "200093",
"value": "Kuaishou"
},
{
"code": "200094",
"value": "LeTV video"
},
{
"code": "200095",
"value": "QQ"
},
{
"code": "200096",
"value": "Wps"
},
{
"code": "200097",
"value": "kugou music"
},
{
"code": "200098",
"value": "kuwo music"
},
{
"code": "200099",
"value": "360_common_service"
},
{
"code": "200100",
"value": "Camera360"
},
{
"code": "200101",
"value": "Outlook"
},
{
"code": "200102",
"value": "zhihu"
},
{
"code": "200103",
"value": "Tencent video"
},
{
"code": "200104",
"value": "funshion"
},
{
"code": "200105",
"value": "QQ shared service"
},
{
"code": "200106",
"value": "Microsoft wdcp service"
},
{
"code": "200107",
"value": "Microsoft Media_center_pc"
},
{
"code": "200108",
"value": "360 phone helper"
},
{
"code": "200109",
"value": "Kingsoft Public Service"
},
{
"code": "200110",
"value": "Ios_wifi connection"
},
{
"code": "200111",
"value": "Teamviewer"
},
{
"code": "200112",
"value": "Baidu cloud disk"
},
{
"code": "200113",
"value": "Tencent News"
},
{
"code": "200114",
"value": "Baidu map"
},
{
"code": "200115",
"value": "Panda TV"
},
{
"code": "200116",
"value": "Thunder"
},
{
"code": "200117",
"value": "NetEase cloud music"
},
{
"code": "200118",
"value": "QQ music"
},
{
"code": "200119",
"value": "Itools"
},
{
"code": "200120",
"value": "Jingdong Finance"
},
{
"code": "200121",
"value": "PycURL"
},
{
"code": "200122",
"value": "Yahoo_Spider"
},
{
"code": "200123",
"value": "Himalayan FM"
},
{
"code": "200124",
"value": "Youdao_dict"
},
{
"code": "200125",
"value": "Microsoft_spynet"
},
{
"code": "200126",
"value": "proximicBot"
},
{
"code": "200127",
"value": "Foxit_reader"
},
{
"code": "200128",
"value": "Sohu Video"
},
{
"code": "200129",
"value": "BlueStacks"
},
{
"code": "200130",
"value": "Beauty group"
},
{
"code": "200131",
"value": "Kmplayer"
},
{
"code": "200132",
"value": "TaoBao"
},
{
"code": "200133",
"value": "Exabot"
},
{
"code": "200134",
"value": "Ubuntu_apt_get"
},
{
"code": "200135",
"value": "Oriental Fortune"
},
{
"code": "200136",
"value": "JikeSpider"
},
{
"code": "200137",
"value": "Itunesstored"
},
{
"code": "200138",
"value": "GAD map"
},
{
"code": "200139",
"value": "ifeng News"
},
{
"code": "200140",
"value": "BoardReaderBot"
},
{
"code": "200141",
"value": "AmazonBot"
},
{
"code": "200142",
"value": "Alipay"
},
{
"code": "200143",
"value": "Alipay security controls"
},
{
"code": "200144",
"value": "360 security guards (antivirus)"
},
{
"code": "200145",
"value": "360 logon service"
},
{
"code": "200146",
"value": "BLP_bbot"
},
{
"code": "200147",
"value": "Keep"
},
{
"code": "200148",
"value": "WiFi universal key"
},
{
"code": "200149",
"value": "Baidu Music"
},
{
"code": "200150",
"value": "Vip.com"
},
{
"code": "200151",
"value": "JD.COM"
},
{
"code": "200152",
"value": "sina"
},
{
"code": "200153",
"value": "youdao Public service"
},
{
"code": "200154",
"value": "Jinshan public service"
},
{
"code": "200155",
"value": "Baidu guard"
},
{
"code": "200156",
"value": "Apple system update service"
},
{
"code": "200157",
"value": "momo"
},
{
"code": "200158",
"value": "CNZZ statistics"
},
{
"code": "200159",
"value": "Microsoft one_drive service"
},
{
"code": "200160",
"value": "WindowsStore"
},
{
"code": "200161",
"value": "duba"
},
{
"code": "200162",
"value": "Baidu HD"
},
{
"code": "200163",
"value": "qunar"
},
{
"code": "200164",
"value": "qianxunyingshi"
},
{
"code": "200165",
"value": "KuaiyanKanShuSpider"
},
{
"code": "200166",
"value": "Mail.RU_Bot_Robot"
},
{
"code": "200167",
"value": "MpCommunication"
},
{
"code": "200168",
"value": "Weather forecast"
},
{
"code": "200169",
"value": "Ltx71_spider"
},
{
"code": "200170",
"value": "Ia_archiver"
},
{
"code": "200171",
"value": "Ali Wangwang"
},
{
"code": "200172",
"value": "UC home page (information)"
},
{
"code": "200173",
"value": "Yeti"
},
{
"code": "200174",
"value": "Rtorrent"
},
{
"code": "200175",
"value": "QQPim"
},
{
"code": "200176",
"value": "NetEase News"
},
{
"code": "200177",
"value": "sina sports"
},
{
"code": "200178",
"value": "Exchange of foreign exchange"
},
{
"code": "200179",
"value": "BlueStacks update"
},
{
"code": "200180",
"value": "youdao"
},
{
"code": "200181",
"value": "QQ computer housekeeper"
},
{
"code": "200182",
"value": "UltraEdit"
},
{
"code": "200183",
"value": "EasouSpider"
},
{
"code": "200184",
"value": "QQ Zone"
},
{
"code": "200185",
"value": "Foxmail"
},
{
"code": "200186",
"value": "Pingdom.com"
},
{
"code": "200187",
"value": "Sina Finance"
},
{
"code": "200188",
"value": "QQ one key login"
},
{
"code": "200189",
"value": "Norton"
},
{
"code": "200190",
"value": "Baidu waimai"
},
{
"code": "200191",
"value": "YaCy"
},
{
"code": "200192",
"value": "Haitong e Haitong"
},
{
"code": "200193",
"value": "AdsBot-Google"
},
{
"code": "200194",
"value": "Guangfa Yijin"
},
{
"code": "200195",
"value": "Ali security program"
},
{
"code": "200196",
"value": "Cliqzbot"
},
{
"code": "200197",
"value": "Mobike"
},
{
"code": "200198",
"value": "Kingsoft PowerWord"
},
{
"code": "200199",
"value": "meishij"
},
{
"code": "200200",
"value": "CCB mobile bank"
},
{
"code": "200201",
"value": "Mega SkyDrive"
},
{
"code": "200202",
"value": "douyu"
},
{
"code": "200203",
"value": "Flamingo_SearchEngine"
},
{
"code": "200204",
"value": "Lenovo shop"
},
{
"code": "200205",
"value": "Uc news"
},
{
"code": "200206",
"value": "Volcano small video"
},
{
"code": "200207",
"value": "Meitu Xiu Xiu"
},
{
"code": "200208",
"value": "Kaspersky"
},
{
"code": "200209",
"value": "AcFun"
},
{
"code": "200210",
"value": "Slackbot"
},
{
"code": "200211",
"value": "Snowball"
},
{
"code": "200212",
"value": "SafeDNSBot"
},
{
"code": "200213",
"value": "Great wisdom"
},
{
"code": "200214",
"value": "Mailbox of NetEase"
},
{
"code": "200215",
"value": "peasecod"
},
{
"code": "200216",
"value": "Gold ten data"
},
{
"code": "200217",
"value": "Linkdexbot"
},
{
"code": "200218",
"value": "Sina blog"
},
{
"code": "200219",
"value": "Ginger"
},
{
"code": "200220",
"value": "Microsoft activation verification"
},
{
"code": "200221",
"value": "Facebot"
},
{
"code": "200222",
"value": "Dangdang"
},
{
"code": "200223",
"value": "QQ cyclone"
},
{
"code": "200224",
"value": "Wp_feedbot"
},
{
"code": "200225",
"value": "ICBC"
},
{
"code": "200226",
"value": "Public service"
},
{
"code": "200227",
"value": "Magpie-crawler"
},
{
"code": "200228",
"value": "xianyu"
},
{
"code": "200229",
"value": "GetIntentBot"
},
{
"code": "200230",
"value": "Papers"
},
{
"code": "200231",
"value": "NewsGator"
},
{
"code": "200232",
"value": "RankFlexBot"
},
{
"code": "200233",
"value": "rogerbot"
},
{
"code": "200234",
"value": "SurdotlyBot"
},
{
"code": "200235",
"value": "CheckMarkNetworkBot"
},
{
"code": "200236",
"value": "pyspider"
},
{
"code": "200237",
"value": "spbot"
},
{
"code": "200238",
"value": "Huaxia Bank"
},
{
"code": "200239",
"value": "glory of king"
},
{
"code": "200240",
"value": "msnbot-Products"
},
{
"code": "200241",
"value": "archive.org"
},
{
"code": "200242",
"value": "applebot"
},
{
"code": "200243",
"value": "alicall"
},
{
"code": "200244",
"value": "Superfeedrbot"
},
{
"code": "200245",
"value": "QQ mailbox"
},
{
"code": "200246",
"value": "coccocbot-webBot"
},
{
"code": "200247",
"value": "dingtalk"
},
{
"code": "200248",
"value": "Dragonbot"
},
{
"code": "200249",
"value": "Mediatoolkitbot"
},
{
"code": "200250",
"value": "bitcomet"
},
{
"code": "200251",
"value": "filetopia"
},
{
"code": "200252",
"value": "flashget"
},
{
"code": "200253",
"value": "oracle"
},
{
"code": "200254",
"value": "yyvoice"
},
{
"code": "200255",
"value": "imesh"
},
{
"code": "200256",
"value": "citrix"
},
{
"code": "200257",
"value": "corba"
},
{
"code": "200258",
"value": "dameware"
},
{
"code": "200259",
"value": "pcanywhere"
},
{
"code": "200260",
"value": "qq_rdp"
},
{
"code": "200261",
"value": "poco"
},
{
"code": "200262",
"value": "qqdownload"
},
{
"code": "200263",
"value": "applejuice"
},
{
"code": "200264",
"value": "stealthnet"
},
{
"code": "200265",
"value": "winmx"
},
{
"code": "200266",
"value": "emule"
},
{
"code": "200267",
"value": "emule_decrypt"
},
{
"code": "200268",
"value": "qvod"
},
{
"code": "200269",
"value": "mysql"
},
{
"code": "200270",
"value": "icecast"
},
{
"code": "200271",
"value": "mms"
},
{
"code": "200272",
"value": "pplive"
},
{
"code": "200273",
"value": "ppstream"
},
{
"code": "200274",
"value": "sopcast"
},
{
"code": "200275",
"value": "tvants"
},
{
"code": "200276",
"value": "sohutv"
},
{
"code": "200277",
"value": "iku"
},
{
"code": "200278",
"value": "qqlive"
},
{
"code": "200279",
"value": "rsync"
},
{
"code": "200280",
"value": "xunyou_speedup"
},
{
"code": "200281",
"value": "msn"
},
{
"code": "200282",
"value": "popo"
},
{
"code": "200283",
"value": "sinauc"
},
{
"code": "200284",
"value": "qqbattle"
},
{
"code": "200285",
"value": "quake"
},
{
"code": "200286",
"value": "xbox"
},
{
"code": "200287",
"value": "wow"
},
{
"code": "200288",
"value": "lol"
},
{
"code": "200289",
"value": "PostgreSQL"
},
{
"code": "200290",
"value": "TDS"
},
{
"code": "200291",
"value": "VMware"
},
{
"code": "200292",
"value": "Kontiki"
},
{
"code": "200293",
"value": "OpenFT"
},
{
"code": "200294",
"value": "Gnutella"
},
{
"code": "200295",
"value": "eDonkey"
},
{
"code": "200296",
"value": "AVI"
},
{
"code": "200297",
"value": "RealMedia"
},
{
"code": "200298",
"value": "Windowsmedia"
},
{
"code": "200299",
"value": "MOVE"
},
{
"code": "200300",
"value": "Feidian"
},
{
"code": "200301",
"value": "Zattoo"
},
{
"code": "200302",
"value": "SHOUTCast"
},
{
"code": "200303",
"value": "TVUplayer"
},
{
"code": "200304",
"value": "VeohTV"
},
{
"code": "200305",
"value": "Soulseek"
},
{
"code": "200306",
"value": "GaduGadu"
},
{
"code": "200307",
"value": "Oscar"
},
{
"code": "200308",
"value": "Yahoo"
},
{
"code": "200309",
"value": "Battlefield"
},
{
"code": "200310",
"value": "Halflife2"
},
{
"code": "200311",
"value": "World of Warcraft"
},
{
"code": "200312",
"value": "USENET"
},
{
"code": "200313",
"value": "AFP"
},
{
"code": "200314",
"value": "Truphone"
},
{
"code": "200315",
"value": "Armagetron"
},
{
"code": "200316",
"value": "CrossFire"
},
{
"code": "200317",
"value": "Dofus"
},
{
"code": "200318",
"value": "Fiesta"
},
{
"code": "200319",
"value": "Florensia"
},
{
"code": "200320",
"value": "Guildwars"
},
{
"code": "200321",
"value": "HTTP Application Activesync"
},
{
"code": "200322",
"value": "MapleStory"
},
{
"code": "200323",
"value": "msSQL"
},
{
"code": "200324",
"value": "WARCRAFT3"
},
{
"code": "200325",
"value": "World of Kung Fu"
},
{
"code": "200326",
"value": "MEEBO"
},
{
"code": "200327",
"value": "DropBox"
},
{
"code": "200328",
"value": "HTTP Proxy"
},
{
"code": "200329",
"value": "Netflix"
},
{
"code": "200330",
"value": "CitrixOnline/GotoMeeting"
},
{
"code": "200331",
"value": "Webex"
},
{
"code": "200332",
"value": "Apple iCloud"
},
{
"code": "200333",
"value": "Apple iTunes"
},
{
"code": "200334",
"value": "WindowsUpdate"
},
{
"code": "200335",
"value": "Tuenti"
},
{
"code": "200336",
"value": "LotusNotes"
},
{
"code": "200337",
"value": "RemoteScan"
},
{
"code": "200338",
"value": "Spotify"
},
{
"code": "200339",
"value": "CiscoVPN"
},
{
"code": "200340",
"value": "TeamSpeak"
},
{
"code": "200341",
"value": "UbuntuONE"
},
{
"code": "200342",
"value": "CNN"
},
{
"code": "200343",
"value": "Wikipedia"
},
{
"code": "200344",
"value": "Collectd"
},
{
"code": "200345",
"value": "Redis"
},
{
"code": "200346",
"value": "ZeroMQ"
},
{
"code": "200347",
"value": "Stracraft"
},
{
"code": "200348",
"value": "Simet"
},
{
"code": "200349",
"value": "OpenSignal"
},
{
"code": "200350",
"value": "99Taxi"
},
{
"code": "200351",
"value": "GloboTV"
},
{
"code": "200352",
"value": "Deezer"
},
{
"code": "200353",
"value": "Microsoft cloud services"
},
{
"code": "200354",
"value": "Twitch"
},
{
"code": "200355",
"value": "KakaoTalk Voice and Chat"
},
{
"code": "200357",
"value": "360.cn"
},
{
"code": "200358",
"value": "360Safeguard_P2P"
},
{
"code": "200359",
"value": "4D"
},
{
"code": "200360",
"value": "acercloud"
},
{
"code": "200361",
"value": "acestream"
},
{
"code": "200362",
"value": "airdroid"
},
{
"code": "200363",
"value": "airmedia"
},
{
"code": "200364",
"value": "akamai"
},
{
"code": "200365",
"value": "akamai_transfer"
},
{
"code": "200366",
"value": "amanda"
},
{
"code": "200367",
"value": "amp"
},
{
"code": "200368",
"value": "Appear.in"
},
{
"code": "200369",
"value": "ares"
},
{
"code": "200370",
"value": "ARKSurvivalEvolved"
},
{
"code": "200371",
"value": "ARMA3Server"
},
{
"code": "200372",
"value": "ARMA2Server"
},
{
"code": "200373",
"value": "AvastSecureDNS"
},
{
"code": "200374",
"value": "azureus"
},
{
"code": "200375",
"value": "backweb"
},
{
"code": "200376",
"value": "BadBaidu"
},
{
"code": "200377",
"value": "baofeng"
},
{
"code": "200378",
"value": "bitext"
},
{
"code": "200379",
"value": "BlackDesertOnline"
},
{
"code": "200380",
"value": "Blizzard"
},
{
"code": "200381",
"value": "bmdp"
},
{
"code": "200382",
"value": "bncs"
},
{
"code": "200383",
"value": "btdht"
},
{
"code": "200384",
"value": "btsync"
},
{
"code": "200385",
"value": "cacaoweb"
},
{
"code": "200386",
"value": "chatango"
},
{
"code": "200387",
"value": "chivalry"
},
{
"code": "200388",
"value": "cirn"
},
{
"code": "200389",
"value": "cisco_sslvpn"
},
{
"code": "200390",
"value": "clash_of_clans"
},
{
"code": "200391",
"value": "Clubbox"
},
{
"code": "200392",
"value": "cod"
},
{
"code": "200393",
"value": "cod_waw"
},
{
"code": "200394",
"value": "combatarms"
},
{
"code": "200395",
"value": "combatarms_p2p"
},
{
"code": "200396",
"value": "ConquerOnline"
},
{
"code": "200397",
"value": "Counterstrike1.6"
},
{
"code": "200398",
"value": "Checkpoint_RDP"
},
{
"code": "200399",
"value": "crashplan"
},
{
"code": "200400",
"value": "crossout"
},
{
"code": "200401",
"value": "cryptic"
},
{
"code": "200402",
"value": "cvs"
},
{
"code": "200403",
"value": "dash"
},
{
"code": "200404",
"value": "dc"
},
{
"code": "200405",
"value": "db2"
},
{
"code": "200406",
"value": "dell_backup"
},
{
"code": "200407",
"value": "Demonware"
},
{
"code": "200408",
"value": "destiny"
},
{
"code": "200409",
"value": "diablo2"
},
{
"code": "200410",
"value": "isakmp"
},
{
"code": "200411",
"value": "jedi"
},
{
"code": "200412",
"value": "jedi_academy"
},
{
"code": "200413",
"value": "jx3online"
},
{
"code": "200414",
"value": "kankan"
},
{
"code": "200415",
"value": "kaseya"
},
{
"code": "200416",
"value": "kazaa"
},
{
"code": "200417",
"value": "kuaibo"
},
{
"code": "200418",
"value": "lifeforge"
},
{
"code": "200419",
"value": "linkproof"
},
{
"code": "200420",
"value": "litecoin"
},
{
"code": "200421",
"value": "maxicloud"
},
{
"code": "200422",
"value": "merakicloud"
},
{
"code": "200423",
"value": "minecraft"
},
{
"code": "200424",
"value": "mongo"
},
{
"code": "200425",
"value": "msoffice_mac"
},
{
"code": "200426",
"value": "munin"
},
{
"code": "200427",
"value": "mzinga"
},
{
"code": "200428",
"value": "n2ping"
},
{
"code": "200429",
"value": "ncsoft"
},
{
"code": "200430",
"value": "netcat_cctv"
},
{
"code": "200431",
"value": "neverwinter"
},
{
"code": "200432",
"value": "newerth"
},
{
"code": "200433",
"value": "nintendo"
},
{
"code": "200434",
"value": "nntps"
},
{
"code": "200435",
"value": "noction"
},
{
"code": "200436",
"value": "noe"
},
{
"code": "200437",
"value": "norton_backup"
},
{
"code": "200438",
"value": "omegle"
},
{
"code": "200439",
"value": "opaserv"
},
{
"code": "200440",
"value": "orbit"
},
{
"code": "200441",
"value": "ourworld"
},
{
"code": "200442",
"value": "overwatch"
},
{
"code": "200443",
"value": "diablo3"
},
{
"code": "200444",
"value": "dianping"
},
{
"code": "200445",
"value": "dianshijia"
},
{
"code": "200446",
"value": "discord"
},
{
"code": "200447",
"value": "dogecoin"
},
{
"code": "200448",
"value": "dota2"
},
{
"code": "200449",
"value": "douyu_chat"
},
{
"code": "200450",
"value": "doyo"
},
{
"code": "200451",
"value": "driveshare"
},
{
"code": "200452",
"value": "dtls"
},
{
"code": "200453",
"value": "dueling_network"
},
{
"code": "200454",
"value": "dvrns"
},
{
"code": "200455",
"value": "dxp"
},
{
"code": "200456",
"value": "ea_games"
},
{
"code": "200457",
"value": "epson"
},
{
"code": "200458",
"value": "eso"
},
{
"code": "200459",
"value": "etrust"
},
{
"code": "200460",
"value": "fasp"
},
{
"code": "200461",
"value": "finalfantasy_xiv"
},
{
"code": "200462",
"value": "flash"
},
{
"code": "200463",
"value": "fliggy"
},
{
"code": "200464",
"value": "fortinet"
},
{
"code": "200465",
"value": "foscam"
},
{
"code": "200466",
"value": "freechal"
},
{
"code": "200467",
"value": "fring"
},
{
"code": "200468",
"value": "fuckcoin"
},
{
"code": "200469",
"value": "gamespy"
},
{
"code": "200470",
"value": "gangsofspace"
},
{
"code": "200471",
"value": "garena"
},
{
"code": "200472",
"value": "gearsofwar"
},
{
"code": "200473",
"value": "giop"
},
{
"code": "200474",
"value": "git"
},
{
"code": "200475",
"value": "glupteba"
},
{
"code": "200476",
"value": "gnutella2"
},
{
"code": "200477",
"value": "gokuchat"
},
{
"code": "200478",
"value": "google_hangouts"
},
{
"code": "200479",
"value": "gotomeeting"
},
{
"code": "200480",
"value": "gprs_tunnel"
},
{
"code": "200481",
"value": "graal_online_era"
},
{
"code": "200482",
"value": "gsm"
},
{
"code": "200483",
"value": "h1z1"
},
{
"code": "200484",
"value": "halo_online"
},
{
"code": "200485",
"value": "hamachi"
},
{
"code": "200486",
"value": "harveys"
},
{
"code": "200487",
"value": "hearthstone"
},
{
"code": "200488",
"value": "heroes_generals"
},
{
"code": "200489",
"value": "hots"
},
{
"code": "200490",
"value": "icp"
},
{
"code": "200491",
"value": "icq"
},
{
"code": "200492",
"value": "id"
},
{
"code": "200493",
"value": "idrive_sync"
},
{
"code": "200494",
"value": "ipmsg"
},
{
"code": "200495",
"value": "ipop"
},
{
"code": "200496",
"value": "ipsharkk"
},
{
"code": "200497",
"value": "palringo"
},
{
"code": "200498",
"value": "paltalk"
},
{
"code": "200499",
"value": "pando"
},
{
"code": "200500",
"value": "panipani"
},
{
"code": "200501",
"value": "pdbox"
},
{
"code": "200502",
"value": "planetside2"
},
{
"code": "200503",
"value": "portmap_rpc"
},
{
"code": "200504",
"value": "ps4_remoteplay"
},
{
"code": "200505",
"value": "psn"
},
{
"code": "200506",
"value": "psn_store"
},
{
"code": "200507",
"value": "punkbuster"
},
{
"code": "200508",
"value": "pyzor"
},
{
"code": "200509",
"value": "qcloud_ilvb"
},
{
"code": "200510",
"value": "qqpcmgr"
},
{
"code": "200511",
"value": "ramsey_dash"
},
{
"code": "200512",
"value": "razor"
},
{
"code": "200513",
"value": "rbls"
},
{
"code": "200514",
"value": "realvnc"
},
{
"code": "200515",
"value": "relay"
},
{
"code": "200516",
"value": "revolver_nblbt"
},
{
"code": "200517",
"value": "rising_storm"
},
{
"code": "200518",
"value": "roblox"
},
{
"code": "200519",
"value": "robocraft"
},
{
"code": "200520",
"value": "rpc_scan"
},
{
"code": "200521",
"value": "runescape"
},
{
"code": "200522",
"value": "sanandreas"
},
{
"code": "200523",
"value": "saprouter"
},
{
"code": "200524",
"value": "secondlife"
},
{
"code": "200525",
"value": "serialnumberd"
},
{
"code": "200526",
"value": "silkroadonline"
},
{
"code": "200527",
"value": "smite"
},
{
"code": "200528",
"value": "snapvpn"
},
{
"code": "200529",
"value": "spamfighter"
},
{
"code": "200530",
"value": "speedin"
},
{
"code": "200531",
"value": "speedtest"
},
{
"code": "200532",
"value": "spotify_broadcast"
},
{
"code": "200533",
"value": "sqlexp"
},
{
"code": "200534",
"value": "starcitizen"
},
{
"code": "200535",
"value": "starcraft"
},
{
"code": "200536",
"value": "starleaf"
},
{
"code": "200537",
"value": "steam_friends"
},
{
"code": "200538",
"value": "storm_worm"
},
{
"code": "200539",
"value": "stratum"
},
{
"code": "200540",
"value": "supl"
},
{
"code": "200541",
"value": "svn"
},
{
"code": "200542",
"value": "talesrunner"
},
{
"code": "200543",
"value": "tankix"
},
{
"code": "200544",
"value": "telecomkey"
},
{
"code": "200545",
"value": "telnet_exploit"
},
{
"code": "200546",
"value": "tencent_games"
},
{
"code": "200547",
"value": "tenfivecoin"
},
{
"code": "200548",
"value": "tensafe"
},
{
"code": "200549",
"value": "tera"
},
{
"code": "200550",
"value": "tetrisonline"
},
{
"code": "200551",
"value": "thq"
},
{
"code": "200552",
"value": "tip"
},
{
"code": "200553",
"value": "torchlight2"
},
{
"code": "200554",
"value": "traceroute"
},
{
"code": "200555",
"value": "trackmania"
},
{
"code": "200556",
"value": "tremulous"
},
{
"code": "200557",
"value": "trion"
},
{
"code": "200558",
"value": "trojan_zeroaccess"
},
{
"code": "200559",
"value": "twitcasting"
},
{
"code": "200560",
"value": "twitch_irc"
},
{
"code": "200561",
"value": "ubisoft_games"
},
{
"code": "200562",
"value": "umeye"
},
{
"code": "200563",
"value": "vainglory"
},
{
"code": "200564",
"value": "ventrilo"
},
{
"code": "200565",
"value": "vivox"
},
{
"code": "200566",
"value": "vodlocker"
},
{
"code": "200567",
"value": "vpnrobot"
},
{
"code": "200568",
"value": "vpn_unlimited"
},
{
"code": "200569",
"value": "vxworks_exploit"
},
{
"code": "200570",
"value": "warthunder"
},
{
"code": "200571",
"value": "weblogic"
},
{
"code": "200572",
"value": "web_junk"
},
{
"code": "200573",
"value": "weiqi"
},
{
"code": "200574",
"value": "win_message"
},
{
"code": "200575",
"value": "wizard101"
},
{
"code": "200576",
"value": "wns"
},
{
"code": "200577",
"value": "wolf_et"
},
{
"code": "200578",
"value": "worm_22105"
},
{
"code": "200579",
"value": "wuala"
},
{
"code": "200580",
"value": "xfire_p2p"
},
{
"code": "200581",
"value": "xiami"
},
{
"code": "200582",
"value": "xunlei"
},
{
"code": "200583",
"value": "xunlei_accel"
},
{
"code": "200584",
"value": "xunlei_jsq"
},
{
"code": "200585",
"value": "xunyou"
},
{
"code": "200586",
"value": "xymon"
},
{
"code": "200587",
"value": "yahoo_error"
},
{
"code": "200588",
"value": "yahoo_games"
},
{
"code": "200589",
"value": "yahoo_webcam"
},
{
"code": "200590",
"value": "zabbix"
},
{
"code": "200591",
"value": "zeroaccess"
},
{
"code": "200592",
"value": "zoom"
},
{
"code": "200593",
"value": "zynga"
},
{
"code": "200594",
"value": "ICMP_Flood"
},
{
"code": "200595",
"value": "IPFRAG_Flood"
},
{
"code": "200596",
"value": "SYN_Flood"
},
{
"code": "200597",
"value": "ACK_Flood"
},
{
"code": "200598",
"value": "RST_Flood"
},
{
"code": "200599",
"value": "DNS_Flood"
},
{
"code": "200600",
"value": "NTP_Flood"
},
{
"code": "200601",
"value": "UDP_Flood"
},
{
"code": "200602",
"value": "HTTP_Flood"
},
{
"code": "200603",
"value": "SSDP_Flood"
},
{
"code": "200604",
"value": "baiduP2P"
},
{
"code": "200605",
"value": "CSGlobalOffensive"
},
{
"code": "200606",
"value": "AllSeeingEye"
},
{
"code": "200607",
"value": "Bittorrent_Extension"
},
{
"code": "200608",
"value": "BitTorrentSync"
},
{
"code": "200609",
"value": "Call_of_Duty"
},
{
"code": "200612",
"value": "CitrixICA"
},
{
"code": "200613",
"value": "Citrix_Jedi"
},
{
"code": "200614",
"value": "ClashOfClans"
},
{
"code": "200615",
"value": "Canon_BJNP"
},
{
"code": "200617",
"value": "DoyoP2P"
},
{
"code": "200618",
"value": "FortiClientSSLVPN"
},
{
"code": "200619",
"value": "GTA_SanAndreas_Multiplayer"
},
{
"code": "200620",
"value": "HalfLife"
},
{
"code": "200621",
"value": "IBM-DB2"
},
{
"code": "200622",
"value": "Flash_Player"
},
{
"code": "200623",
"value": "Kugou"
},
{
"code": "200624",
"value": "LeagueOfLegends"
},
{
"code": "200625",
"value": "GluptebaBackdoor"
},
{
"code": "200626",
"value": "MedalOfHonor"
},
{
"code": "200628",
"value": "MultiTheftAuto"
},
{
"code": "200631",
"value": "NetcoreScan"
},
{
"code": "200632",
"value": "NeverwinterNights"
},
{
"code": "200633",
"value": "NoctionIRP"
},
{
"code": "200634",
"value": "JavaObjectSerialised"
},
{
"code": "200635",
"value": "RealPlayer"
},
{
"code": "200636",
"value": "TeamFortress2"
},
{
"code": "200637",
"value": "TheCrew"
},
{
"code": "200638",
"value": "TurboVPN"
},
{
"code": "200639",
"value": "MSN_Voice"
},
{
"code": "200640",
"value": "MaplestoryChina"
},
{
"code": "200641",
"value": "Message4U"
},
{
"code": "200642",
"value": "MongoDB"
},
{
"code": "200643",
"value": "NDTThroughput"
},
{
"code": "200644",
"value": "NET-MFP"
},
{
"code": "200645",
"value": "WindowsMessenger"
},
{
"code": "200646",
"value": "WolfensteinEnemyTerritory"
},
{
"code": "200647",
"value": "XboxLive"
},
{
"code": "200649",
"value": "RBL"
},
{
"code": "200650",
"value": "RPC_Exploit"
},
{
"code": "200651",
"value": "Rejection"
},
{
"code": "200655",
"value": "Silverplatter_DXP"
},
{
"code": "200659",
"value": "TencentWNS"
},
{
"code": "200660",
"value": "TrionGames"
},
{
"code": "200661",
"value": "Trojan.Win32.Generic!SB"
},
{
"code": "200666",
"value": "WorldOfWarcraft"
},
{
"code": "200667",
"value": "YY"
},
{
"code": "200669",
"value": "nopayload"
},
{
"code": "200670",
"value": "No_FirstPkt"
},
{
"code": "200671",
"value": "Invalid"
}
],
"visibility": "disabled"
},
"label": "Application ID"
},
{
"name": "common_protocol_id",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "NOT SPECIFIED"
},
{
"code": "10000",
"value": "NOT SPECIFIED"
},
{
"code": "10001",
"value": "TCP"
},
{
"code": "10002",
"value": "UDP"
},
{
"code": "10003",
"value": "DNS"
},
{
"code": "10004",
"value": "FTP"
},
{
"code": "10005",
"value": "FTPS"
},
{
"code": "10006",
"value": "GRE"
},
{
"code": "10007",
"value": "HTTP"
},
{
"code": "10008",
"value": "HTTPS"
},
{
"code": "10009",
"value": "ICMP"
},
{
"code": "10010",
"value": "IKE"
},
{
"code": "10011",
"value": "IMAP"
},
{
"code": "10012",
"value": "IMAPS"
},
{
"code": "10013",
"value": "IPSEC"
},
{
"code": "10014",
"value": "XMPP"
},
{
"code": "10015",
"value": "L2TP"
},
{
"code": "10016",
"value": "NTP"
},
{
"code": "10017",
"value": "POP3"
},
{
"code": "10018",
"value": "POP3 SSL"
},
{
"code": "10019",
"value": "PPTP"
},
{
"code": "10020",
"value": "Quic"
},
{
"code": "10021",
"value": "SIP"
},
{
"code": "10022",
"value": "smb"
},
{
"code": "10023",
"value": "SMTP"
},
{
"code": "10024",
"value": "SMTPS"
},
{
"code": "10025",
"value": "SPDY"
},
{
"code": "10028",
"value": "SSH"
},
{
"code": "10029",
"value": "SSL"
},
{
"code": "10030",
"value": "SOCKS"
},
{
"code": "10031",
"value": "BITTORRENT"
},
{
"code": "10032",
"value": "RTSP"
},
{
"code": "10033",
"value": "TELNET"
},
{
"code": "10034",
"value": "UTP"
},
{
"code": "10035",
"value": "FASTTRACK"
},
{
"code": "10036",
"value": "SKINNY"
},
{
"code": "10037",
"value": "IAX"
},
{
"code": "10038",
"value": "MGCP"
},
{
"code": "10039",
"value": "RTCP"
},
{
"code": "10040",
"value": "RTP"
},
{
"code": "10041",
"value": "VNC"
},
{
"code": "10042",
"value": "XDMCP"
},
{
"code": "10043",
"value": "RDP"
},
{
"code": "10044",
"value": "AIMINI"
},
{
"code": "10045",
"value": "IPP"
},
{
"code": "10046",
"value": "NFS"
},
{
"code": "10047",
"value": "TFTP"
},
{
"code": "10048",
"value": "BGP"
},
{
"code": "10049",
"value": "DHCP"
},
{
"code": "10050",
"value": "DHCPV6"
},
{
"code": "10051",
"value": "FINGER"
},
{
"code": "10052",
"value": "KERBEROS"
},
{
"code": "10053",
"value": "LDAP"
},
{
"code": "10054",
"value": "MDNS"
},
{
"code": "10055",
"value": "NNTP"
},
{
"code": "10056",
"value": "SNMP"
},
{
"code": "10057",
"value": "SSDP"
},
{
"code": "10058",
"value": "SYSLOG"
},
{
"code": "10059",
"value": "WHOIS"
},
{
"code": "10060",
"value": "RADIUS"
},
{
"code": "10061",
"value": "OPENVPN"
},
{
"code": "10062",
"value": "STUN"
},
{
"code": "10063",
"value": "TEREDO"
},
{
"code": "10064",
"value": "GTP"
},
{
"code": "10065",
"value": "RTMP"
},
{
"code": "10066",
"value": "chargen_tcp_udp"
},
{
"code": "10067",
"value": "llmnr_udp"
},
{
"code": "10068",
"value": "nbns_udp"
},
{
"code": "10069",
"value": "NETBIOS"
},
{
"code": "10070",
"value": "DirectDownloadLink"
},
{
"code": "10071",
"value": "I23V5"
},
{
"code": "10072",
"value": "DirectConnect"
},
{
"code": "10073",
"value": "OFF"
},
{
"code": "10074",
"value": "OGG"
},
{
"code": "10075",
"value": "MPEG"
},
{
"code": "10076",
"value": "IRC"
},
{
"code": "10077",
"value": "Jabber"
},
{
"code": "10078",
"value": "VRRP"
},
{
"code": "10079",
"value": "IGMP"
},
{
"code": "10080",
"value": "EGP"
},
{
"code": "10081",
"value": "SCTP"
},
{
"code": "10082",
"value": "OSPF"
},
{
"code": "10083",
"value": "IP in IP"
},
{
"code": "10084",
"value": "ICMPv6"
},
{
"code": "10085",
"value": "DCE RPC"
},
{
"code": "10086",
"value": "NetFlow_IPFIX"
},
{
"code": "10087",
"value": "sFlow"
},
{
"code": "10088",
"value": "HTTP Connect (SSL over HTTP)"
},
{
"code": "10089",
"value": "SAP"
},
{
"code": "10090",
"value": "UPnP"
},
{
"code": "10091",
"value": "H323"
},
{
"code": "10092",
"value": "Megaco"
},
{
"code": "10094",
"value": "bacnet"
},
{
"code": "10096",
"value": "bjnp"
},
{
"code": "10097",
"value": "cgp"
},
{
"code": "10098",
"value": "dahua"
},
{
"code": "10099",
"value": "dcc"
},
{
"code": "10100",
"value": "kademlia"
},
{
"code": "10101",
"value": "lansync"
},
{
"code": "10102",
"value": "ldap_ad"
},
{
"code": "10103",
"value": "llp2p"
},
{
"code": "10104",
"value": "mfnp"
},
{
"code": "10105",
"value": "mp2p"
},
{
"code": "10106",
"value": "msn_cache"
},
{
"code": "10107",
"value": "msn_video"
},
{
"code": "10108",
"value": "msnc"
},
{
"code": "10109",
"value": "netflow"
},
{
"code": "10110",
"value": "notes_rpc"
},
{
"code": "10111",
"value": "esp"
},
{
"code": "10112",
"value": "fbcdn_ssl"
},
{
"code": "10113",
"value": "forticlient_sslvpn"
},
{
"code": "10114",
"value": "rfb"
},
{
"code": "10115",
"value": "rtmfp"
},
{
"code": "10117",
"value": "slp"
},
{
"code": "10118",
"value": "steam_inhomebroadcast"
},
{
"code": "10119",
"value": "steam_localbroadcast"
},
{
"code": "10120",
"value": "tpkt"
},
{
"code": "10121",
"value": "xmpps"
},
{
"code": "10122",
"value": "S7COMM"
},
{
"code": "10123",
"value": "CitrixCGP"
},
{
"code": "10124",
"value": "ID_Protocol"
},
{
"code": "10125",
"value": "SMTP_Secure"
},
{
"code": "10126",
"value": "NAT-PMP"
}
],
"visibility": "disabled"
},
"label": "Protocol ID"
},
{
"name": "common_start_time",
"type": "int",
"doc": {
"constraints": {
"type": "timestamp"
},
"visibility": "hidden"
},
"label": "Start Time"
},
{
"name": "common_end_time",
"type": "int",
"doc": {
"constraints": {
"type": "timestamp"
},
"visibility": "hidden"
},
"label": "End Time"
},
{
"name": "common_establish_latency_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Establish Latency(ms)"
},
{
"name": "common_con_duration_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Duration(ms)"
},
{
"name": "common_stream_dir",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "c2s"
},
{
"code": "2",
"value": "s2c"
},
{
"code": "3",
"value": "double"
}
]
},
"label": "Stream Direction"
},
{
"name": "common_address_list",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Address List"
},
{
"name": "common_has_dup_traffic",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "No"
},
{
"code": "1",
"value": "Yes"
}
],
"visibility": "hidden"
},
"label": "Duplication Traffic"
},
{
"name": "common_stream_error",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Stream Error"
},
{
"name": "common_stream_trace_id",
"type": "long",
"doc": {
"allow_query": "true"
},
"label": "Session ID"
},
{
"name": "http_url",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "URL"
},
{
"name": "http_host",
"type": "string",
"doc": {
"format": {
"functions": "sub_domain",
"appendTo": "http_domain"
}
},
"label": "Host"
},
{
"name": "http_domain",
"type": "string",
"doc": {
"allow_query": "true"
},
"label": "Domain"
},
{
"name": "http_request_line",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Request Line"
},
{
"name": "http_response_line",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Response Line"
},
{
"name": "http_request_header",
"type": "string",
"label": "Request Headers"
},
{
"name": "http_response_header",
"type": "string",
"label": "Response Headers"
},
{
"name": "http_request_body",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "Request Body"
},
{
"name": "http_response_body",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "Response Body"
},
{
"name": "http_request_body_key",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Request Body Key"
},
{
"name": "http_response_body_key",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Response Body Key"
},
{
"name": "http_proxy_flag",
"type": "int",
"label": "Proxy Flag"
},
{
"name": "http_sequence",
"type": "int",
"label": "Sequence"
},
{
"name": "http_snapshot",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Http Snapshot"
},
{
"name": "http_cookie",
"type": "string",
"label": "Cookie"
},
{
"name": "http_referer",
"type": "string",
"label": "Referer"
},
{
"name": "http_user_agent",
"type": "string",
"label": "User Agent"
},
{
"name": "http_content_length",
"type": "string",
"label": "Content Length"
},
{
"name": "http_content_type",
"type": "string",
"label": "Content Type"
},
{
"name": "http_set_cookie",
"type": "string",
"label": "Set Cookie"
},
{
"name": "http_version",
"type": "string",
"label": "Version"
},
{
"name": "http_response_lantency_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Response Latency(ms)"
},
{
"name": "http_session_duration_ms",
"type": "int",
"doc": {
"visibility": "hidden"
},
"label": "Session Duration(ms)"
},
{
"name": "mail_protocol_type",
"type": "string",
"label": "Protocol Type"
},
{
"name": "mail_account",
"type": "string",
"label": "Account"
},
{
"name": "mail_from_cmd",
"type": "string",
"label": "From CMD"
},
{
"name": "mail_to_cmd",
"type": "string",
"label": "To CMD"
},
{
"name": "mail_from",
"type": "string",
"doc": {
"constraints": {
"type": "email"
}
},
"label": "From"
},
{
"name": "mail_to",
"type": "string",
"doc": {
"constraints": {
"type": "email"
}
},
"label": "To"
},
{
"name": "mail_cc",
"type": "string",
"label": "CC"
},
{
"name": "mail_bcc",
"type": "string",
"label": "BCC"
},
{
"name": "mail_subject",
"type": "string",
"doc": {
"format": {
"functions": "decode_of_base64",
"param": "mail_subject_charset"
}
},
"label": "Subject"
},
{
"name": "mail_subject_charset",
"type": "string",
"doc": {
"visibility": "disabled"
},
"label": "Subject Charset"
},
{
"name": "mail_content",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Content"
},
{
"name": "mail_content_charset",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Content Charset"
},
{
"name": "mail_attachment_name",
"type": "string",
"doc": {
"format": {
"functions": "decode_of_base64",
"param": "mail_attachment_name_charset"
}
},
"label": "Attachment"
},
{
"name": "mail_attachment_name_charset",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Attachment Charset"
},
{
"name": "mail_attachment_content",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Attachment Content"
},
{
"name": "mail_eml_file",
"type": "string",
"doc": {
"constraints": {
"type": "file"
}
},
"label": "EML File"
},
{
"name": "mail_snapshot",
"type": "string",
"doc": {
"visibility": "hidden"
},
"label": "Snapshot"
},
{
"name": "dns_message_id",
"type": "int",
"label": "Message ID"
},
{
"name": "dns_qr",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "QUERY"
},
{
"code": "1",
"value": "REESPONSE"
}
]
},
"label": "QR"
},
{
"name": "dns_opcode",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "QUERY"
},
{
"code": "1",
"value": "IQUERY"
},
{
"code": "2",
"value": "STATUS"
},
{
"code": "5",
"value": "UPDATE"
}
]
},
"label": "OPCODE"
},
{
"name": "dns_aa",
"type": "int",
"label": "AA"
},
{
"name": "dns_tc",
"type": "int",
"label": "TC"
},
{
"name": "dns_rd",
"type": "int",
"label": "RD"
},
{
"name": "dns_ra",
"type": "int",
"label": "RA"
},
{
"name": "dns_rcode",
"type": "int",
"label": "RCODE"
},
{
"name": "dns_qdcount",
"type": "int",
"label": "QDCOUNT"
},
{
"name": "dns_ancount",
"type": "int",
"label": "ANCOUNT"
},
{
"name": "dns_nscount",
"type": "int",
"label": "NSCOUNT"
},
{
"name": "dns_arcount",
"type": "int",
"label": "ARCOUNT"
},
{
"name": "dns_qname",
"type": "string",
"label": "QNAME"
},
{
"name": "dns_qtype",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "A"
},
{
"code": "2",
"value": "NS"
},
{
"code": "5",
"value": "CNAME"
},
{
"code": "6",
"value": "SOA"
},
{
"code": "11",
"value": "WKS"
},
{
"code": "12",
"value": "PTR"
},
{
"code": "13",
"value": "HINFO"
},
{
"code": "11",
"value": "WKS"
},
{
"code": "15",
"value": "MX"
},
{
"code": "28",
"value": "AAAA"
}
]
},
"label": "QTYPE"
},
{
"name": "dns_qclass",
"type": "int",
"label": "QCLASS"
},
{
"name": "dns_cname",
"type": "string",
"label": "CNAME"
},
{
"name": "dns_sub",
"type": "int",
"doc": {
"data": [
{
"code": "1",
"value": "DNS"
},
{
"code": "2",
"value": "DNSSEC"
}
]
},
"label": "SUB"
},
{
"name": "dns_rr",
"type": "string",
"label": "RR"
},
{
"name": "ssl_version",
"type": "string",
"label": "Version"
},
{
"name": "ssl_sni",
"type": "string",
"doc": {
"allow_query": "true",
"format": {
"functions": "sub_domain",
"appendTo": "http_domain"
}
},
"label": "SNI"
},
{
"name": "ssl_san",
"type": "string",
"label": "SAN"
},
{
"name": "ssl_cn",
"type": "string",
"label": "CN"
},
{
"name": "ssl_pinningst",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Not Pinning"
},
{
"code": "1",
"value": "Pinning"
},
{
"code": "2",
"value": "Maybe Pinning"
}
]
},
"label": "Pinning"
},
{
"name": "ssl_intercept_state",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "Passthrough"
},
{
"code": "1",
"value": "Intercept"
},
{
"code": "2",
"value": "Shutdown"
}
]
},
"label": "Intercept State"
},
{
"name": "ssl_server_side_latency",
"type": "int",
"label": "Server Side Latency(ms)"
},
{
"name": "ssl_client_side_latency",
"type": "int",
"label": "Client Side Latency(ms)"
},
{
"name": "ssl_server_side_version",
"type": "string",
"label": "Server Side Version"
},
{
"name": "ssl_client_side_version",
"type": "string",
"label": "Client Side Version"
},
{
"name": "ssl_cert_verify",
"type": "int",
"doc": {
"data": [
{
"code": "0",
"value": "No"
},
{
"code": "1",
"value": "Yes"
}
]
},
"label": "Certificate Verify"
},
{
"name": "ssl_error",
"type": "string",
"label": "Error"
},
{
"name": "ssl_con_latency_ms",
"type": "int",
"doc": {
"visibility": "disabled"
},
"label": "Connection Latency(ms)"
},
{
"name": "ftp_account",
"type": "string",
"label": "Account"
},
{
"name": "ftp_url",
"type": "string",
"label": "URL"
},
{
"name": "ftp_content",
"type": "string",
"label": "Content"
},
{
"name": "bgp_type",
"type": "int",
"label": "Type"
},
{
"name": "bgp_as_num",
"type": "string",
"label": "AS Number"
},
{
"name": "bgp_route",
"type": "string",
"label": "Route"
},
{
"name": "voip_calling_account",
"type": "string",
"label": "Calling Account"
},
{
"name": "voip_called_account",
"type": "string",
"label": "Called Account"
},
{
"name": "voip_calling_number",
"type": "string",
"label": "Calling Number"
},
{
"name": "voip_called_number",
"type": "string",
"label": "Called Number"
},
{
"name": "streaming_media_url",
"type": "string",
"label": "Media URL"
},
{
"name": "streaming_media_protocol",
"type": "string",
"label": "Media Protocol"
}
]
}
},
"required": [
"doc",
"fields"
]
},
"msg": {
"type": "string",
"default": "Success"
},
"success": {
"type": "boolean",
"default": true
}
},
"required": [
"code",
"data",
"msg",
"success"
]
}</msg>
<status status="PASS" starttime="20200401 12:24:26.251" endtime="20200401 12:24:26.456"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.457" endtime="20200401 12:24:26.485"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${LogSchemaResponse.body['data']}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.487" level="INFO">{'doc': {'schema_query': {'dimensions': ['common_server_ip', 'common_client_ip', 'common_policy_id', 'common_action', 'common_sled_ip', 'common_server_location', 'common_subscriber_id', 'http_domain'], 'metrics': ['common_server_ip', 'common_client_ip', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num'], 'filters': ['common_policy_id', 'common_action', 'common_address_type', 'common_server_ip', 'common_client_ip', 'common_server_port', 'common_server_location', 'common_subscriber_id', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'http_domain', 'http_content_type', 'ssl_sni', 'ssl_pinningst', 'ssl_intercept_state']}, 'schema_type': {'BASE': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port']}, 'HTTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'http_url', 'http_host', 'http_domain', 'http_request_line', 'http_response_line', 'http_request_header', 'http_response_header', 'http_request_body', 'http_response_body', 'http_request_body_key', 'http_response_body_key', 'http_proxy_flag', 'http_sequence', 'http_snapshot', 'http_cookie', 'http_referer', 'http_user_agent', 'http_content_length', 'http_content_type', 'http_set_cookie', 'http_version', 'http_response_lantency_ms', 'http_session_duration_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'http_url', 'common_server_port']}, 'MAIL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'mail_protocol_type', 'mail_account', 'mail_from_cmd', 'mail_to_cmd', 'mail_from', 'mail_to', 'mail_cc', 'mail_bcc', 'mail_subject', 'mail_subject_charset', 'mail_content', 'mail_content_charset', 'mail_attachment_name', 'mail_attachment_name_charset', 'mail_attachment_content', 'mail_eml_file', 'mail_snapshot'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'mail_from', 'mail_to', 'mail_subject']}, 'DNS': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'dns_message_id', 'dns_qr', 'dns_opcode', 'dns_aa', 'dns_tc', 'dns_rd', 'dns_ra', 'dns_rcode', 'dns_qdcount', 'dns_ancount', 'dns_nscount', 'dns_arcount', 'dns_qname', 'dns_qtype', 'dns_qclass', 'dns_cname', 'dns_sub', 'dns_rr'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_client_ip', 'dns_qr', 'dns_qname', 'dns_qtype']}, 'SSL': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ssl_sni', 'ssl_san', 'ssl_cn', 'ssl_pinningst', 'ssl_intercept_state', 'ssl_server_side_latency', 'ssl_client_side_latency', 'ssl_server_side_version', 'ssl_client_side_version', 'ssl_cert_verify', 'ssl_error', 'ssl_con_latency_ms'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ssl_sni', 'common_server_ip', 'common_server_port']}, 'FTP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'ftp_account', 'ftp_url', 'ftp_content'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'ftp_url', 'common_server_ip', 'common_server_port']}, 'BGP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'bgp_type', 'bgp_as_num', 'bgp_route'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'bgp_type', 'bgp_as_num', 'common_server_ip', 'common_server_port']}, 'VOIP': {'columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_client_port', 'common_l4_protocol', 'common_address_type', 'common_server_ip', 'common_server_port', 'common_action', 'common_direction', 'common_entrance_id', 'common_sled_ip', 'common_client_location', 'common_client_asn', 'common_server_location', 'common_server_asn', 'common_c2s_pkt_num', 'common_s2c_pkt_num', 'common_c2s_byte_num', 'common_s2c_byte_num', 'common_service', 'common_schema_type', 'common_user_tags', 'common_sub_action', 'common_user_region', 'common_device_id', 'common_link_id', 'common_isp', 'common_encapsulation', 'common_app_label', 'common_app_id', 'common_protocol_id', 'common_start_time', 'common_end_time', 'common_establish_latency_ms', 'common_con_duration_ms', 'common_stream_dir', 'common_address_list', 'common_has_dup_traffic', 'common_stream_error', 'common_stream_trace_id', 'voip_calling_account', 'voip_called_account', 'voip_calling_number', 'voip_called_number'], 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'voip_calling_account', 'voip_called_account', 'common_server_ip', 'common_server_port']}}, 'default_columns': ['common_recv_time', 'common_log_id', 'common_policy_id', 'common_subscriber_id', 'common_client_ip', 'common_server_ip', 'common_server_port', 'common_schema_type']}, 'fields': [{'name': 'common_recv_time', 'type': 'int', 'doc': {'allow_query': 'true', 'constraints': {'type': 'timestamp'}, 'format': {'functions': 'current_timestamp'}}, 'label': 'Receive Time'}, {'name': 'common_log_id', 'type': 'long', 'doc': {'allow_query': 'true', 'format': {'functions': 'snowflake_id'}}, 'label': 'Log ID'}, {'name': 'common_policy_id', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Policy ID'}, {'name': 'common_subscriber_id', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Subscriber ID'}, {'name': 'common_client_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_detail,geo_asn,radius_match', 'appendTo': 'common_client_location,common_client_asn,common_subscriber_id'}}, 'label': 'Client IP'}, {'name': 'common_client_port', 'type': 'int', 'label': 'Client Port'}, {'name': 'common_l4_protocol', 'type': 'string', 'label': 'L4 Protocol'}, {'name': 'common_address_type', 'type': 'int', 'doc': {'data': [{'code': '4', 'value': 'ipv4'}, {'code': '6', 'value': 'ipv6'}]}, 'label': 'Address Type'}, {'name': 'common_server_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}, 'format': {'functions': 'geo_ip_country,geo_asn', 'appendTo': 'common_server_location,common_server_asn'}}, 'label': 'Server IP'}, {'name': 'common_server_port', 'type': 'int', 'doc': {'allow_query': 'true'}, 'label': 'Server Port'}, {'name': 'common_action', 'type': 'int', 'doc': {'allow_query': 'true', 'data': [{'code': '0', 'value': 'None'}, {'code': '1', 'value': 'Monitor'}, {'code': '2', 'value': 'Intercept'}, {'code': '16', 'value': 'Deny'}, {'code': '48', 'value': 'Manipulation'}, {'code': '128', 'value': 'Allow'}]}, 'label': 'Action'}, {'name': 'common_direction', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'outbound'}, {'code': '1', 'value': 'inbound'}]}, 'label': 'Direction'}, {'name': 'common_entrance_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Entrance ID'}, {'name': 'common_sled_ip', 'type': 'string', 'doc': {'allow_query': 'true', 'constraints': {'type': 'ip'}}, 'label': 'Sled IP'}, {'name': 'common_client_location', 'type': 'string', 'label': 'Client Location'}, {'name': 'common_client_asn', 'type': 'string', 'label': 'Client ASN'}, {'name': 'common_server_location', 'type': 'string', 'label': 'Server Location'}, {'name': 'common_server_asn', 'type': 'string', 'label': 'Server ASN'}, {'name': 'common_c2s_pkt_num', 'type': 'int', 'label': 'Packets Sent'}, {'name': 'common_s2c_pkt_num', 'type': 'int', 'label': 'Packets Received'}, {'name': 'common_c2s_byte_num', 'type': 'int', 'label': 'Bytes Sent'}, {'name': 'common_s2c_byte_num', 'type': 'int', 'label': 'Bytes Received'}, {'name': 'common_service', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Service'}, {'name': 'common_schema_type', 'type': 'string', 'doc': {'data': [{'code': 'BASE', 'value': 'BASE'}, {'code': 'HTTP', 'value': 'HTTP'}, {'code': 'MAIL', 'value': 'MAIL'}, {'code': 'DNS', 'value': 'DNS'}, {'code': 'SSL', 'value': 'SSL'}, {'code': 'FTP', 'value': 'FTP'}, {'code': 'BGP', 'value': 'BGP'}, {'code': 'VOIP', 'value': 'VOIP'}, {'code': 'RADIUS', 'value': 'RADIUS'}], 'allow_query': 'true'}, 'label': 'Schema Type'}, {'name': 'common_user_tags', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'User Tags'}, {'name': 'common_sub_action', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Sub Action'}, {'name': 'common_user_region', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'User Region'}, {'name': 'common_device_id', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Device ID'}, {'name': 'common_link_id', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Link ID'}, {'name': 'common_isp', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'ISP'}, {'name': 'common_encapsulation', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Ethernet'}, {'code': '8', 'value': 'PPP'}, {'code': '12', 'value': 'CiscoHDLC'}]}, 'label': 'Encapsulation'}, {'name': 'common_app_label', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Application Label'}, {'name': 'common_app_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '100001', 'value': 'Skype'}, {'code': '100101', 'value': 'Instagram'}, {'code': '100201', 'value': 'Youtube'}, {'code': '100301', 'value': 'Facebook'}, {'code': '100401', 'value': 'What‘s App'}, {'code': '100501', 'value': 'Periscope'}, {'code': '100601', 'value': 'Viber'}, {'code': '100701', 'value': 'Twitter'}, {'code': '100801', 'value': 'Vkontakte'}, {'code': '100901', 'value': 'Telegram'}, {'code': '101001', 'value': 'Odnoklassniki'}, {'code': '101101', 'value': 'Mail agent'}, {'code': '101201', 'value': 'FaceTime'}, {'code': '101301', 'value': 'Snapchat'}, {'code': '101401', 'value': 'Google'}, {'code': '101501', 'value': 'Yandex'}, {'code': '101601', 'value': 'Yandex Browser Turbo'}, {'code': '101701', 'value': 'Opera'}, {'code': '101702', 'value': 'Opera Turbo'}, {'code': '101703', 'value': 'Opera mini'}, {'code': '101801', 'value': 'AppStore'}, {'code': '101901', 'value': 'PlayMarket'}, {'code': '102001', 'value': 'Drugvokrug social networking'}, {'code': '102101', 'value': 'Badoo social networking'}, {'code': '102201', 'value': 'WeChat'}, {'code': '102301', 'value': 'Zello'}, {'code': '102401', 'value': 'Freegate'}, {'code': '102501', 'value': 'Psiphon'}, {'code': '102601', 'value': 'TOR'}, {'code': '102602', 'value': 'Tor browser'}, {'code': '102603', 'value': 'Tor mode'}, {'code': '102701', 'value': 'Orbot'}, {'code': '102801', 'value': 'Tunnel Bear VPN'}, {'code': '102901', 'value': 'HotSpot Shield VPN'}, {'code': '103001', 'value': 'VPN Master'}, {'code': '103101', 'value': 'Hola VPN'}, {'code': '103201', 'value': 'HideMyAss VPN'}, {'code': '103301', 'value': 'Zenmate VPN'}, {'code': '103401', 'value': 'SignalPrivateMessenger'}, {'code': '200001', 'value': 'RFA'}, {'code': '200002', 'value': 'VOA'}, {'code': '200003', 'value': 'lantern'}, {'code': '200004', 'value': 'Line'}, {'code': '200005', 'value': 'voxer'}, {'code': '200006', 'value': 'ZeroNet'}, {'code': '200007', 'value': 'Zalo'}, {'code': '200008', 'value': 'free_browser'}, {'code': '200009', 'value': 'Diaspora'}, {'code': '200010', 'value': 'browsec'}, {'code': '200011', 'value': 'Chrome_plugin_chuguo'}, {'code': '200012', 'value': 'GoGo_SocksHttp'}, {'code': '200013', 'value': 'ultrasurf_chrome'}, {'code': '200014', 'value': 'pinterest'}, {'code': '200015', 'value': 'Swisscom'}, {'code': '200016', 'value': 'Threema'}, {'code': '200017', 'value': 'Circuit_iOS'}, {'code': '200018', 'value': 'Chrome_plugin_FastsTunnel'}, {'code': '200019', 'value': 'OoVoo'}, {'code': '200020', 'value': 'Vine'}, {'code': '200021', 'value': 'Keek'}, {'code': '200022', 'value': 'Hi'}, {'code': '200023', 'value': 'HeyTell'}, {'code': '200024', 'value': 'HikeMessenger'}, {'code': '200025', 'value': 'Nonoh'}, {'code': '200026', 'value': 'Path'}, {'code': '200027', 'value': 'Kik'}, {'code': '200028', 'value': 'BBM'}, {'code': '200029', 'value': 'Talkray'}, {'code': '200030', 'value': 'HelloTalk'}, {'code': '200031', 'value': 'Skout'}, {'code': '200032', 'value': 'MeetMe'}, {'code': '200033', 'value': 'Nextdoor'}, {'code': '200034', 'value': 'Shots'}, {'code': '200035', 'value': 'Zoosk'}, {'code': '200036', 'value': 'TextPlus'}, {'code': '200037', 'value': 'Maaii'}, {'code': '200038', 'value': 'Ustream'}, {'code': '200039', 'value': 'Yikyak'}, {'code': '200040', 'value': 'chatsecure'}, {'code': '200041', 'value': 'freecalls'}, {'code': '200042', 'value': 'SignalPrivateMessenger'}, {'code': '200043', 'value': 'USGOV_CIA'}, {'code': '200044', 'value': 'USGOV_FBI'}, {'code': '200045', 'value': 'USGOV_DHS'}, {'code': '200046', 'value': 'shenxun_Secure_Call_android'}, {'code': '200047', 'value': 'shenxun_Secure_Call_web'}, {'code': '200048', 'value': 'UProxy'}, {'code': '200049', 'value': 'soma'}, {'code': '200050', 'value': "PlayerUnknown's_Battlegrounds"}, {'code': '200051', 'value': 'STEAM'}, {'code': '200052', 'value': 'dalai_lama'}, {'code': '200053', 'value': 'Steam_forum'}, {'code': '200054', 'value': 'Microsoft Online Certificate'}, {'code': '200055', 'value': 'sogou_spider'}, {'code': '200056', 'value': 'baidu_mobie'}, {'code': '200057', 'value': 'Apple Push Service'}, {'code': '200058', 'value': 'IQIYI'}, {'code': '200059', 'value': 'baidu_spider'}, {'code': '200060', 'value': 'Weibo'}, {'code': '200061', 'value': 'Apple captive service'}, {'code': '200062', 'value': 'Microsoft wns'}, {'code': '200063', 'value': '360_safe_pc'}, {'code': '200064', 'value': 'Sogou Public Service'}, {'code': '200065', 'value': 'Lenovo app_POST service'}, {'code': '200066', 'value': 'Apple securityd service'}, {'code': '200067', 'value': 'Weather pass'}, {'code': '200068', 'value': 'Apple Service Pack'}, {'code': '200069', 'value': 'Fast pressure'}, {'code': '200070', 'value': 'SemrushBot'}, {'code': '200071', 'value': 'Adrefs_spider'}, {'code': '200072', 'value': 'AndroidDownloadManager'}, {'code': '200073', 'value': 'XenderTop'}, {'code': '200074', 'value': 'microsoft_update'}, {'code': '200075', 'value': 'Youku'}, {'code': '200076', 'value': 'Google_spider'}, {'code': '200077', 'value': 'Microsoft User Experience and Telemetry Components'}, {'code': '200078', 'value': 'MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT'}, {'code': '200079', 'value': 'Microsoft ncsi'}, {'code': '200080', 'value': 'Microsoft Privacy Collection Service'}, {'code': '200081', 'value': 'uTorrent'}, {'code': '200082', 'value': 'Edge'}, {'code': '200083', 'value': 'Lenovo Music Store'}, {'code': '200084', 'value': 'LieBao'}, {'code': '200085', 'value': 'majesti_spider'}, {'code': '200086', 'value': 'DotBot'}, {'code': '200087', 'value': 'Millet Update'}, {'code': '200088', 'value': 'Today’s headlines'}, {'code': '200089', 'value': 'Microsoft live'}, {'code': '200090', 'value': 'Microsoft OneNote'}, {'code': '200091', 'value': 'Bing_spider'}, {'code': '200092', 'value': 'Apple location service'}, {'code': '200093', 'value': 'Kuaishou'}, {'code': '200094', 'value': 'LeTV video'}, {'code': '200095', 'value': 'QQ'}, {'code': '200096', 'value': 'Wps'}, {'code': '200097', 'value': 'kugou music'}, {'code': '200098', 'value': 'kuwo music'}, {'code': '200099', 'value': '360_common_service'}, {'code': '200100', 'value': 'Camera360'}, {'code': '200101', 'value': 'Outlook'}, {'code': '200102', 'value': 'zhihu'}, {'code': '200103', 'value': 'Tencent video'}, {'code': '200104', 'value': 'funshion'}, {'code': '200105', 'value': 'QQ shared service'}, {'code': '200106', 'value': 'Microsoft wdcp service'}, {'code': '200107', 'value': 'Microsoft Media_center_pc'}, {'code': '200108', 'value': '360 phone helper'}, {'code': '200109', 'value': 'Kingsoft Public Service'}, {'code': '200110', 'value': 'Ios_wifi connection'}, {'code': '200111', 'value': 'Teamviewer'}, {'code': '200112', 'value': 'Baidu cloud disk'}, {'code': '200113', 'value': 'Tencent News'}, {'code': '200114', 'value': 'Baidu map'}, {'code': '200115', 'value': 'Panda TV'}, {'code': '200116', 'value': 'Thunder'}, {'code': '200117', 'value': 'NetEase cloud music'}, {'code': '200118', 'value': 'QQ music'}, {'code': '200119', 'value': 'Itools'}, {'code': '200120', 'value': 'Jingdong Finance'}, {'code': '200121', 'value': 'PycURL'}, {'code': '200122', 'value': 'Yahoo_Spider'}, {'code': '200123', 'value': 'Himalayan FM'}, {'code': '200124', 'value': 'Youdao_dict'}, {'code': '200125', 'value': 'Microsoft_spynet'}, {'code': '200126', 'value': 'proximicBot'}, {'code': '200127', 'value': 'Foxit_reader'}, {'code': '200128', 'value': 'Sohu Video'}, {'code': '200129', 'value': 'BlueStacks'}, {'code': '200130', 'value': 'Beauty group'}, {'code': '200131', 'value': 'Kmplayer'}, {'code': '200132', 'value': 'TaoBao'}, {'code': '200133', 'value': 'Exabot'}, {'code': '200134', 'value': 'Ubuntu_apt_get'}, {'code': '200135', 'value': 'Oriental Fortune'}, {'code': '200136', 'value': 'JikeSpider'}, {'code': '200137', 'value': 'Itunesstored'}, {'code': '200138', 'value': 'GAD map'}, {'code': '200139', 'value': 'ifeng News'}, {'code': '200140', 'value': 'BoardReaderBot'}, {'code': '200141', 'value': 'AmazonBot'}, {'code': '200142', 'value': 'Alipay'}, {'code': '200143', 'value': 'Alipay security controls'}, {'code': '200144', 'value': '360 security guards (antivirus)'}, {'code': '200145', 'value': '360 logon service'}, {'code': '200146', 'value': 'BLP_bbot'}, {'code': '200147', 'value': 'Keep'}, {'code': '200148', 'value': 'WiFi universal key'}, {'code': '200149', 'value': 'Baidu Music'}, {'code': '200150', 'value': 'Vip.com'}, {'code': '200151', 'value': 'JD.COM'}, {'code': '200152', 'value': 'sina'}, {'code': '200153', 'value': 'youdao Public service'}, {'code': '200154', 'value': 'Jinshan public service'}, {'code': '200155', 'value': 'Baidu guard'}, {'code': '200156', 'value': 'Apple system update service'}, {'code': '200157', 'value': 'momo'}, {'code': '200158', 'value': 'CNZZ statistics'}, {'code': '200159', 'value': 'Microsoft one_drive service'}, {'code': '200160', 'value': 'WindowsStore'}, {'code': '200161', 'value': 'duba'}, {'code': '200162', 'value': 'Baidu HD'}, {'code': '200163', 'value': 'qunar'}, {'code': '200164', 'value': 'qianxunyingshi'}, {'code': '200165', 'value': 'KuaiyanKanShuSpider'}, {'code': '200166', 'value': 'Mail.RU_Bot_Robot'}, {'code': '200167', 'value': 'MpCommunication'}, {'code': '200168', 'value': 'Weather forecast'}, {'code': '200169', 'value': 'Ltx71_spider'}, {'code': '200170', 'value': 'Ia_archiver'}, {'code': '200171', 'value': 'Ali Wangwang'}, {'code': '200172', 'value': 'UC home page (information)'}, {'code': '200173', 'value': 'Yeti'}, {'code': '200174', 'value': 'Rtorrent'}, {'code': '200175', 'value': 'QQPim'}, {'code': '200176', 'value': 'NetEase News'}, {'code': '200177', 'value': 'sina sports'}, {'code': '200178', 'value': 'Exchange of foreign exchange'}, {'code': '200179', 'value': 'BlueStacks update'}, {'code': '200180', 'value': 'youdao'}, {'code': '200181', 'value': 'QQ computer housekeeper'}, {'code': '200182', 'value': 'UltraEdit'}, {'code': '200183', 'value': 'EasouSpider'}, {'code': '200184', 'value': 'QQ Zone'}, {'code': '200185', 'value': 'Foxmail'}, {'code': '200186', 'value': 'Pingdom.com'}, {'code': '200187', 'value': 'Sina Finance'}, {'code': '200188', 'value': 'QQ one key login'}, {'code': '200189', 'value': 'Norton'}, {'code': '200190', 'value': 'Baidu waimai'}, {'code': '200191', 'value': 'YaCy'}, {'code': '200192', 'value': 'Haitong e Haitong'}, {'code': '200193', 'value': 'AdsBot-Google'}, {'code': '200194', 'value': 'Guangfa Yijin'}, {'code': '200195', 'value': 'Ali security program'}, {'code': '200196', 'value': 'Cliqzbot'}, {'code': '200197', 'value': 'Mobike'}, {'code': '200198', 'value': 'Kingsoft PowerWord'}, {'code': '200199', 'value': 'meishij'}, {'code': '200200', 'value': 'CCB mobile bank'}, {'code': '200201', 'value': 'Mega SkyDrive'}, {'code': '200202', 'value': 'douyu'}, {'code': '200203', 'value': 'Flamingo_SearchEngine'}, {'code': '200204', 'value': 'Lenovo shop'}, {'code': '200205', 'value': 'Uc news'}, {'code': '200206', 'value': 'Volcano small video'}, {'code': '200207', 'value': 'Meitu Xiu Xiu'}, {'code': '200208', 'value': 'Kaspersky'}, {'code': '200209', 'value': 'AcFun'}, {'code': '200210', 'value': 'Slackbot'}, {'code': '200211', 'value': 'Snowball'}, {'code': '200212', 'value': 'SafeDNSBot'}, {'code': '200213', 'value': 'Great wisdom'}, {'code': '200214', 'value': 'Mailbox of NetEase'}, {'code': '200215', 'value': 'peasecod'}, {'code': '200216', 'value': 'Gold ten data'}, {'code': '200217', 'value': 'Linkdexbot'}, {'code': '200218', 'value': 'Sina blog'}, {'code': '200219', 'value': 'Ginger'}, {'code': '200220', 'value': 'Microsoft activation verification'}, {'code': '200221', 'value': 'Facebot'}, {'code': '200222', 'value': 'Dangdang'}, {'code': '200223', 'value': 'QQ cyclone'}, {'code': '200224', 'value': 'Wp_feedbot'}, {'code': '200225', 'value': 'ICBC'}, {'code': '200226', 'value': 'Public service'}, {'code': '200227', 'value': 'Magpie-crawler'}, {'code': '200228', 'value': 'xianyu'}, {'code': '200229', 'value': 'GetIntentBot'}, {'code': '200230', 'value': 'Papers'}, {'code': '200231', 'value': 'NewsGator'}, {'code': '200232', 'value': 'RankFlexBot'}, {'code': '200233', 'value': 'rogerbot'}, {'code': '200234', 'value': 'SurdotlyBot'}, {'code': '200235', 'value': 'CheckMarkNetworkBot'}, {'code': '200236', 'value': 'pyspider'}, {'code': '200237', 'value': 'spbot'}, {'code': '200238', 'value': 'Huaxia Bank'}, {'code': '200239', 'value': 'glory of king'}, {'code': '200240', 'value': 'msnbot-Products'}, {'code': '200241', 'value': 'archive.org'}, {'code': '200242', 'value': 'applebot'}, {'code': '200243', 'value': 'alicall'}, {'code': '200244', 'value': 'Superfeedrbot'}, {'code': '200245', 'value': 'QQ mailbox'}, {'code': '200246', 'value': 'coccocbot-webBot'}, {'code': '200247', 'value': 'dingtalk'}, {'code': '200248', 'value': 'Dragonbot'}, {'code': '200249', 'value': 'Mediatoolkitbot'}, {'code': '200250', 'value': 'bitcomet'}, {'code': '200251', 'value': 'filetopia'}, {'code': '200252', 'value': 'flashget'}, {'code': '200253', 'value': 'oracle'}, {'code': '200254', 'value': 'yyvoice'}, {'code': '200255', 'value': 'imesh'}, {'code': '200256', 'value': 'citrix'}, {'code': '200257', 'value': 'corba'}, {'code': '200258', 'value': 'dameware'}, {'code': '200259', 'value': 'pcanywhere'}, {'code': '200260', 'value': 'qq_rdp'}, {'code': '200261', 'value': 'poco'}, {'code': '200262', 'value': 'qqdownload'}, {'code': '200263', 'value': 'applejuice'}, {'code': '200264', 'value': 'stealthnet'}, {'code': '200265', 'value': 'winmx'}, {'code': '200266', 'value': 'emule'}, {'code': '200267', 'value': 'emule_decrypt'}, {'code': '200268', 'value': 'qvod'}, {'code': '200269', 'value': 'mysql'}, {'code': '200270', 'value': 'icecast'}, {'code': '200271', 'value': 'mms'}, {'code': '200272', 'value': 'pplive'}, {'code': '200273', 'value': 'ppstream'}, {'code': '200274', 'value': 'sopcast'}, {'code': '200275', 'value': 'tvants'}, {'code': '200276', 'value': 'sohutv'}, {'code': '200277', 'value': 'iku'}, {'code': '200278', 'value': 'qqlive'}, {'code': '200279', 'value': 'rsync'}, {'code': '200280', 'value': 'xunyou_speedup'}, {'code': '200281', 'value': 'msn'}, {'code': '200282', 'value': 'popo'}, {'code': '200283', 'value': 'sinauc'}, {'code': '200284', 'value': 'qqbattle'}, {'code': '200285', 'value': 'quake'}, {'code': '200286', 'value': 'xbox'}, {'code': '200287', 'value': 'wow'}, {'code': '200288', 'value': 'lol'}, {'code': '200289', 'value': 'PostgreSQL'}, {'code': '200290', 'value': 'TDS'}, {'code': '200291', 'value': 'VMware'}, {'code': '200292', 'value': 'Kontiki'}, {'code': '200293', 'value': 'OpenFT'}, {'code': '200294', 'value': 'Gnutella'}, {'code': '200295', 'value': 'eDonkey'}, {'code': '200296', 'value': 'AVI'}, {'code': '200297', 'value': 'RealMedia'}, {'code': '200298', 'value': 'Windowsmedia'}, {'code': '200299', 'value': 'MOVE'}, {'code': '200300', 'value': 'Feidian'}, {'code': '200301', 'value': 'Zattoo'}, {'code': '200302', 'value': 'SHOUTCast'}, {'code': '200303', 'value': 'TVUplayer'}, {'code': '200304', 'value': 'VeohTV'}, {'code': '200305', 'value': 'Soulseek'}, {'code': '200306', 'value': 'GaduGadu'}, {'code': '200307', 'value': 'Oscar'}, {'code': '200308', 'value': 'Yahoo'}, {'code': '200309', 'value': 'Battlefield'}, {'code': '200310', 'value': 'Halflife2'}, {'code': '200311', 'value': 'World of Warcraft'}, {'code': '200312', 'value': 'USENET'}, {'code': '200313', 'value': 'AFP'}, {'code': '200314', 'value': 'Truphone'}, {'code': '200315', 'value': 'Armagetron'}, {'code': '200316', 'value': 'CrossFire'}, {'code': '200317', 'value': 'Dofus'}, {'code': '200318', 'value': 'Fiesta'}, {'code': '200319', 'value': 'Florensia'}, {'code': '200320', 'value': 'Guildwars'}, {'code': '200321', 'value': 'HTTP Application Activesync'}, {'code': '200322', 'value': 'MapleStory'}, {'code': '200323', 'value': 'msSQL'}, {'code': '200324', 'value': 'WARCRAFT3'}, {'code': '200325', 'value': 'World of Kung Fu'}, {'code': '200326', 'value': 'MEEBO'}, {'code': '200327', 'value': 'DropBox'}, {'code': '200328', 'value': 'HTTP Proxy'}, {'code': '200329', 'value': 'Netflix'}, {'code': '200330', 'value': 'CitrixOnline/GotoMeeting'}, {'code': '200331', 'value': 'Webex'}, {'code': '200332', 'value': 'Apple iCloud'}, {'code': '200333', 'value': 'Apple iTunes'}, {'code': '200334', 'value': 'WindowsUpdate'}, {'code': '200335', 'value': 'Tuenti'}, {'code': '200336', 'value': 'LotusNotes'}, {'code': '200337', 'value': 'RemoteScan'}, {'code': '200338', 'value': 'Spotify'}, {'code': '200339', 'value': 'CiscoVPN'}, {'code': '200340', 'value': 'TeamSpeak'}, {'code': '200341', 'value': 'UbuntuONE'}, {'code': '200342', 'value': 'CNN'}, {'code': '200343', 'value': 'Wikipedia'}, {'code': '200344', 'value': 'Collectd'}, {'code': '200345', 'value': 'Redis'}, {'code': '200346', 'value': 'ZeroMQ'}, {'code': '200347', 'value': 'Stracraft'}, {'code': '200348', 'value': 'Simet'}, {'code': '200349', 'value': 'OpenSignal'}, {'code': '200350', 'value': '99Taxi'}, {'code': '200351', 'value': 'GloboTV'}, {'code': '200352', 'value': 'Deezer'}, {'code': '200353', 'value': 'Microsoft cloud services'}, {'code': '200354', 'value': 'Twitch'}, {'code': '200355', 'value': 'KakaoTalk Voice and Chat'}, {'code': '200357', 'value': '360.cn'}, {'code': '200358', 'value': '360Safeguard_P2P'}, {'code': '200359', 'value': '4D'}, {'code': '200360', 'value': 'acercloud'}, {'code': '200361', 'value': 'acestream'}, {'code': '200362', 'value': 'airdroid'}, {'code': '200363', 'value': 'airmedia'}, {'code': '200364', 'value': 'akamai'}, {'code': '200365', 'value': 'akamai_transfer'}, {'code': '200366', 'value': 'amanda'}, {'code': '200367', 'value': 'amp'}, {'code': '200368', 'value': 'Appear.in'}, {'code': '200369', 'value': 'ares'}, {'code': '200370', 'value': 'ARKSurvivalEvolved'}, {'code': '200371', 'value': 'ARMA3Server'}, {'code': '200372', 'value': 'ARMA2Server'}, {'code': '200373', 'value': 'AvastSecureDNS'}, {'code': '200374', 'value': 'azureus'}, {'code': '200375', 'value': 'backweb'}, {'code': '200376', 'value': 'BadBaidu'}, {'code': '200377', 'value': 'baofeng'}, {'code': '200378', 'value': 'bitext'}, {'code': '200379', 'value': 'BlackDesertOnline'}, {'code': '200380', 'value': 'Blizzard'}, {'code': '200381', 'value': 'bmdp'}, {'code': '200382', 'value': 'bncs'}, {'code': '200383', 'value': 'btdht'}, {'code': '200384', 'value': 'btsync'}, {'code': '200385', 'value': 'cacaoweb'}, {'code': '200386', 'value': 'chatango'}, {'code': '200387', 'value': 'chivalry'}, {'code': '200388', 'value': 'cirn'}, {'code': '200389', 'value': 'cisco_sslvpn'}, {'code': '200390', 'value': 'clash_of_clans'}, {'code': '200391', 'value': 'Clubbox'}, {'code': '200392', 'value': 'cod'}, {'code': '200393', 'value': 'cod_waw'}, {'code': '200394', 'value': 'combatarms'}, {'code': '200395', 'value': 'combatarms_p2p'}, {'code': '200396', 'value': 'ConquerOnline'}, {'code': '200397', 'value': 'Counterstrike1.6'}, {'code': '200398', 'value': 'Checkpoint_RDP'}, {'code': '200399', 'value': 'crashplan'}, {'code': '200400', 'value': 'crossout'}, {'code': '200401', 'value': 'cryptic'}, {'code': '200402', 'value': 'cvs'}, {'code': '200403', 'value': 'dash'}, {'code': '200404', 'value': 'dc'}, {'code': '200405', 'value': 'db2'}, {'code': '200406', 'value': 'dell_backup'}, {'code': '200407', 'value': 'Demonware'}, {'code': '200408', 'value': 'destiny'}, {'code': '200409', 'value': 'diablo2'}, {'code': '200410', 'value': 'isakmp'}, {'code': '200411', 'value': 'jedi'}, {'code': '200412', 'value': 'jedi_academy'}, {'code': '200413', 'value': 'jx3online'}, {'code': '200414', 'value': 'kankan'}, {'code': '200415', 'value': 'kaseya'}, {'code': '200416', 'value': 'kazaa'}, {'code': '200417', 'value': 'kuaibo'}, {'code': '200418', 'value': 'lifeforge'}, {'code': '200419', 'value': 'linkproof'}, {'code': '200420', 'value': 'litecoin'}, {'code': '200421', 'value': 'maxicloud'}, {'code': '200422', 'value': 'merakicloud'}, {'code': '200423', 'value': 'minecraft'}, {'code': '200424', 'value': 'mongo'}, {'code': '200425', 'value': 'msoffice_mac'}, {'code': '200426', 'value': 'munin'}, {'code': '200427', 'value': 'mzinga'}, {'code': '200428', 'value': 'n2ping'}, {'code': '200429', 'value': 'ncsoft'}, {'code': '200430', 'value': 'netcat_cctv'}, {'code': '200431', 'value': 'neverwinter'}, {'code': '200432', 'value': 'newerth'}, {'code': '200433', 'value': 'nintendo'}, {'code': '200434', 'value': 'nntps'}, {'code': '200435', 'value': 'noction'}, {'code': '200436', 'value': 'noe'}, {'code': '200437', 'value': 'norton_backup'}, {'code': '200438', 'value': 'omegle'}, {'code': '200439', 'value': 'opaserv'}, {'code': '200440', 'value': 'orbit'}, {'code': '200441', 'value': 'ourworld'}, {'code': '200442', 'value': 'overwatch'}, {'code': '200443', 'value': 'diablo3'}, {'code': '200444', 'value': 'dianping'}, {'code': '200445', 'value': 'dianshijia'}, {'code': '200446', 'value': 'discord'}, {'code': '200447', 'value': 'dogecoin'}, {'code': '200448', 'value': 'dota2'}, {'code': '200449', 'value': 'douyu_chat'}, {'code': '200450', 'value': 'doyo'}, {'code': '200451', 'value': 'driveshare'}, {'code': '200452', 'value': 'dtls'}, {'code': '200453', 'value': 'dueling_network'}, {'code': '200454', 'value': 'dvrns'}, {'code': '200455', 'value': 'dxp'}, {'code': '200456', 'value': 'ea_games'}, {'code': '200457', 'value': 'epson'}, {'code': '200458', 'value': 'eso'}, {'code': '200459', 'value': 'etrust'}, {'code': '200460', 'value': 'fasp'}, {'code': '200461', 'value': 'finalfantasy_xiv'}, {'code': '200462', 'value': 'flash'}, {'code': '200463', 'value': 'fliggy'}, {'code': '200464', 'value': 'fortinet'}, {'code': '200465', 'value': 'foscam'}, {'code': '200466', 'value': 'freechal'}, {'code': '200467', 'value': 'fring'}, {'code': '200468', 'value': 'fuckcoin'}, {'code': '200469', 'value': 'gamespy'}, {'code': '200470', 'value': 'gangsofspace'}, {'code': '200471', 'value': 'garena'}, {'code': '200472', 'value': 'gearsofwar'}, {'code': '200473', 'value': 'giop'}, {'code': '200474', 'value': 'git'}, {'code': '200475', 'value': 'glupteba'}, {'code': '200476', 'value': 'gnutella2'}, {'code': '200477', 'value': 'gokuchat'}, {'code': '200478', 'value': 'google_hangouts'}, {'code': '200479', 'value': 'gotomeeting'}, {'code': '200480', 'value': 'gprs_tunnel'}, {'code': '200481', 'value': 'graal_online_era'}, {'code': '200482', 'value': 'gsm'}, {'code': '200483', 'value': 'h1z1'}, {'code': '200484', 'value': 'halo_online'}, {'code': '200485', 'value': 'hamachi'}, {'code': '200486', 'value': 'harveys'}, {'code': '200487', 'value': 'hearthstone'}, {'code': '200488', 'value': 'heroes_generals'}, {'code': '200489', 'value': 'hots'}, {'code': '200490', 'value': 'icp'}, {'code': '200491', 'value': 'icq'}, {'code': '200492', 'value': 'id'}, {'code': '200493', 'value': 'idrive_sync'}, {'code': '200494', 'value': 'ipmsg'}, {'code': '200495', 'value': 'ipop'}, {'code': '200496', 'value': 'ipsharkk'}, {'code': '200497', 'value': 'palringo'}, {'code': '200498', 'value': 'paltalk'}, {'code': '200499', 'value': 'pando'}, {'code': '200500', 'value': 'panipani'}, {'code': '200501', 'value': 'pdbox'}, {'code': '200502', 'value': 'planetside2'}, {'code': '200503', 'value': 'portmap_rpc'}, {'code': '200504', 'value': 'ps4_remoteplay'}, {'code': '200505', 'value': 'psn'}, {'code': '200506', 'value': 'psn_store'}, {'code': '200507', 'value': 'punkbuster'}, {'code': '200508', 'value': 'pyzor'}, {'code': '200509', 'value': 'qcloud_ilvb'}, {'code': '200510', 'value': 'qqpcmgr'}, {'code': '200511', 'value': 'ramsey_dash'}, {'code': '200512', 'value': 'razor'}, {'code': '200513', 'value': 'rbls'}, {'code': '200514', 'value': 'realvnc'}, {'code': '200515', 'value': 'relay'}, {'code': '200516', 'value': 'revolver_nblbt'}, {'code': '200517', 'value': 'rising_storm'}, {'code': '200518', 'value': 'roblox'}, {'code': '200519', 'value': 'robocraft'}, {'code': '200520', 'value': 'rpc_scan'}, {'code': '200521', 'value': 'runescape'}, {'code': '200522', 'value': 'sanandreas'}, {'code': '200523', 'value': 'saprouter'}, {'code': '200524', 'value': 'secondlife'}, {'code': '200525', 'value': 'serialnumberd'}, {'code': '200526', 'value': 'silkroadonline'}, {'code': '200527', 'value': 'smite'}, {'code': '200528', 'value': 'snapvpn'}, {'code': '200529', 'value': 'spamfighter'}, {'code': '200530', 'value': 'speedin'}, {'code': '200531', 'value': 'speedtest'}, {'code': '200532', 'value': 'spotify_broadcast'}, {'code': '200533', 'value': 'sqlexp'}, {'code': '200534', 'value': 'starcitizen'}, {'code': '200535', 'value': 'starcraft'}, {'code': '200536', 'value': 'starleaf'}, {'code': '200537', 'value': 'steam_friends'}, {'code': '200538', 'value': 'storm_worm'}, {'code': '200539', 'value': 'stratum'}, {'code': '200540', 'value': 'supl'}, {'code': '200541', 'value': 'svn'}, {'code': '200542', 'value': 'talesrunner'}, {'code': '200543', 'value': 'tankix'}, {'code': '200544', 'value': 'telecomkey'}, {'code': '200545', 'value': 'telnet_exploit'}, {'code': '200546', 'value': 'tencent_games'}, {'code': '200547', 'value': 'tenfivecoin'}, {'code': '200548', 'value': 'tensafe'}, {'code': '200549', 'value': 'tera'}, {'code': '200550', 'value': 'tetrisonline'}, {'code': '200551', 'value': 'thq'}, {'code': '200552', 'value': 'tip'}, {'code': '200553', 'value': 'torchlight2'}, {'code': '200554', 'value': 'traceroute'}, {'code': '200555', 'value': 'trackmania'}, {'code': '200556', 'value': 'tremulous'}, {'code': '200557', 'value': 'trion'}, {'code': '200558', 'value': 'trojan_zeroaccess'}, {'code': '200559', 'value': 'twitcasting'}, {'code': '200560', 'value': 'twitch_irc'}, {'code': '200561', 'value': 'ubisoft_games'}, {'code': '200562', 'value': 'umeye'}, {'code': '200563', 'value': 'vainglory'}, {'code': '200564', 'value': 'ventrilo'}, {'code': '200565', 'value': 'vivox'}, {'code': '200566', 'value': 'vodlocker'}, {'code': '200567', 'value': 'vpnrobot'}, {'code': '200568', 'value': 'vpn_unlimited'}, {'code': '200569', 'value': 'vxworks_exploit'}, {'code': '200570', 'value': 'warthunder'}, {'code': '200571', 'value': 'weblogic'}, {'code': '200572', 'value': 'web_junk'}, {'code': '200573', 'value': 'weiqi'}, {'code': '200574', 'value': 'win_message'}, {'code': '200575', 'value': 'wizard101'}, {'code': '200576', 'value': 'wns'}, {'code': '200577', 'value': 'wolf_et'}, {'code': '200578', 'value': 'worm_22105'}, {'code': '200579', 'value': 'wuala'}, {'code': '200580', 'value': 'xfire_p2p'}, {'code': '200581', 'value': 'xiami'}, {'code': '200582', 'value': 'xunlei'}, {'code': '200583', 'value': 'xunlei_accel'}, {'code': '200584', 'value': 'xunlei_jsq'}, {'code': '200585', 'value': 'xunyou'}, {'code': '200586', 'value': 'xymon'}, {'code': '200587', 'value': 'yahoo_error'}, {'code': '200588', 'value': 'yahoo_games'}, {'code': '200589', 'value': 'yahoo_webcam'}, {'code': '200590', 'value': 'zabbix'}, {'code': '200591', 'value': 'zeroaccess'}, {'code': '200592', 'value': 'zoom'}, {'code': '200593', 'value': 'zynga'}, {'code': '200594', 'value': 'ICMP_Flood'}, {'code': '200595', 'value': 'IPFRAG_Flood'}, {'code': '200596', 'value': 'SYN_Flood'}, {'code': '200597', 'value': 'ACK_Flood'}, {'code': '200598', 'value': 'RST_Flood'}, {'code': '200599', 'value': 'DNS_Flood'}, {'code': '200600', 'value': 'NTP_Flood'}, {'code': '200601', 'value': 'UDP_Flood'}, {'code': '200602', 'value': 'HTTP_Flood'}, {'code': '200603', 'value': 'SSDP_Flood'}, {'code': '200604', 'value': 'baiduP2P'}, {'code': '200605', 'value': 'CSGlobalOffensive'}, {'code': '200606', 'value': 'AllSeeingEye'}, {'code': '200607', 'value': 'Bittorrent_Extension'}, {'code': '200608', 'value': 'BitTorrentSync'}, {'code': '200609', 'value': 'Call_of_Duty'}, {'code': '200612', 'value': 'CitrixICA'}, {'code': '200613', 'value': 'Citrix_Jedi'}, {'code': '200614', 'value': 'ClashOfClans'}, {'code': '200615', 'value': 'Canon_BJNP'}, {'code': '200617', 'value': 'DoyoP2P'}, {'code': '200618', 'value': 'FortiClientSSLVPN'}, {'code': '200619', 'value': 'GTA_SanAndreas_Multiplayer'}, {'code': '200620', 'value': 'HalfLife'}, {'code': '200621', 'value': 'IBM-DB2'}, {'code': '200622', 'value': 'Flash_Player'}, {'code': '200623', 'value': 'Kugou'}, {'code': '200624', 'value': 'LeagueOfLegends'}, {'code': '200625', 'value': 'GluptebaBackdoor'}, {'code': '200626', 'value': 'MedalOfHonor'}, {'code': '200628', 'value': 'MultiTheftAuto'}, {'code': '200631', 'value': 'NetcoreScan'}, {'code': '200632', 'value': 'NeverwinterNights'}, {'code': '200633', 'value': 'NoctionIRP'}, {'code': '200634', 'value': 'JavaObjectSerialised'}, {'code': '200635', 'value': 'RealPlayer'}, {'code': '200636', 'value': 'TeamFortress2'}, {'code': '200637', 'value': 'TheCrew'}, {'code': '200638', 'value': 'TurboVPN'}, {'code': '200639', 'value': 'MSN_Voice'}, {'code': '200640', 'value': 'MaplestoryChina'}, {'code': '200641', 'value': 'Message4U'}, {'code': '200642', 'value': 'MongoDB'}, {'code': '200643', 'value': 'NDTThroughput'}, {'code': '200644', 'value': 'NET-MFP'}, {'code': '200645', 'value': 'WindowsMessenger'}, {'code': '200646', 'value': 'WolfensteinEnemyTerritory'}, {'code': '200647', 'value': 'XboxLive'}, {'code': '200649', 'value': 'RBL'}, {'code': '200650', 'value': 'RPC_Exploit'}, {'code': '200651', 'value': 'Rejection'}, {'code': '200655', 'value': 'Silverplatter_DXP'}, {'code': '200659', 'value': 'TencentWNS'}, {'code': '200660', 'value': 'TrionGames'}, {'code': '200661', 'value': 'Trojan.Win32.Generic!SB'}, {'code': '200666', 'value': 'WorldOfWarcraft'}, {'code': '200667', 'value': 'YY'}, {'code': '200669', 'value': 'nopayload'}, {'code': '200670', 'value': 'No_FirstPkt'}, {'code': '200671', 'value': 'Invalid'}], 'visibility': 'disabled'}, 'label': 'Application ID'}, {'name': 'common_protocol_id', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'NOT SPECIFIED'}, {'code': '10000', 'value': 'NOT SPECIFIED'}, {'code': '10001', 'value': 'TCP'}, {'code': '10002', 'value': 'UDP'}, {'code': '10003', 'value': 'DNS'}, {'code': '10004', 'value': 'FTP'}, {'code': '10005', 'value': 'FTPS'}, {'code': '10006', 'value': 'GRE'}, {'code': '10007', 'value': 'HTTP'}, {'code': '10008', 'value': 'HTTPS'}, {'code': '10009', 'value': 'ICMP'}, {'code': '10010', 'value': 'IKE'}, {'code': '10011', 'value': 'IMAP'}, {'code': '10012', 'value': 'IMAPS'}, {'code': '10013', 'value': 'IPSEC'}, {'code': '10014', 'value': 'XMPP'}, {'code': '10015', 'value': 'L2TP'}, {'code': '10016', 'value': 'NTP'}, {'code': '10017', 'value': 'POP3'}, {'code': '10018', 'value': 'POP3 SSL'}, {'code': '10019', 'value': 'PPTP'}, {'code': '10020', 'value': 'Quic'}, {'code': '10021', 'value': 'SIP'}, {'code': '10022', 'value': 'smb'}, {'code': '10023', 'value': 'SMTP'}, {'code': '10024', 'value': 'SMTPS'}, {'code': '10025', 'value': 'SPDY'}, {'code': '10028', 'value': 'SSH'}, {'code': '10029', 'value': 'SSL'}, {'code': '10030', 'value': 'SOCKS'}, {'code': '10031', 'value': 'BITTORRENT'}, {'code': '10032', 'value': 'RTSP'}, {'code': '10033', 'value': 'TELNET'}, {'code': '10034', 'value': 'UTP'}, {'code': '10035', 'value': 'FASTTRACK'}, {'code': '10036', 'value': 'SKINNY'}, {'code': '10037', 'value': 'IAX'}, {'code': '10038', 'value': 'MGCP'}, {'code': '10039', 'value': 'RTCP'}, {'code': '10040', 'value': 'RTP'}, {'code': '10041', 'value': 'VNC'}, {'code': '10042', 'value': 'XDMCP'}, {'code': '10043', 'value': 'RDP'}, {'code': '10044', 'value': 'AIMINI'}, {'code': '10045', 'value': 'IPP'}, {'code': '10046', 'value': 'NFS'}, {'code': '10047', 'value': 'TFTP'}, {'code': '10048', 'value': 'BGP'}, {'code': '10049', 'value': 'DHCP'}, {'code': '10050', 'value': 'DHCPV6'}, {'code': '10051', 'value': 'FINGER'}, {'code': '10052', 'value': 'KERBEROS'}, {'code': '10053', 'value': 'LDAP'}, {'code': '10054', 'value': 'MDNS'}, {'code': '10055', 'value': 'NNTP'}, {'code': '10056', 'value': 'SNMP'}, {'code': '10057', 'value': 'SSDP'}, {'code': '10058', 'value': 'SYSLOG'}, {'code': '10059', 'value': 'WHOIS'}, {'code': '10060', 'value': 'RADIUS'}, {'code': '10061', 'value': 'OPENVPN'}, {'code': '10062', 'value': 'STUN'}, {'code': '10063', 'value': 'TEREDO'}, {'code': '10064', 'value': 'GTP'}, {'code': '10065', 'value': 'RTMP'}, {'code': '10066', 'value': 'chargen_tcp_udp'}, {'code': '10067', 'value': 'llmnr_udp'}, {'code': '10068', 'value': 'nbns_udp'}, {'code': '10069', 'value': 'NETBIOS'}, {'code': '10070', 'value': 'DirectDownloadLink'}, {'code': '10071', 'value': 'I23V5'}, {'code': '10072', 'value': 'DirectConnect'}, {'code': '10073', 'value': 'OFF'}, {'code': '10074', 'value': 'OGG'}, {'code': '10075', 'value': 'MPEG'}, {'code': '10076', 'value': 'IRC'}, {'code': '10077', 'value': 'Jabber'}, {'code': '10078', 'value': 'VRRP'}, {'code': '10079', 'value': 'IGMP'}, {'code': '10080', 'value': 'EGP'}, {'code': '10081', 'value': 'SCTP'}, {'code': '10082', 'value': 'OSPF'}, {'code': '10083', 'value': 'IP in IP'}, {'code': '10084', 'value': 'ICMPv6'}, {'code': '10085', 'value': 'DCE RPC'}, {'code': '10086', 'value': 'NetFlow_IPFIX'}, {'code': '10087', 'value': 'sFlow'}, {'code': '10088', 'value': 'HTTP Connect (SSL over HTTP)'}, {'code': '10089', 'value': 'SAP'}, {'code': '10090', 'value': 'UPnP'}, {'code': '10091', 'value': 'H323'}, {'code': '10092', 'value': 'Megaco'}, {'code': '10094', 'value': 'bacnet'}, {'code': '10096', 'value': 'bjnp'}, {'code': '10097', 'value': 'cgp'}, {'code': '10098', 'value': 'dahua'}, {'code': '10099', 'value': 'dcc'}, {'code': '10100', 'value': 'kademlia'}, {'code': '10101', 'value': 'lansync'}, {'code': '10102', 'value': 'ldap_ad'}, {'code': '10103', 'value': 'llp2p'}, {'code': '10104', 'value': 'mfnp'}, {'code': '10105', 'value': 'mp2p'}, {'code': '10106', 'value': 'msn_cache'}, {'code': '10107', 'value': 'msn_video'}, {'code': '10108', 'value': 'msnc'}, {'code': '10109', 'value': 'netflow'}, {'code': '10110', 'value': 'notes_rpc'}, {'code': '10111', 'value': 'esp'}, {'code': '10112', 'value': 'fbcdn_ssl'}, {'code': '10113', 'value': 'forticlient_sslvpn'}, {'code': '10114', 'value': 'rfb'}, {'code': '10115', 'value': 'rtmfp'}, {'code': '10117', 'value': 'slp'}, {'code': '10118', 'value': 'steam_inhomebroadcast'}, {'code': '10119', 'value': 'steam_localbroadcast'}, {'code': '10120', 'value': 'tpkt'}, {'code': '10121', 'value': 'xmpps'}, {'code': '10122', 'value': 'S7COMM'}, {'code': '10123', 'value': 'CitrixCGP'}, {'code': '10124', 'value': 'ID_Protocol'}, {'code': '10125', 'value': 'SMTP_Secure'}, {'code': '10126', 'value': 'NAT-PMP'}], 'visibility': 'disabled'}, 'label': 'Protocol ID'}, {'name': 'common_start_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'Start Time'}, {'name': 'common_end_time', 'type': 'int', 'doc': {'constraints': {'type': 'timestamp'}, 'visibility': 'hidden'}, 'label': 'End Time'}, {'name': 'common_establish_latency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Establish Latency(ms)'}, {'name': 'common_con_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Duration(ms)'}, {'name': 'common_stream_dir', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'c2s'}, {'code': '2', 'value': 's2c'}, {'code': '3', 'value': 'double'}]}, 'label': 'Stream Direction'}, {'name': 'common_address_list', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Address List'}, {'name': 'common_has_dup_traffic', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}], 'visibility': 'hidden'}, 'label': 'Duplication Traffic'}, {'name': 'common_stream_error', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Stream Error'}, {'name': 'common_stream_trace_id', 'type': 'long', 'doc': {'allow_query': 'true'}, 'label': 'Session ID'}, {'name': 'http_url', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'URL'}, {'name': 'http_host', 'type': 'string', 'doc': {'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'Host'}, {'name': 'http_domain', 'type': 'string', 'doc': {'allow_query': 'true'}, 'label': 'Domain'}, {'name': 'http_request_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Request Line'}, {'name': 'http_response_line', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Response Line'}, {'name': 'http_request_header', 'type': 'string', 'label': 'Request Headers'}, {'name': 'http_response_header', 'type': 'string', 'label': 'Response Headers'}, {'name': 'http_request_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Request Body'}, {'name': 'http_response_body', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'Response Body'}, {'name': 'http_request_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Request Body Key'}, {'name': 'http_response_body_key', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Response Body Key'}, {'name': 'http_proxy_flag', 'type': 'int', 'label': 'Proxy Flag'}, {'name': 'http_sequence', 'type': 'int', 'label': 'Sequence'}, {'name': 'http_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Http Snapshot'}, {'name': 'http_cookie', 'type': 'string', 'label': 'Cookie'}, {'name': 'http_referer', 'type': 'string', 'label': 'Referer'}, {'name': 'http_user_agent', 'type': 'string', 'label': 'User Agent'}, {'name': 'http_content_length', 'type': 'string', 'label': 'Content Length'}, {'name': 'http_content_type', 'type': 'string', 'label': 'Content Type'}, {'name': 'http_set_cookie', 'type': 'string', 'label': 'Set Cookie'}, {'name': 'http_version', 'type': 'string', 'label': 'Version'}, {'name': 'http_response_lantency_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Response Latency(ms)'}, {'name': 'http_session_duration_ms', 'type': 'int', 'doc': {'visibility': 'hidden'}, 'label': 'Session Duration(ms)'}, {'name': 'mail_protocol_type', 'type': 'string', 'label': 'Protocol Type'}, {'name': 'mail_account', 'type': 'string', 'label': 'Account'}, {'name': 'mail_from_cmd', 'type': 'string', 'label': 'From CMD'}, {'name': 'mail_to_cmd', 'type': 'string', 'label': 'To CMD'}, {'name': 'mail_from', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'From'}, {'name': 'mail_to', 'type': 'string', 'doc': {'constraints': {'type': 'email'}}, 'label': 'To'}, {'name': 'mail_cc', 'type': 'string', 'label': 'CC'}, {'name': 'mail_bcc', 'type': 'string', 'label': 'BCC'}, {'name': 'mail_subject', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_subject_charset'}}, 'label': 'Subject'}, {'name': 'mail_subject_charset', 'type': 'string', 'doc': {'visibility': 'disabled'}, 'label': 'Subject Charset'}, {'name': 'mail_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content'}, {'name': 'mail_content_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Content Charset'}, {'name': 'mail_attachment_name', 'type': 'string', 'doc': {'format': {'functions': 'decode_of_base64', 'param': 'mail_attachment_name_charset'}}, 'label': 'Attachment'}, {'name': 'mail_attachment_name_charset', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Charset'}, {'name': 'mail_attachment_content', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Attachment Content'}, {'name': 'mail_eml_file', 'type': 'string', 'doc': {'constraints': {'type': 'file'}}, 'label': 'EML File'}, {'name': 'mail_snapshot', 'type': 'string', 'doc': {'visibility': 'hidden'}, 'label': 'Snapshot'}, {'name': 'dns_message_id', 'type': 'int', 'label': 'Message ID'}, {'name': 'dns_qr', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'REESPONSE'}]}, 'label': 'QR'}, {'name': 'dns_opcode', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'QUERY'}, {'code': '1', 'value': 'IQUERY'}, {'code': '2', 'value': 'STATUS'}, {'code': '5', 'value': 'UPDATE'}]}, 'label': 'OPCODE'}, {'name': 'dns_aa', 'type': 'int', 'label': 'AA'}, {'name': 'dns_tc', 'type': 'int', 'label': 'TC'}, {'name': 'dns_rd', 'type': 'int', 'label': 'RD'}, {'name': 'dns_ra', 'type': 'int', 'label': 'RA'}, {'name': 'dns_rcode', 'type': 'int', 'label': 'RCODE'}, {'name': 'dns_qdcount', 'type': 'int', 'label': 'QDCOUNT'}, {'name': 'dns_ancount', 'type': 'int', 'label': 'ANCOUNT'}, {'name': 'dns_nscount', 'type': 'int', 'label': 'NSCOUNT'}, {'name': 'dns_arcount', 'type': 'int', 'label': 'ARCOUNT'}, {'name': 'dns_qname', 'type': 'string', 'label': 'QNAME'}, {'name': 'dns_qtype', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'A'}, {'code': '2', 'value': 'NS'}, {'code': '5', 'value': 'CNAME'}, {'code': '6', 'value': 'SOA'}, {'code': '11', 'value': 'WKS'}, {'code': '12', 'value': 'PTR'}, {'code': '13', 'value': 'HINFO'}, {'code': '11', 'value': 'WKS'}, {'code': '15', 'value': 'MX'}, {'code': '28', 'value': 'AAAA'}]}, 'label': 'QTYPE'}, {'name': 'dns_qclass', 'type': 'int', 'label': 'QCLASS'}, {'name': 'dns_cname', 'type': 'string', 'label': 'CNAME'}, {'name': 'dns_sub', 'type': 'int', 'doc': {'data': [{'code': '1', 'value': 'DNS'}, {'code': '2', 'value': 'DNSSEC'}]}, 'label': 'SUB'}, {'name': 'dns_rr', 'type': 'string', 'label': 'RR'}, {'name': 'ssl_version', 'type': 'string', 'label': 'Version'}, {'name': 'ssl_sni', 'type': 'string', 'doc': {'allow_query': 'true', 'format': {'functions': 'sub_domain', 'appendTo': 'http_domain'}}, 'label': 'SNI'}, {'name': 'ssl_san', 'type': 'string', 'label': 'SAN'}, {'name': 'ssl_cn', 'type': 'string', 'label': 'CN'}, {'name': 'ssl_pinningst', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Not Pinning'}, {'code': '1', 'value': 'Pinning'}, {'code': '2', 'value': 'Maybe Pinning'}]}, 'label': 'Pinning'}, {'name': 'ssl_intercept_state', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'Passthrough'}, {'code': '1', 'value': 'Intercept'}, {'code': '2', 'value': 'Shutdown'}]}, 'label': 'Intercept State'}, {'name': 'ssl_server_side_latency', 'type': 'int', 'label': 'Server Side Latency(ms)'}, {'name': 'ssl_client_side_latency', 'type': 'int', 'label': 'Client Side Latency(ms)'}, {'name': 'ssl_server_side_version', 'type': 'string', 'label': 'Server Side Version'}, {'name': 'ssl_client_side_version', 'type': 'string', 'label': 'Client Side Version'}, {'name': 'ssl_cert_verify', 'type': 'int', 'doc': {'data': [{'code': '0', 'value': 'No'}, {'code': '1', 'value': 'Yes'}]}, 'label': 'Certificate Verify'}, {'name': 'ssl_error', 'type': 'string', 'label': 'Error'}, {'name': 'ssl_con_latency_ms', 'type': 'int', 'doc': {'visibility': 'disabled'}, 'label': 'Connection Latency(ms)'}, {'name': 'ftp_account', 'type': 'string', 'label': 'Account'}, {'name': 'ftp_url', 'type': 'string', 'label': 'URL'}, {'name': 'ftp_content', 'type': 'string', 'label': 'Content'}, {'name': 'bgp_type', 'type': 'int', 'label': 'Type'}, {'name': 'bgp_as_num', 'type': 'string', 'label': 'AS Number'}, {'name': 'bgp_route', 'type': 'string', 'label': 'Route'}, {'name': 'voip_calling_account', 'type': 'string', 'label': 'Calling Account'}, {'name': 'voip_called_account', 'type': 'string', 'label': 'Called Account'}, {'name': 'voip_calling_number', 'type': 'string', 'label': 'Calling Number'}, {'name': 'voip_called_number', 'type': 'string', 'label': 'Called Number'}, {'name': 'streaming_media_url', 'type': 'string', 'label': 'Media URL'}, {'name': 'streaming_media_protocol', 'type': 'string', 'label': 'Media Protocol'}]}</msg>
<status status="PASS" starttime="20200401 12:24:26.486" endtime="20200401 12:24:26.488"></status>
</kw>
<kw name="Evaluate" library="BuiltIn">
<doc>Evaluates the given expression in Python and returns the results.</doc>
<arguments>
<arg>json.dumps(eval(str(${LogSchemaResponse.body['data']['fields']})))</arg>
<arg>json</arg>
</arguments>
<assign>
<var>${field}</var>
</assign>
<msg timestamp="20200401 12:24:26.514" level="INFO">${field} = [{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "com...</msg>
<status status="PASS" starttime="20200401 12:24:26.488" endtime="20200401 12:24:26.515"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${field}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.516" level="INFO">[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}]</msg>
<status status="PASS" starttime="20200401 12:24:26.515" endtime="20200401 12:24:26.516"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>30</arg>
</arguments>
<assign>
<var>${pageSize}</var>
</assign>
<msg timestamp="20200401 12:24:26.517" level="INFO">${pageSize} = 30</msg>
<status status="PASS" starttime="20200401 12:24:26.517" endtime="20200401 12:24:26.517"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>1</arg>
</arguments>
<assign>
<var>${pageNo}</var>
</assign>
<msg timestamp="20200401 12:24:26.518" level="INFO">${pageNo} = 1</msg>
<status status="PASS" starttime="20200401 12:24:26.518" endtime="20200401 12:24:26.518"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>[{"value":["${startTime}","${endTime}"],"symbol":"between","field":"common_recv_time","type":"timestamp"}]</arg>
</arguments>
<assign>
<var>${condition}</var>
</assign>
<msg timestamp="20200401 12:24:26.519" level="INFO">${condition} = [{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}]</msg>
<status status="PASS" starttime="20200401 12:24:26.518" endtime="20200401 12:24:26.519"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"pageNo":${pageNo},"pageSize":${pageSize},"logType":"${logname}","fields":${field},"start_common_recv_time":"${startTime}","end_common_recv_time":"${endTime}","conditions":${condition} ,"common_client_ips":"${client_ip}","common_policy_ids":"${policy_id}"}</arg>
</arguments>
<assign>
<var>${logCondition}</var>
</assign>
<msg timestamp="20200401 12:24:26.520" level="INFO">${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function...</msg>
<status status="PASS" starttime="20200401 12:24:26.519" endtime="20200401 12:24:26.520"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>this time query condition:${logCondition}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.521" level="INFO">this time query condition:{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:23:06","end_common_recv_time":"2020-04-01 12:24:26","conditions":[{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"79"}</msg>
<status status="PASS" starttime="20200401 12:24:26.520" endtime="20200401 12:24:26.521"></status>
</kw>
<msg timestamp="20200401 12:24:26.522" level="INFO">${logCondition} = {"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"function...</msg>
<status status="PASS" starttime="20200401 12:24:26.017" endtime="20200401 12:24:26.522"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logCondition}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.523" level="INFO">{"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:23:06","end_common_recv_time":"2020-04-01 12:24:26","conditions":[{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"79"}</msg>
<status status="PASS" starttime="20200401 12:24:26.522" endtime="20200401 12:24:26.523"></status>
</kw>
<kw name="PostRemoteData" library="LogSchema">
<arguments>
<arg>/log/list</arg>
<arg>${logCondition}</arg>
</arguments>
<assign>
<var>${LogListResponse}</var>
</assign>
<kw name="Create Dictionary" library="BuiltIn">
<doc>Creates and returns a dictionary based on the given ``items``.</doc>
<arguments>
<arg>Content-Type=application/json</arg>
<arg>Authorization=${token}</arg>
</arguments>
<assign>
<var>${header}</var>
</assign>
<msg timestamp="20200401 12:24:26.524" level="INFO">${header} = {'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}</msg>
<status status="PASS" starttime="20200401 12:24:26.524" endtime="20200401 12:24:26.525"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}/${version}</arg>
<arg>headers=${header}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.525" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080/v1, headers={'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:24:26.525" endtime="20200401 12:24:26.526"></status>
</kw>
<kw name="Post Request" library="RequestsLibrary">
<doc>Send a POST request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${url}</arg>
<arg>data=${data}</arg>
<arg>headers=${header}</arg>
</arguments>
<assign>
<var>${remoteResponse}</var>
</assign>
<msg timestamp="20200401 12:24:26.528" level="INFO">POST Request using : uri=/log/list, params=None, files=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Content-Type': 'application/json', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;'}
data={"pageNo":1,"pageSize":30,"logType":"security_event_log","fields":[{"name": "common_recv_time", "type": "int", "doc": {"allow_query": "true", "constraints": {"type": "timestamp"}, "format": {"functions": "current_timestamp"}}, "label": "Receive Time"}, {"name": "common_log_id", "type": "long", "doc": {"allow_query": "true", "format": {"functions": "snowflake_id"}}, "label": "Log ID"}, {"name": "common_policy_id", "type": "int", "doc": {"allow_query": "true"}, "label": "Policy ID"}, {"name": "common_subscriber_id", "type": "string", "doc": {"allow_query": "true"}, "label": "Subscriber ID"}, {"name": "common_client_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_detail,geo_asn,radius_match", "appendTo": "common_client_location,common_client_asn,common_subscriber_id"}}, "label": "Client IP"}, {"name": "common_client_port", "type": "int", "label": "Client Port"}, {"name": "common_l4_protocol", "type": "string", "label": "L4 Protocol"}, {"name": "common_address_type", "type": "int", "doc": {"data": [{"code": "4", "value": "ipv4"}, {"code": "6", "value": "ipv6"}]}, "label": "Address Type"}, {"name": "common_server_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}, "format": {"functions": "geo_ip_country,geo_asn", "appendTo": "common_server_location,common_server_asn"}}, "label": "Server IP"}, {"name": "common_server_port", "type": "int", "doc": {"allow_query": "true"}, "label": "Server Port"}, {"name": "common_action", "type": "int", "doc": {"allow_query": "true", "data": [{"code": "0", "value": "None"}, {"code": "1", "value": "Monitor"}, {"code": "2", "value": "Intercept"}, {"code": "16", "value": "Deny"}, {"code": "48", "value": "Manipulation"}, {"code": "128", "value": "Allow"}]}, "label": "Action"}, {"name": "common_direction", "type": "int", "doc": {"data": [{"code": "0", "value": "outbound"}, {"code": "1", "value": "inbound"}]}, "label": "Direction"}, {"name": "common_entrance_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Entrance ID"}, {"name": "common_sled_ip", "type": "string", "doc": {"allow_query": "true", "constraints": {"type": "ip"}}, "label": "Sled IP"}, {"name": "common_client_location", "type": "string", "label": "Client Location"}, {"name": "common_client_asn", "type": "string", "label": "Client ASN"}, {"name": "common_server_location", "type": "string", "label": "Server Location"}, {"name": "common_server_asn", "type": "string", "label": "Server ASN"}, {"name": "common_c2s_pkt_num", "type": "int", "label": "Packets Sent"}, {"name": "common_s2c_pkt_num", "type": "int", "label": "Packets Received"}, {"name": "common_c2s_byte_num", "type": "int", "label": "Bytes Sent"}, {"name": "common_s2c_byte_num", "type": "int", "label": "Bytes Received"}, {"name": "common_service", "type": "int", "doc": {"visibility": "disabled"}, "label": "Service"}, {"name": "common_schema_type", "type": "string", "doc": {"data": [{"code": "BASE", "value": "BASE"}, {"code": "HTTP", "value": "HTTP"}, {"code": "MAIL", "value": "MAIL"}, {"code": "DNS", "value": "DNS"}, {"code": "SSL", "value": "SSL"}, {"code": "FTP", "value": "FTP"}, {"code": "BGP", "value": "BGP"}, {"code": "VOIP", "value": "VOIP"}, {"code": "RADIUS", "value": "RADIUS"}], "allow_query": "true"}, "label": "Schema Type"}, {"name": "common_user_tags", "type": "string", "doc": {"visibility": "disabled"}, "label": "User Tags"}, {"name": "common_sub_action", "type": "string", "doc": {"visibility": "hidden"}, "label": "Sub Action"}, {"name": "common_user_region", "type": "string", "doc": {"visibility": "hidden"}, "label": "User Region"}, {"name": "common_device_id", "type": "string", "doc": {"visibility": "disabled"}, "label": "Device ID"}, {"name": "common_link_id", "type": "int", "doc": {"visibility": "disabled"}, "label": "Link ID"}, {"name": "common_isp", "type": "string", "doc": {"visibility": "disabled"}, "label": "ISP"}, {"name": "common_encapsulation", "type": "int", "doc": {"data": [{"code": "0", "value": "Ethernet"}, {"code": "8", "value": "PPP"}, {"code": "12", "value": "CiscoHDLC"}]}, "label": "Encapsulation"}, {"name": "common_app_label", "type": "string", "doc": {"visibility": "disabled"}, "label": "Application Label"}, {"name": "common_app_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "100001", "value": "Skype"}, {"code": "100101", "value": "Instagram"}, {"code": "100201", "value": "Youtube"}, {"code": "100301", "value": "Facebook"}, {"code": "100401", "value": "What\u2018s App"}, {"code": "100501", "value": "Periscope"}, {"code": "100601", "value": "Viber"}, {"code": "100701", "value": "Twitter"}, {"code": "100801", "value": "Vkontakte"}, {"code": "100901", "value": "Telegram"}, {"code": "101001", "value": "Odnoklassniki"}, {"code": "101101", "value": "Mail agent"}, {"code": "101201", "value": "FaceTime"}, {"code": "101301", "value": "Snapchat"}, {"code": "101401", "value": "Google"}, {"code": "101501", "value": "Yandex"}, {"code": "101601", "value": "Yandex Browser Turbo"}, {"code": "101701", "value": "Opera"}, {"code": "101702", "value": "Opera Turbo"}, {"code": "101703", "value": "Opera mini"}, {"code": "101801", "value": "AppStore"}, {"code": "101901", "value": "PlayMarket"}, {"code": "102001", "value": "Drugvokrug social networking"}, {"code": "102101", "value": "Badoo social networking"}, {"code": "102201", "value": "WeChat"}, {"code": "102301", "value": "Zello"}, {"code": "102401", "value": "Freegate"}, {"code": "102501", "value": "Psiphon"}, {"code": "102601", "value": "TOR"}, {"code": "102602", "value": "Tor browser"}, {"code": "102603", "value": "Tor mode"}, {"code": "102701", "value": "Orbot"}, {"code": "102801", "value": "Tunnel Bear VPN"}, {"code": "102901", "value": "HotSpot Shield VPN"}, {"code": "103001", "value": "VPN Master"}, {"code": "103101", "value": "Hola VPN"}, {"code": "103201", "value": "HideMyAss VPN"}, {"code": "103301", "value": "Zenmate VPN"}, {"code": "103401", "value": "SignalPrivateMessenger"}, {"code": "200001", "value": "RFA"}, {"code": "200002", "value": "VOA"}, {"code": "200003", "value": "lantern"}, {"code": "200004", "value": "Line"}, {"code": "200005", "value": "voxer"}, {"code": "200006", "value": "ZeroNet"}, {"code": "200007", "value": "Zalo"}, {"code": "200008", "value": "free_browser"}, {"code": "200009", "value": "Diaspora"}, {"code": "200010", "value": "browsec"}, {"code": "200011", "value": "Chrome_plugin_chuguo"}, {"code": "200012", "value": "GoGo_SocksHttp"}, {"code": "200013", "value": "ultrasurf_chrome"}, {"code": "200014", "value": "pinterest"}, {"code": "200015", "value": "Swisscom"}, {"code": "200016", "value": "Threema"}, {"code": "200017", "value": "Circuit_iOS"}, {"code": "200018", "value": "Chrome_plugin_FastsTunnel"}, {"code": "200019", "value": "OoVoo"}, {"code": "200020", "value": "Vine"}, {"code": "200021", "value": "Keek"}, {"code": "200022", "value": "Hi"}, {"code": "200023", "value": "HeyTell"}, {"code": "200024", "value": "HikeMessenger"}, {"code": "200025", "value": "Nonoh"}, {"code": "200026", "value": "Path"}, {"code": "200027", "value": "Kik"}, {"code": "200028", "value": "BBM"}, {"code": "200029", "value": "Talkray"}, {"code": "200030", "value": "HelloTalk"}, {"code": "200031", "value": "Skout"}, {"code": "200032", "value": "MeetMe"}, {"code": "200033", "value": "Nextdoor"}, {"code": "200034", "value": "Shots"}, {"code": "200035", "value": "Zoosk"}, {"code": "200036", "value": "TextPlus"}, {"code": "200037", "value": "Maaii"}, {"code": "200038", "value": "Ustream"}, {"code": "200039", "value": "Yikyak"}, {"code": "200040", "value": "chatsecure"}, {"code": "200041", "value": "freecalls"}, {"code": "200042", "value": "SignalPrivateMessenger"}, {"code": "200043", "value": "USGOV_CIA"}, {"code": "200044", "value": "USGOV_FBI"}, {"code": "200045", "value": "USGOV_DHS"}, {"code": "200046", "value": "shenxun_Secure_Call_android"}, {"code": "200047", "value": "shenxun_Secure_Call_web"}, {"code": "200048", "value": "UProxy"}, {"code": "200049", "value": "soma"}, {"code": "200050", "value": "PlayerUnknown's_Battlegrounds"}, {"code": "200051", "value": "STEAM"}, {"code": "200052", "value": "dalai_lama"}, {"code": "200053", "value": "Steam_forum"}, {"code": "200054", "value": "Microsoft Online Certificate"}, {"code": "200055", "value": "sogou_spider"}, {"code": "200056", "value": "baidu_mobie"}, {"code": "200057", "value": "Apple Push Service"}, {"code": "200058", "value": "IQIYI"}, {"code": "200059", "value": "baidu_spider"}, {"code": "200060", "value": "Weibo"}, {"code": "200061", "value": "Apple captive service"}, {"code": "200062", "value": "Microsoft wns"}, {"code": "200063", "value": "360_safe_pc"}, {"code": "200064", "value": "Sogou Public Service"}, {"code": "200065", "value": "Lenovo app_POST service"}, {"code": "200066", "value": "Apple securityd service"}, {"code": "200067", "value": "Weather pass"}, {"code": "200068", "value": "Apple Service Pack"}, {"code": "200069", "value": "Fast pressure"}, {"code": "200070", "value": "SemrushBot"}, {"code": "200071", "value": "Adrefs_spider"}, {"code": "200072", "value": "AndroidDownloadManager"}, {"code": "200073", "value": "XenderTop"}, {"code": "200074", "value": "microsoft_update"}, {"code": "200075", "value": "Youku"}, {"code": "200076", "value": "Google_spider"}, {"code": "200077", "value": "Microsoft User Experience and Telemetry Components"}, {"code": "200078", "value": "MICROSOFT_DEVICE_METADATA_RETRIEVAL_CLIENT"}, {"code": "200079", "value": "Microsoft ncsi"}, {"code": "200080", "value": "Microsoft Privacy Collection Service"}, {"code": "200081", "value": "uTorrent"}, {"code": "200082", "value": "Edge"}, {"code": "200083", "value": "Lenovo Music Store"}, {"code": "200084", "value": "LieBao"}, {"code": "200085", "value": "majesti_spider"}, {"code": "200086", "value": "DotBot"}, {"code": "200087", "value": "Millet Update"}, {"code": "200088", "value": "Today\u2019s headlines"}, {"code": "200089", "value": "Microsoft live"}, {"code": "200090", "value": "Microsoft OneNote"}, {"code": "200091", "value": "Bing_spider"}, {"code": "200092", "value": "Apple location service"}, {"code": "200093", "value": "Kuaishou"}, {"code": "200094", "value": "LeTV video"}, {"code": "200095", "value": "QQ"}, {"code": "200096", "value": "Wps"}, {"code": "200097", "value": "kugou music"}, {"code": "200098", "value": "kuwo music"}, {"code": "200099", "value": "360_common_service"}, {"code": "200100", "value": "Camera360"}, {"code": "200101", "value": "Outlook"}, {"code": "200102", "value": "zhihu"}, {"code": "200103", "value": "Tencent video"}, {"code": "200104", "value": "funshion"}, {"code": "200105", "value": "QQ shared service"}, {"code": "200106", "value": "Microsoft wdcp service"}, {"code": "200107", "value": "Microsoft Media_center_pc"}, {"code": "200108", "value": "360 phone helper"}, {"code": "200109", "value": "Kingsoft Public Service"}, {"code": "200110", "value": "Ios_wifi connection"}, {"code": "200111", "value": "Teamviewer"}, {"code": "200112", "value": "Baidu cloud disk"}, {"code": "200113", "value": "Tencent News"}, {"code": "200114", "value": "Baidu map"}, {"code": "200115", "value": "Panda TV"}, {"code": "200116", "value": "Thunder"}, {"code": "200117", "value": "NetEase cloud music"}, {"code": "200118", "value": "QQ music"}, {"code": "200119", "value": "Itools"}, {"code": "200120", "value": "Jingdong Finance"}, {"code": "200121", "value": "PycURL"}, {"code": "200122", "value": "Yahoo_Spider"}, {"code": "200123", "value": "Himalayan FM"}, {"code": "200124", "value": "Youdao_dict"}, {"code": "200125", "value": "Microsoft_spynet"}, {"code": "200126", "value": "proximicBot"}, {"code": "200127", "value": "Foxit_reader"}, {"code": "200128", "value": "Sohu Video"}, {"code": "200129", "value": "BlueStacks"}, {"code": "200130", "value": "Beauty group"}, {"code": "200131", "value": "Kmplayer"}, {"code": "200132", "value": "TaoBao"}, {"code": "200133", "value": "Exabot"}, {"code": "200134", "value": "Ubuntu_apt_get"}, {"code": "200135", "value": "Oriental Fortune"}, {"code": "200136", "value": "JikeSpider"}, {"code": "200137", "value": "Itunesstored"}, {"code": "200138", "value": "GAD map"}, {"code": "200139", "value": "ifeng News"}, {"code": "200140", "value": "BoardReaderBot"}, {"code": "200141", "value": "AmazonBot"}, {"code": "200142", "value": "Alipay"}, {"code": "200143", "value": "Alipay security controls"}, {"code": "200144", "value": "360 security guards (antivirus)"}, {"code": "200145", "value": "360 logon service"}, {"code": "200146", "value": "BLP_bbot"}, {"code": "200147", "value": "Keep"}, {"code": "200148", "value": "WiFi universal key"}, {"code": "200149", "value": "Baidu Music"}, {"code": "200150", "value": "Vip.com"}, {"code": "200151", "value": "JD.COM"}, {"code": "200152", "value": "sina"}, {"code": "200153", "value": "youdao Public service"}, {"code": "200154", "value": "Jinshan public service"}, {"code": "200155", "value": "Baidu guard"}, {"code": "200156", "value": "Apple system update service"}, {"code": "200157", "value": "momo"}, {"code": "200158", "value": "CNZZ statistics"}, {"code": "200159", "value": "Microsoft one_drive service"}, {"code": "200160", "value": "WindowsStore"}, {"code": "200161", "value": "duba"}, {"code": "200162", "value": "Baidu HD"}, {"code": "200163", "value": "qunar"}, {"code": "200164", "value": "qianxunyingshi"}, {"code": "200165", "value": "KuaiyanKanShuSpider"}, {"code": "200166", "value": "Mail.RU_Bot_Robot"}, {"code": "200167", "value": "MpCommunication"}, {"code": "200168", "value": "Weather forecast"}, {"code": "200169", "value": "Ltx71_spider"}, {"code": "200170", "value": "Ia_archiver"}, {"code": "200171", "value": "Ali Wangwang"}, {"code": "200172", "value": "UC home page (information)"}, {"code": "200173", "value": "Yeti"}, {"code": "200174", "value": "Rtorrent"}, {"code": "200175", "value": "QQPim"}, {"code": "200176", "value": "NetEase News"}, {"code": "200177", "value": "sina sports"}, {"code": "200178", "value": "Exchange of foreign exchange"}, {"code": "200179", "value": "BlueStacks update"}, {"code": "200180", "value": "youdao"}, {"code": "200181", "value": "QQ computer housekeeper"}, {"code": "200182", "value": "UltraEdit"}, {"code": "200183", "value": "EasouSpider"}, {"code": "200184", "value": "QQ Zone"}, {"code": "200185", "value": "Foxmail"}, {"code": "200186", "value": "Pingdom.com"}, {"code": "200187", "value": "Sina Finance"}, {"code": "200188", "value": "QQ one key login"}, {"code": "200189", "value": "Norton"}, {"code": "200190", "value": "Baidu waimai"}, {"code": "200191", "value": "YaCy"}, {"code": "200192", "value": "Haitong e Haitong"}, {"code": "200193", "value": "AdsBot-Google"}, {"code": "200194", "value": "Guangfa Yijin"}, {"code": "200195", "value": "Ali security program"}, {"code": "200196", "value": "Cliqzbot"}, {"code": "200197", "value": "Mobike"}, {"code": "200198", "value": "Kingsoft PowerWord"}, {"code": "200199", "value": "meishij"}, {"code": "200200", "value": "CCB mobile bank"}, {"code": "200201", "value": "Mega SkyDrive"}, {"code": "200202", "value": "douyu"}, {"code": "200203", "value": "Flamingo_SearchEngine"}, {"code": "200204", "value": "Lenovo shop"}, {"code": "200205", "value": "Uc news"}, {"code": "200206", "value": "Volcano small video"}, {"code": "200207", "value": "Meitu Xiu Xiu"}, {"code": "200208", "value": "Kaspersky"}, {"code": "200209", "value": "AcFun"}, {"code": "200210", "value": "Slackbot"}, {"code": "200211", "value": "Snowball"}, {"code": "200212", "value": "SafeDNSBot"}, {"code": "200213", "value": "Great wisdom"}, {"code": "200214", "value": "Mailbox of NetEase"}, {"code": "200215", "value": "peasecod"}, {"code": "200216", "value": "Gold ten data"}, {"code": "200217", "value": "Linkdexbot"}, {"code": "200218", "value": "Sina blog"}, {"code": "200219", "value": "Ginger"}, {"code": "200220", "value": "Microsoft activation verification"}, {"code": "200221", "value": "Facebot"}, {"code": "200222", "value": "Dangdang"}, {"code": "200223", "value": "QQ cyclone"}, {"code": "200224", "value": "Wp_feedbot"}, {"code": "200225", "value": "ICBC"}, {"code": "200226", "value": "Public service"}, {"code": "200227", "value": "Magpie-crawler"}, {"code": "200228", "value": "xianyu"}, {"code": "200229", "value": "GetIntentBot"}, {"code": "200230", "value": "Papers"}, {"code": "200231", "value": "NewsGator"}, {"code": "200232", "value": "RankFlexBot"}, {"code": "200233", "value": "rogerbot"}, {"code": "200234", "value": "SurdotlyBot"}, {"code": "200235", "value": "CheckMarkNetworkBot"}, {"code": "200236", "value": "pyspider"}, {"code": "200237", "value": "spbot"}, {"code": "200238", "value": "Huaxia Bank"}, {"code": "200239", "value": "glory of king"}, {"code": "200240", "value": "msnbot-Products"}, {"code": "200241", "value": "archive.org"}, {"code": "200242", "value": "applebot"}, {"code": "200243", "value": "alicall"}, {"code": "200244", "value": "Superfeedrbot"}, {"code": "200245", "value": "QQ mailbox"}, {"code": "200246", "value": "coccocbot-webBot"}, {"code": "200247", "value": "dingtalk"}, {"code": "200248", "value": "Dragonbot"}, {"code": "200249", "value": "Mediatoolkitbot"}, {"code": "200250", "value": "bitcomet"}, {"code": "200251", "value": "filetopia"}, {"code": "200252", "value": "flashget"}, {"code": "200253", "value": "oracle"}, {"code": "200254", "value": "yyvoice"}, {"code": "200255", "value": "imesh"}, {"code": "200256", "value": "citrix"}, {"code": "200257", "value": "corba"}, {"code": "200258", "value": "dameware"}, {"code": "200259", "value": "pcanywhere"}, {"code": "200260", "value": "qq_rdp"}, {"code": "200261", "value": "poco"}, {"code": "200262", "value": "qqdownload"}, {"code": "200263", "value": "applejuice"}, {"code": "200264", "value": "stealthnet"}, {"code": "200265", "value": "winmx"}, {"code": "200266", "value": "emule"}, {"code": "200267", "value": "emule_decrypt"}, {"code": "200268", "value": "qvod"}, {"code": "200269", "value": "mysql"}, {"code": "200270", "value": "icecast"}, {"code": "200271", "value": "mms"}, {"code": "200272", "value": "pplive"}, {"code": "200273", "value": "ppstream"}, {"code": "200274", "value": "sopcast"}, {"code": "200275", "value": "tvants"}, {"code": "200276", "value": "sohutv"}, {"code": "200277", "value": "iku"}, {"code": "200278", "value": "qqlive"}, {"code": "200279", "value": "rsync"}, {"code": "200280", "value": "xunyou_speedup"}, {"code": "200281", "value": "msn"}, {"code": "200282", "value": "popo"}, {"code": "200283", "value": "sinauc"}, {"code": "200284", "value": "qqbattle"}, {"code": "200285", "value": "quake"}, {"code": "200286", "value": "xbox"}, {"code": "200287", "value": "wow"}, {"code": "200288", "value": "lol"}, {"code": "200289", "value": "PostgreSQL"}, {"code": "200290", "value": "TDS"}, {"code": "200291", "value": "VMware"}, {"code": "200292", "value": "Kontiki"}, {"code": "200293", "value": "OpenFT"}, {"code": "200294", "value": "Gnutella"}, {"code": "200295", "value": "eDonkey"}, {"code": "200296", "value": "AVI"}, {"code": "200297", "value": "RealMedia"}, {"code": "200298", "value": "Windowsmedia"}, {"code": "200299", "value": "MOVE"}, {"code": "200300", "value": "Feidian"}, {"code": "200301", "value": "Zattoo"}, {"code": "200302", "value": "SHOUTCast"}, {"code": "200303", "value": "TVUplayer"}, {"code": "200304", "value": "VeohTV"}, {"code": "200305", "value": "Soulseek"}, {"code": "200306", "value": "GaduGadu"}, {"code": "200307", "value": "Oscar"}, {"code": "200308", "value": "Yahoo"}, {"code": "200309", "value": "Battlefield"}, {"code": "200310", "value": "Halflife2"}, {"code": "200311", "value": "World of Warcraft"}, {"code": "200312", "value": "USENET"}, {"code": "200313", "value": "AFP"}, {"code": "200314", "value": "Truphone"}, {"code": "200315", "value": "Armagetron"}, {"code": "200316", "value": "CrossFire"}, {"code": "200317", "value": "Dofus"}, {"code": "200318", "value": "Fiesta"}, {"code": "200319", "value": "Florensia"}, {"code": "200320", "value": "Guildwars"}, {"code": "200321", "value": "HTTP Application Activesync"}, {"code": "200322", "value": "MapleStory"}, {"code": "200323", "value": "msSQL"}, {"code": "200324", "value": "WARCRAFT3"}, {"code": "200325", "value": "World of Kung Fu"}, {"code": "200326", "value": "MEEBO"}, {"code": "200327", "value": "DropBox"}, {"code": "200328", "value": "HTTP Proxy"}, {"code": "200329", "value": "Netflix"}, {"code": "200330", "value": "CitrixOnline/GotoMeeting"}, {"code": "200331", "value": "Webex"}, {"code": "200332", "value": "Apple iCloud"}, {"code": "200333", "value": "Apple iTunes"}, {"code": "200334", "value": "WindowsUpdate"}, {"code": "200335", "value": "Tuenti"}, {"code": "200336", "value": "LotusNotes"}, {"code": "200337", "value": "RemoteScan"}, {"code": "200338", "value": "Spotify"}, {"code": "200339", "value": "CiscoVPN"}, {"code": "200340", "value": "TeamSpeak"}, {"code": "200341", "value": "UbuntuONE"}, {"code": "200342", "value": "CNN"}, {"code": "200343", "value": "Wikipedia"}, {"code": "200344", "value": "Collectd"}, {"code": "200345", "value": "Redis"}, {"code": "200346", "value": "ZeroMQ"}, {"code": "200347", "value": "Stracraft"}, {"code": "200348", "value": "Simet"}, {"code": "200349", "value": "OpenSignal"}, {"code": "200350", "value": "99Taxi"}, {"code": "200351", "value": "GloboTV"}, {"code": "200352", "value": "Deezer"}, {"code": "200353", "value": "Microsoft cloud services"}, {"code": "200354", "value": "Twitch"}, {"code": "200355", "value": "KakaoTalk Voice and Chat"}, {"code": "200357", "value": "360.cn"}, {"code": "200358", "value": "360Safeguard_P2P"}, {"code": "200359", "value": "4D"}, {"code": "200360", "value": "acercloud"}, {"code": "200361", "value": "acestream"}, {"code": "200362", "value": "airdroid"}, {"code": "200363", "value": "airmedia"}, {"code": "200364", "value": "akamai"}, {"code": "200365", "value": "akamai_transfer"}, {"code": "200366", "value": "amanda"}, {"code": "200367", "value": "amp"}, {"code": "200368", "value": "Appear.in"}, {"code": "200369", "value": "ares"}, {"code": "200370", "value": "ARKSurvivalEvolved"}, {"code": "200371", "value": "ARMA3Server"}, {"code": "200372", "value": "ARMA2Server"}, {"code": "200373", "value": "AvastSecureDNS"}, {"code": "200374", "value": "azureus"}, {"code": "200375", "value": "backweb"}, {"code": "200376", "value": "BadBaidu"}, {"code": "200377", "value": "baofeng"}, {"code": "200378", "value": "bitext"}, {"code": "200379", "value": "BlackDesertOnline"}, {"code": "200380", "value": "Blizzard"}, {"code": "200381", "value": "bmdp"}, {"code": "200382", "value": "bncs"}, {"code": "200383", "value": "btdht"}, {"code": "200384", "value": "btsync"}, {"code": "200385", "value": "cacaoweb"}, {"code": "200386", "value": "chatango"}, {"code": "200387", "value": "chivalry"}, {"code": "200388", "value": "cirn"}, {"code": "200389", "value": "cisco_sslvpn"}, {"code": "200390", "value": "clash_of_clans"}, {"code": "200391", "value": "Clubbox"}, {"code": "200392", "value": "cod"}, {"code": "200393", "value": "cod_waw"}, {"code": "200394", "value": "combatarms"}, {"code": "200395", "value": "combatarms_p2p"}, {"code": "200396", "value": "ConquerOnline"}, {"code": "200397", "value": "Counterstrike1.6"}, {"code": "200398", "value": "Checkpoint_RDP"}, {"code": "200399", "value": "crashplan"}, {"code": "200400", "value": "crossout"}, {"code": "200401", "value": "cryptic"}, {"code": "200402", "value": "cvs"}, {"code": "200403", "value": "dash"}, {"code": "200404", "value": "dc"}, {"code": "200405", "value": "db2"}, {"code": "200406", "value": "dell_backup"}, {"code": "200407", "value": "Demonware"}, {"code": "200408", "value": "destiny"}, {"code": "200409", "value": "diablo2"}, {"code": "200410", "value": "isakmp"}, {"code": "200411", "value": "jedi"}, {"code": "200412", "value": "jedi_academy"}, {"code": "200413", "value": "jx3online"}, {"code": "200414", "value": "kankan"}, {"code": "200415", "value": "kaseya"}, {"code": "200416", "value": "kazaa"}, {"code": "200417", "value": "kuaibo"}, {"code": "200418", "value": "lifeforge"}, {"code": "200419", "value": "linkproof"}, {"code": "200420", "value": "litecoin"}, {"code": "200421", "value": "maxicloud"}, {"code": "200422", "value": "merakicloud"}, {"code": "200423", "value": "minecraft"}, {"code": "200424", "value": "mongo"}, {"code": "200425", "value": "msoffice_mac"}, {"code": "200426", "value": "munin"}, {"code": "200427", "value": "mzinga"}, {"code": "200428", "value": "n2ping"}, {"code": "200429", "value": "ncsoft"}, {"code": "200430", "value": "netcat_cctv"}, {"code": "200431", "value": "neverwinter"}, {"code": "200432", "value": "newerth"}, {"code": "200433", "value": "nintendo"}, {"code": "200434", "value": "nntps"}, {"code": "200435", "value": "noction"}, {"code": "200436", "value": "noe"}, {"code": "200437", "value": "norton_backup"}, {"code": "200438", "value": "omegle"}, {"code": "200439", "value": "opaserv"}, {"code": "200440", "value": "orbit"}, {"code": "200441", "value": "ourworld"}, {"code": "200442", "value": "overwatch"}, {"code": "200443", "value": "diablo3"}, {"code": "200444", "value": "dianping"}, {"code": "200445", "value": "dianshijia"}, {"code": "200446", "value": "discord"}, {"code": "200447", "value": "dogecoin"}, {"code": "200448", "value": "dota2"}, {"code": "200449", "value": "douyu_chat"}, {"code": "200450", "value": "doyo"}, {"code": "200451", "value": "driveshare"}, {"code": "200452", "value": "dtls"}, {"code": "200453", "value": "dueling_network"}, {"code": "200454", "value": "dvrns"}, {"code": "200455", "value": "dxp"}, {"code": "200456", "value": "ea_games"}, {"code": "200457", "value": "epson"}, {"code": "200458", "value": "eso"}, {"code": "200459", "value": "etrust"}, {"code": "200460", "value": "fasp"}, {"code": "200461", "value": "finalfantasy_xiv"}, {"code": "200462", "value": "flash"}, {"code": "200463", "value": "fliggy"}, {"code": "200464", "value": "fortinet"}, {"code": "200465", "value": "foscam"}, {"code": "200466", "value": "freechal"}, {"code": "200467", "value": "fring"}, {"code": "200468", "value": "fuckcoin"}, {"code": "200469", "value": "gamespy"}, {"code": "200470", "value": "gangsofspace"}, {"code": "200471", "value": "garena"}, {"code": "200472", "value": "gearsofwar"}, {"code": "200473", "value": "giop"}, {"code": "200474", "value": "git"}, {"code": "200475", "value": "glupteba"}, {"code": "200476", "value": "gnutella2"}, {"code": "200477", "value": "gokuchat"}, {"code": "200478", "value": "google_hangouts"}, {"code": "200479", "value": "gotomeeting"}, {"code": "200480", "value": "gprs_tunnel"}, {"code": "200481", "value": "graal_online_era"}, {"code": "200482", "value": "gsm"}, {"code": "200483", "value": "h1z1"}, {"code": "200484", "value": "halo_online"}, {"code": "200485", "value": "hamachi"}, {"code": "200486", "value": "harveys"}, {"code": "200487", "value": "hearthstone"}, {"code": "200488", "value": "heroes_generals"}, {"code": "200489", "value": "hots"}, {"code": "200490", "value": "icp"}, {"code": "200491", "value": "icq"}, {"code": "200492", "value": "id"}, {"code": "200493", "value": "idrive_sync"}, {"code": "200494", "value": "ipmsg"}, {"code": "200495", "value": "ipop"}, {"code": "200496", "value": "ipsharkk"}, {"code": "200497", "value": "palringo"}, {"code": "200498", "value": "paltalk"}, {"code": "200499", "value": "pando"}, {"code": "200500", "value": "panipani"}, {"code": "200501", "value": "pdbox"}, {"code": "200502", "value": "planetside2"}, {"code": "200503", "value": "portmap_rpc"}, {"code": "200504", "value": "ps4_remoteplay"}, {"code": "200505", "value": "psn"}, {"code": "200506", "value": "psn_store"}, {"code": "200507", "value": "punkbuster"}, {"code": "200508", "value": "pyzor"}, {"code": "200509", "value": "qcloud_ilvb"}, {"code": "200510", "value": "qqpcmgr"}, {"code": "200511", "value": "ramsey_dash"}, {"code": "200512", "value": "razor"}, {"code": "200513", "value": "rbls"}, {"code": "200514", "value": "realvnc"}, {"code": "200515", "value": "relay"}, {"code": "200516", "value": "revolver_nblbt"}, {"code": "200517", "value": "rising_storm"}, {"code": "200518", "value": "roblox"}, {"code": "200519", "value": "robocraft"}, {"code": "200520", "value": "rpc_scan"}, {"code": "200521", "value": "runescape"}, {"code": "200522", "value": "sanandreas"}, {"code": "200523", "value": "saprouter"}, {"code": "200524", "value": "secondlife"}, {"code": "200525", "value": "serialnumberd"}, {"code": "200526", "value": "silkroadonline"}, {"code": "200527", "value": "smite"}, {"code": "200528", "value": "snapvpn"}, {"code": "200529", "value": "spamfighter"}, {"code": "200530", "value": "speedin"}, {"code": "200531", "value": "speedtest"}, {"code": "200532", "value": "spotify_broadcast"}, {"code": "200533", "value": "sqlexp"}, {"code": "200534", "value": "starcitizen"}, {"code": "200535", "value": "starcraft"}, {"code": "200536", "value": "starleaf"}, {"code": "200537", "value": "steam_friends"}, {"code": "200538", "value": "storm_worm"}, {"code": "200539", "value": "stratum"}, {"code": "200540", "value": "supl"}, {"code": "200541", "value": "svn"}, {"code": "200542", "value": "talesrunner"}, {"code": "200543", "value": "tankix"}, {"code": "200544", "value": "telecomkey"}, {"code": "200545", "value": "telnet_exploit"}, {"code": "200546", "value": "tencent_games"}, {"code": "200547", "value": "tenfivecoin"}, {"code": "200548", "value": "tensafe"}, {"code": "200549", "value": "tera"}, {"code": "200550", "value": "tetrisonline"}, {"code": "200551", "value": "thq"}, {"code": "200552", "value": "tip"}, {"code": "200553", "value": "torchlight2"}, {"code": "200554", "value": "traceroute"}, {"code": "200555", "value": "trackmania"}, {"code": "200556", "value": "tremulous"}, {"code": "200557", "value": "trion"}, {"code": "200558", "value": "trojan_zeroaccess"}, {"code": "200559", "value": "twitcasting"}, {"code": "200560", "value": "twitch_irc"}, {"code": "200561", "value": "ubisoft_games"}, {"code": "200562", "value": "umeye"}, {"code": "200563", "value": "vainglory"}, {"code": "200564", "value": "ventrilo"}, {"code": "200565", "value": "vivox"}, {"code": "200566", "value": "vodlocker"}, {"code": "200567", "value": "vpnrobot"}, {"code": "200568", "value": "vpn_unlimited"}, {"code": "200569", "value": "vxworks_exploit"}, {"code": "200570", "value": "warthunder"}, {"code": "200571", "value": "weblogic"}, {"code": "200572", "value": "web_junk"}, {"code": "200573", "value": "weiqi"}, {"code": "200574", "value": "win_message"}, {"code": "200575", "value": "wizard101"}, {"code": "200576", "value": "wns"}, {"code": "200577", "value": "wolf_et"}, {"code": "200578", "value": "worm_22105"}, {"code": "200579", "value": "wuala"}, {"code": "200580", "value": "xfire_p2p"}, {"code": "200581", "value": "xiami"}, {"code": "200582", "value": "xunlei"}, {"code": "200583", "value": "xunlei_accel"}, {"code": "200584", "value": "xunlei_jsq"}, {"code": "200585", "value": "xunyou"}, {"code": "200586", "value": "xymon"}, {"code": "200587", "value": "yahoo_error"}, {"code": "200588", "value": "yahoo_games"}, {"code": "200589", "value": "yahoo_webcam"}, {"code": "200590", "value": "zabbix"}, {"code": "200591", "value": "zeroaccess"}, {"code": "200592", "value": "zoom"}, {"code": "200593", "value": "zynga"}, {"code": "200594", "value": "ICMP_Flood"}, {"code": "200595", "value": "IPFRAG_Flood"}, {"code": "200596", "value": "SYN_Flood"}, {"code": "200597", "value": "ACK_Flood"}, {"code": "200598", "value": "RST_Flood"}, {"code": "200599", "value": "DNS_Flood"}, {"code": "200600", "value": "NTP_Flood"}, {"code": "200601", "value": "UDP_Flood"}, {"code": "200602", "value": "HTTP_Flood"}, {"code": "200603", "value": "SSDP_Flood"}, {"code": "200604", "value": "baiduP2P"}, {"code": "200605", "value": "CSGlobalOffensive"}, {"code": "200606", "value": "AllSeeingEye"}, {"code": "200607", "value": "Bittorrent_Extension"}, {"code": "200608", "value": "BitTorrentSync"}, {"code": "200609", "value": "Call_of_Duty"}, {"code": "200612", "value": "CitrixICA"}, {"code": "200613", "value": "Citrix_Jedi"}, {"code": "200614", "value": "ClashOfClans"}, {"code": "200615", "value": "Canon_BJNP"}, {"code": "200617", "value": "DoyoP2P"}, {"code": "200618", "value": "FortiClientSSLVPN"}, {"code": "200619", "value": "GTA_SanAndreas_Multiplayer"}, {"code": "200620", "value": "HalfLife"}, {"code": "200621", "value": "IBM-DB2"}, {"code": "200622", "value": "Flash_Player"}, {"code": "200623", "value": "Kugou"}, {"code": "200624", "value": "LeagueOfLegends"}, {"code": "200625", "value": "GluptebaBackdoor"}, {"code": "200626", "value": "MedalOfHonor"}, {"code": "200628", "value": "MultiTheftAuto"}, {"code": "200631", "value": "NetcoreScan"}, {"code": "200632", "value": "NeverwinterNights"}, {"code": "200633", "value": "NoctionIRP"}, {"code": "200634", "value": "JavaObjectSerialised"}, {"code": "200635", "value": "RealPlayer"}, {"code": "200636", "value": "TeamFortress2"}, {"code": "200637", "value": "TheCrew"}, {"code": "200638", "value": "TurboVPN"}, {"code": "200639", "value": "MSN_Voice"}, {"code": "200640", "value": "MaplestoryChina"}, {"code": "200641", "value": "Message4U"}, {"code": "200642", "value": "MongoDB"}, {"code": "200643", "value": "NDTThroughput"}, {"code": "200644", "value": "NET-MFP"}, {"code": "200645", "value": "WindowsMessenger"}, {"code": "200646", "value": "WolfensteinEnemyTerritory"}, {"code": "200647", "value": "XboxLive"}, {"code": "200649", "value": "RBL"}, {"code": "200650", "value": "RPC_Exploit"}, {"code": "200651", "value": "Rejection"}, {"code": "200655", "value": "Silverplatter_DXP"}, {"code": "200659", "value": "TencentWNS"}, {"code": "200660", "value": "TrionGames"}, {"code": "200661", "value": "Trojan.Win32.Generic!SB"}, {"code": "200666", "value": "WorldOfWarcraft"}, {"code": "200667", "value": "YY"}, {"code": "200669", "value": "nopayload"}, {"code": "200670", "value": "No_FirstPkt"}, {"code": "200671", "value": "Invalid"}], "visibility": "disabled"}, "label": "Application ID"}, {"name": "common_protocol_id", "type": "int", "doc": {"data": [{"code": "0", "value": "NOT SPECIFIED"}, {"code": "10000", "value": "NOT SPECIFIED"}, {"code": "10001", "value": "TCP"}, {"code": "10002", "value": "UDP"}, {"code": "10003", "value": "DNS"}, {"code": "10004", "value": "FTP"}, {"code": "10005", "value": "FTPS"}, {"code": "10006", "value": "GRE"}, {"code": "10007", "value": "HTTP"}, {"code": "10008", "value": "HTTPS"}, {"code": "10009", "value": "ICMP"}, {"code": "10010", "value": "IKE"}, {"code": "10011", "value": "IMAP"}, {"code": "10012", "value": "IMAPS"}, {"code": "10013", "value": "IPSEC"}, {"code": "10014", "value": "XMPP"}, {"code": "10015", "value": "L2TP"}, {"code": "10016", "value": "NTP"}, {"code": "10017", "value": "POP3"}, {"code": "10018", "value": "POP3 SSL"}, {"code": "10019", "value": "PPTP"}, {"code": "10020", "value": "Quic"}, {"code": "10021", "value": "SIP"}, {"code": "10022", "value": "smb"}, {"code": "10023", "value": "SMTP"}, {"code": "10024", "value": "SMTPS"}, {"code": "10025", "value": "SPDY"}, {"code": "10028", "value": "SSH"}, {"code": "10029", "value": "SSL"}, {"code": "10030", "value": "SOCKS"}, {"code": "10031", "value": "BITTORRENT"}, {"code": "10032", "value": "RTSP"}, {"code": "10033", "value": "TELNET"}, {"code": "10034", "value": "UTP"}, {"code": "10035", "value": "FASTTRACK"}, {"code": "10036", "value": "SKINNY"}, {"code": "10037", "value": "IAX"}, {"code": "10038", "value": "MGCP"}, {"code": "10039", "value": "RTCP"}, {"code": "10040", "value": "RTP"}, {"code": "10041", "value": "VNC"}, {"code": "10042", "value": "XDMCP"}, {"code": "10043", "value": "RDP"}, {"code": "10044", "value": "AIMINI"}, {"code": "10045", "value": "IPP"}, {"code": "10046", "value": "NFS"}, {"code": "10047", "value": "TFTP"}, {"code": "10048", "value": "BGP"}, {"code": "10049", "value": "DHCP"}, {"code": "10050", "value": "DHCPV6"}, {"code": "10051", "value": "FINGER"}, {"code": "10052", "value": "KERBEROS"}, {"code": "10053", "value": "LDAP"}, {"code": "10054", "value": "MDNS"}, {"code": "10055", "value": "NNTP"}, {"code": "10056", "value": "SNMP"}, {"code": "10057", "value": "SSDP"}, {"code": "10058", "value": "SYSLOG"}, {"code": "10059", "value": "WHOIS"}, {"code": "10060", "value": "RADIUS"}, {"code": "10061", "value": "OPENVPN"}, {"code": "10062", "value": "STUN"}, {"code": "10063", "value": "TEREDO"}, {"code": "10064", "value": "GTP"}, {"code": "10065", "value": "RTMP"}, {"code": "10066", "value": "chargen_tcp_udp"}, {"code": "10067", "value": "llmnr_udp"}, {"code": "10068", "value": "nbns_udp"}, {"code": "10069", "value": "NETBIOS"}, {"code": "10070", "value": "DirectDownloadLink"}, {"code": "10071", "value": "I23V5"}, {"code": "10072", "value": "DirectConnect"}, {"code": "10073", "value": "OFF"}, {"code": "10074", "value": "OGG"}, {"code": "10075", "value": "MPEG"}, {"code": "10076", "value": "IRC"}, {"code": "10077", "value": "Jabber"}, {"code": "10078", "value": "VRRP"}, {"code": "10079", "value": "IGMP"}, {"code": "10080", "value": "EGP"}, {"code": "10081", "value": "SCTP"}, {"code": "10082", "value": "OSPF"}, {"code": "10083", "value": "IP in IP"}, {"code": "10084", "value": "ICMPv6"}, {"code": "10085", "value": "DCE RPC"}, {"code": "10086", "value": "NetFlow_IPFIX"}, {"code": "10087", "value": "sFlow"}, {"code": "10088", "value": "HTTP Connect (SSL over HTTP)"}, {"code": "10089", "value": "SAP"}, {"code": "10090", "value": "UPnP"}, {"code": "10091", "value": "H323"}, {"code": "10092", "value": "Megaco"}, {"code": "10094", "value": "bacnet"}, {"code": "10096", "value": "bjnp"}, {"code": "10097", "value": "cgp"}, {"code": "10098", "value": "dahua"}, {"code": "10099", "value": "dcc"}, {"code": "10100", "value": "kademlia"}, {"code": "10101", "value": "lansync"}, {"code": "10102", "value": "ldap_ad"}, {"code": "10103", "value": "llp2p"}, {"code": "10104", "value": "mfnp"}, {"code": "10105", "value": "mp2p"}, {"code": "10106", "value": "msn_cache"}, {"code": "10107", "value": "msn_video"}, {"code": "10108", "value": "msnc"}, {"code": "10109", "value": "netflow"}, {"code": "10110", "value": "notes_rpc"}, {"code": "10111", "value": "esp"}, {"code": "10112", "value": "fbcdn_ssl"}, {"code": "10113", "value": "forticlient_sslvpn"}, {"code": "10114", "value": "rfb"}, {"code": "10115", "value": "rtmfp"}, {"code": "10117", "value": "slp"}, {"code": "10118", "value": "steam_inhomebroadcast"}, {"code": "10119", "value": "steam_localbroadcast"}, {"code": "10120", "value": "tpkt"}, {"code": "10121", "value": "xmpps"}, {"code": "10122", "value": "S7COMM"}, {"code": "10123", "value": "CitrixCGP"}, {"code": "10124", "value": "ID_Protocol"}, {"code": "10125", "value": "SMTP_Secure"}, {"code": "10126", "value": "NAT-PMP"}], "visibility": "disabled"}, "label": "Protocol ID"}, {"name": "common_start_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "Start Time"}, {"name": "common_end_time", "type": "int", "doc": {"constraints": {"type": "timestamp"}, "visibility": "hidden"}, "label": "End Time"}, {"name": "common_establish_latency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Establish Latency(ms)"}, {"name": "common_con_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Duration(ms)"}, {"name": "common_stream_dir", "type": "int", "doc": {"data": [{"code": "1", "value": "c2s"}, {"code": "2", "value": "s2c"}, {"code": "3", "value": "double"}]}, "label": "Stream Direction"}, {"name": "common_address_list", "type": "string", "doc": {"visibility": "hidden"}, "label": "Address List"}, {"name": "common_has_dup_traffic", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}], "visibility": "hidden"}, "label": "Duplication Traffic"}, {"name": "common_stream_error", "type": "string", "doc": {"visibility": "hidden"}, "label": "Stream Error"}, {"name": "common_stream_trace_id", "type": "long", "doc": {"allow_query": "true"}, "label": "Session ID"}, {"name": "http_url", "type": "string", "doc": {"allow_query": "true"}, "label": "URL"}, {"name": "http_host", "type": "string", "doc": {"format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "Host"}, {"name": "http_domain", "type": "string", "doc": {"allow_query": "true"}, "label": "Domain"}, {"name": "http_request_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Request Line"}, {"name": "http_response_line", "type": "string", "doc": {"visibility": "hidden"}, "label": "Response Line"}, {"name": "http_request_header", "type": "string", "label": "Request Headers"}, {"name": "http_response_header", "type": "string", "label": "Response Headers"}, {"name": "http_request_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Request Body"}, {"name": "http_response_body", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "Response Body"}, {"name": "http_request_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Request Body Key"}, {"name": "http_response_body_key", "type": "string", "doc": {"visibility": "disabled"}, "label": "Response Body Key"}, {"name": "http_proxy_flag", "type": "int", "label": "Proxy Flag"}, {"name": "http_sequence", "type": "int", "label": "Sequence"}, {"name": "http_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Http Snapshot"}, {"name": "http_cookie", "type": "string", "label": "Cookie"}, {"name": "http_referer", "type": "string", "label": "Referer"}, {"name": "http_user_agent", "type": "string", "label": "User Agent"}, {"name": "http_content_length", "type": "string", "label": "Content Length"}, {"name": "http_content_type", "type": "string", "label": "Content Type"}, {"name": "http_set_cookie", "type": "string", "label": "Set Cookie"}, {"name": "http_version", "type": "string", "label": "Version"}, {"name": "http_response_lantency_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Response Latency(ms)"}, {"name": "http_session_duration_ms", "type": "int", "doc": {"visibility": "hidden"}, "label": "Session Duration(ms)"}, {"name": "mail_protocol_type", "type": "string", "label": "Protocol Type"}, {"name": "mail_account", "type": "string", "label": "Account"}, {"name": "mail_from_cmd", "type": "string", "label": "From CMD"}, {"name": "mail_to_cmd", "type": "string", "label": "To CMD"}, {"name": "mail_from", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "From"}, {"name": "mail_to", "type": "string", "doc": {"constraints": {"type": "email"}}, "label": "To"}, {"name": "mail_cc", "type": "string", "label": "CC"}, {"name": "mail_bcc", "type": "string", "label": "BCC"}, {"name": "mail_subject", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_subject_charset"}}, "label": "Subject"}, {"name": "mail_subject_charset", "type": "string", "doc": {"visibility": "disabled"}, "label": "Subject Charset"}, {"name": "mail_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content"}, {"name": "mail_content_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Content Charset"}, {"name": "mail_attachment_name", "type": "string", "doc": {"format": {"functions": "decode_of_base64", "param": "mail_attachment_name_charset"}}, "label": "Attachment"}, {"name": "mail_attachment_name_charset", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Charset"}, {"name": "mail_attachment_content", "type": "string", "doc": {"visibility": "hidden"}, "label": "Attachment Content"}, {"name": "mail_eml_file", "type": "string", "doc": {"constraints": {"type": "file"}}, "label": "EML File"}, {"name": "mail_snapshot", "type": "string", "doc": {"visibility": "hidden"}, "label": "Snapshot"}, {"name": "dns_message_id", "type": "int", "label": "Message ID"}, {"name": "dns_qr", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "REESPONSE"}]}, "label": "QR"}, {"name": "dns_opcode", "type": "int", "doc": {"data": [{"code": "0", "value": "QUERY"}, {"code": "1", "value": "IQUERY"}, {"code": "2", "value": "STATUS"}, {"code": "5", "value": "UPDATE"}]}, "label": "OPCODE"}, {"name": "dns_aa", "type": "int", "label": "AA"}, {"name": "dns_tc", "type": "int", "label": "TC"}, {"name": "dns_rd", "type": "int", "label": "RD"}, {"name": "dns_ra", "type": "int", "label": "RA"}, {"name": "dns_rcode", "type": "int", "label": "RCODE"}, {"name": "dns_qdcount", "type": "int", "label": "QDCOUNT"}, {"name": "dns_ancount", "type": "int", "label": "ANCOUNT"}, {"name": "dns_nscount", "type": "int", "label": "NSCOUNT"}, {"name": "dns_arcount", "type": "int", "label": "ARCOUNT"}, {"name": "dns_qname", "type": "string", "label": "QNAME"}, {"name": "dns_qtype", "type": "int", "doc": {"data": [{"code": "1", "value": "A"}, {"code": "2", "value": "NS"}, {"code": "5", "value": "CNAME"}, {"code": "6", "value": "SOA"}, {"code": "11", "value": "WKS"}, {"code": "12", "value": "PTR"}, {"code": "13", "value": "HINFO"}, {"code": "11", "value": "WKS"}, {"code": "15", "value": "MX"}, {"code": "28", "value": "AAAA"}]}, "label": "QTYPE"}, {"name": "dns_qclass", "type": "int", "label": "QCLASS"}, {"name": "dns_cname", "type": "string", "label": "CNAME"}, {"name": "dns_sub", "type": "int", "doc": {"data": [{"code": "1", "value": "DNS"}, {"code": "2", "value": "DNSSEC"}]}, "label": "SUB"}, {"name": "dns_rr", "type": "string", "label": "RR"}, {"name": "ssl_version", "type": "string", "label": "Version"}, {"name": "ssl_sni", "type": "string", "doc": {"allow_query": "true", "format": {"functions": "sub_domain", "appendTo": "http_domain"}}, "label": "SNI"}, {"name": "ssl_san", "type": "string", "label": "SAN"}, {"name": "ssl_cn", "type": "string", "label": "CN"}, {"name": "ssl_pinningst", "type": "int", "doc": {"data": [{"code": "0", "value": "Not Pinning"}, {"code": "1", "value": "Pinning"}, {"code": "2", "value": "Maybe Pinning"}]}, "label": "Pinning"}, {"name": "ssl_intercept_state", "type": "int", "doc": {"data": [{"code": "0", "value": "Passthrough"}, {"code": "1", "value": "Intercept"}, {"code": "2", "value": "Shutdown"}]}, "label": "Intercept State"}, {"name": "ssl_server_side_latency", "type": "int", "label": "Server Side Latency(ms)"}, {"name": "ssl_client_side_latency", "type": "int", "label": "Client Side Latency(ms)"}, {"name": "ssl_server_side_version", "type": "string", "label": "Server Side Version"}, {"name": "ssl_client_side_version", "type": "string", "label": "Client Side Version"}, {"name": "ssl_cert_verify", "type": "int", "doc": {"data": [{"code": "0", "value": "No"}, {"code": "1", "value": "Yes"}]}, "label": "Certificate Verify"}, {"name": "ssl_error", "type": "string", "label": "Error"}, {"name": "ssl_con_latency_ms", "type": "int", "doc": {"visibility": "disabled"}, "label": "Connection Latency(ms)"}, {"name": "ftp_account", "type": "string", "label": "Account"}, {"name": "ftp_url", "type": "string", "label": "URL"}, {"name": "ftp_content", "type": "string", "label": "Content"}, {"name": "bgp_type", "type": "int", "label": "Type"}, {"name": "bgp_as_num", "type": "string", "label": "AS Number"}, {"name": "bgp_route", "type": "string", "label": "Route"}, {"name": "voip_calling_account", "type": "string", "label": "Calling Account"}, {"name": "voip_called_account", "type": "string", "label": "Called Account"}, {"name": "voip_calling_number", "type": "string", "label": "Calling Number"}, {"name": "voip_called_number", "type": "string", "label": "Called Number"}, {"name": "streaming_media_url", "type": "string", "label": "Media URL"}, {"name": "streaming_media_protocol", "type": "string", "label": "Media Protocol"}],"start_common_recv_time":"2020-04-01 12:23:06","end_common_recv_time":"2020-04-01 12:24:26","conditions":[{"value":["2020-04-01 12:23:06","2020-04-01 12:24:26"],"symbol":"between","field":"common_recv_time","type":"timestamp"}] ,"common_client_ips":"192.168.50.43","common_policy_ids":"79"}
json=None</msg>
<msg timestamp="20200401 12:24:26.636" level="INFO">${remoteResponse} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.526" endtime="20200401 12:24:26.636"></status>
</kw>
<msg timestamp="20200401 12:24:26.636" level="INFO">${LogListResponse} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.524" endtime="20200401 12:24:26.636"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${LogListResponse.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.637" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.637" endtime="20200401 12:24:26.637"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${LogListResponse.content}</arg>
</arguments>
<assign>
<var>${returnData}</var>
</assign>
<msg timestamp="20200401 12:24:26.638" level="INFO">To JSON using : content={
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:23:34",
"common_log_id":"48583713115473920",
"common_policy_id":"79",
"common_subscriber_id":"",
"common_client_ip":"192.168.50.43",
"common_client_port":"57791",
"common_l4_protocol":"IPv4_TCP",
"common_address_type":"4",
"common_server_ip":"140.210.66.234",
"common_server_port":"80",
"common_action":"128",
"common_direction":"0",
"common_entrance_id":"0",
"common_sled_ip":"192.168.40.161",
"common_client_location":"Private IP",
"common_client_asn":"N/A",
"common_server_location":"China",
"common_server_asn":"23724,4808",
"common_c2s_pkt_num":"4",
"common_s2c_pkt_num":"4",
"common_c2s_byte_num":"80",
"common_s2c_byte_num":"506",
"common_service":"0",
"common_schema_type":"HTTP",
"common_user_tags":"",
"common_sub_action":"",
"common_user_region":"",
"common_device_id":"",
"common_link_id":"0",
"common_isp":"",
"common_encapsulation":"0",
"common_app_label":"",
"common_app_id":"0",
"common_protocol_id":"0",
"common_start_time":"2020-04-01 12:22:36",
"common_end_time":"2020-04-01 12:22:45",
"common_establish_latency_ms":"0",
"common_con_duration_ms":"9000",
"common_stream_dir":"3",
"common_address_list":"57791-80-192.168.50.43-140.210.66.234",
"common_has_dup_traffic":"0",
"common_stream_error":"",
"common_stream_trace_id":"7980242613032",
"http_url":"",
"http_host":"www.xiaozhu.com",
"http_domain":"xiaozhu.com",
"http_request_line":"",
"http_response_line":"",
"http_request_header":"",
"http_response_header":"",
"http_request_body":"",
"http_response_body":"",
"http_request_body_key":"",
"http_response_body_key":"",
"http_proxy_flag":"0",
"http_sequence":"0",
"http_snapshot":"",
"http_cookie":"",
"http_referer":"",
"http_user_agent":"",
"http_content_length":"",
"http_content_type":"",
"http_set_cookie":"",
"http_version":"",
"http_response_lantency_ms":"0",
"http_session_duration_ms":"0",
"mail_protocol_type":"",
"mail_account":"",
"mail_from_cmd":"",
"mail_to_cmd":"",
"mail_from":"",
"mail_to":"",
"mail_cc":"",
"mail_bcc":"",
"mail_subject":"",
"mail_subject_charset":"",
"mail_content":"",
"mail_content_charset":"",
"mail_attachment_name":"",
"mail_attachment_name_charset":"",
"mail_attachment_content":"",
"mail_eml_file":"",
"mail_snapshot":"",
"dns_message_id":"0",
"dns_aa":"0",
"dns_tc":"0",
"dns_rd":"0",
"dns_ra":"0",
"dns_rcode":"0",
"dns_qdcount":"0",
"dns_ancount":"0",
"dns_nscount":"0",
"dns_arcount":"0",
"dns_qname":"",
"dns_qtype":"0",
"dns_qclass":"0",
"dns_cname":"",
"dns_sub":"0",
"dns_rr":"",
"ssl_version":"",
"ssl_sni":"",
"ssl_san":"",
"ssl_cn":"",
"ssl_server_side_latency":"0",
"ssl_client_side_latency":"0",
"ssl_server_side_version":"",
"ssl_client_side_version":"",
"ssl_error":"",
"ssl_con_latency_ms":"0",
"ftp_account":"",
"ftp_url":"",
"ftp_content":"",
"bgp_type":"0",
"bgp_as_num":"",
"bgp_route":"",
"voip_calling_account":"",
"voip_called_account":"",
"voip_calling_number":"",
"voip_called_number":"",
"streaming_media_url":"",
"streaming_media_protocol":""
}
],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:24:26.638" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:24:26.638" level="INFO">${returnData} = {'code': 200, 'data': {'list': [{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50....</msg>
<status status="PASS" starttime="20200401 12:24:26.637" endtime="20200401 12:24:26.638"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${returnData}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${responseCode}</var>
</assign>
<msg timestamp="20200401 12:24:26.639" level="INFO">${responseCode} = 200</msg>
<status status="PASS" starttime="20200401 12:24:26.639" endtime="20200401 12:24:26.639"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${responseCode}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.640" level="INFO">200</msg>
<status status="PASS" starttime="20200401 12:24:26.639" endtime="20200401 12:24:26.640"></status>
</kw>
<kw name="Should Be Equal" library="BuiltIn">
<doc>Fails if the given objects are unequal.</doc>
<arguments>
<arg>${responseCode}</arg>
<arg>${200}</arg>
<arg>security_event_log \ \ test query list failed</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.640" endtime="20200401 12:24:26.640"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>this time request security_event_log \ table logRecord \ : ${LogListResponse.content}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.641" level="INFO">this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:23:34",
"common_log_id":"48583713115473920",
"common_policy_id":"79",
"common_subscriber_id":"",
"common_client_ip":"192.168.50.43",
"common_client_port":"57791",
"common_l4_protocol":"IPv4_TCP",
"common_address_type":"4",
"common_server_ip":"140.210.66.234",
"common_server_port":"80",
"common_action":"128",
"common_direction":"0",
"common_entrance_id":"0",
"common_sled_ip":"192.168.40.161",
"common_client_location":"Private IP",
"common_client_asn":"N/A",
"common_server_location":"China",
"common_server_asn":"23724,4808",
"common_c2s_pkt_num":"4",
"common_s2c_pkt_num":"4",
"common_c2s_byte_num":"80",
"common_s2c_byte_num":"506",
"common_service":"0",
"common_schema_type":"HTTP",
"common_user_tags":"",
"common_sub_action":"",
"common_user_region":"",
"common_device_id":"",
"common_link_id":"0",
"common_isp":"",
"common_encapsulation":"0",
"common_app_label":"",
"common_app_id":"0",
"common_protocol_id":"0",
"common_start_time":"2020-04-01 12:22:36",
"common_end_time":"2020-04-01 12:22:45",
"common_establish_latency_ms":"0",
"common_con_duration_ms":"9000",
"common_stream_dir":"3",
"common_address_list":"57791-80-192.168.50.43-140.210.66.234",
"common_has_dup_traffic":"0",
"common_stream_error":"",
"common_stream_trace_id":"7980242613032",
"http_url":"",
"http_host":"www.xiaozhu.com",
"http_domain":"xiaozhu.com",
"http_request_line":"",
"http_response_line":"",
"http_request_header":"",
"http_response_header":"",
"http_request_body":"",
"http_response_body":"",
"http_request_body_key":"",
"http_response_body_key":"",
"http_proxy_flag":"0",
"http_sequence":"0",
"http_snapshot":"",
"http_cookie":"",
"http_referer":"",
"http_user_agent":"",
"http_content_length":"",
"http_content_type":"",
"http_set_cookie":"",
"http_version":"",
"http_response_lantency_ms":"0",
"http_session_duration_ms":"0",
"mail_protocol_type":"",
"mail_account":"",
"mail_from_cmd":"",
"mail_to_cmd":"",
"mail_from":"",
"mail_to":"",
"mail_cc":"",
"mail_bcc":"",
"mail_subject":"",
"mail_subject_charset":"",
"mail_content":"",
"mail_content_charset":"",
"mail_attachment_name":"",
"mail_attachment_name_charset":"",
"mail_attachment_content":"",
"mail_eml_file":"",
"mail_snapshot":"",
"dns_message_id":"0",
"dns_aa":"0",
"dns_tc":"0",
"dns_rd":"0",
"dns_ra":"0",
"dns_rcode":"0",
"dns_qdcount":"0",
"dns_ancount":"0",
"dns_nscount":"0",
"dns_arcount":"0",
"dns_qname":"",
"dns_qtype":"0",
"dns_qclass":"0",
"dns_cname":"",
"dns_sub":"0",
"dns_rr":"",
"ssl_version":"",
"ssl_sni":"",
"ssl_san":"",
"ssl_cn":"",
"ssl_server_side_latency":"0",
"ssl_client_side_latency":"0",
"ssl_server_side_version":"",
"ssl_client_side_version":"",
"ssl_error":"",
"ssl_con_latency_ms":"0",
"ftp_account":"",
"ftp_url":"",
"ftp_content":"",
"bgp_type":"0",
"bgp_as_num":"",
"bgp_route":"",
"voip_calling_account":"",
"voip_called_account":"",
"voip_calling_number":"",
"voip_called_number":"",
"streaming_media_url":"",
"streaming_media_protocol":""
}
],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:24:26.641" endtime="20200401 12:24:26.641"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>this time request security_event_log \ table logRecord \ : ${LogListResponse.content}</arg>
</arguments>
<assign>
<var>${a}</var>
</assign>
<msg timestamp="20200401 12:24:26.642" level="INFO">${a} = this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:23:34",
"common_log_id":"48583713115473920",
"common_pol...</msg>
<status status="PASS" starttime="20200401 12:24:26.642" endtime="20200401 12:24:26.642"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${a}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.643" level="INFO">this time request security_event_log table logRecord : {
"code":200,
"data":{
"list":[
{
"common_recv_time":"2020-04-01 12:23:34",
"common_log_id":"48583713115473920",
"common_policy_id":"79",
"common_subscriber_id":"",
"common_client_ip":"192.168.50.43",
"common_client_port":"57791",
"common_l4_protocol":"IPv4_TCP",
"common_address_type":"4",
"common_server_ip":"140.210.66.234",
"common_server_port":"80",
"common_action":"128",
"common_direction":"0",
"common_entrance_id":"0",
"common_sled_ip":"192.168.40.161",
"common_client_location":"Private IP",
"common_client_asn":"N/A",
"common_server_location":"China",
"common_server_asn":"23724,4808",
"common_c2s_pkt_num":"4",
"common_s2c_pkt_num":"4",
"common_c2s_byte_num":"80",
"common_s2c_byte_num":"506",
"common_service":"0",
"common_schema_type":"HTTP",
"common_user_tags":"",
"common_sub_action":"",
"common_user_region":"",
"common_device_id":"",
"common_link_id":"0",
"common_isp":"",
"common_encapsulation":"0",
"common_app_label":"",
"common_app_id":"0",
"common_protocol_id":"0",
"common_start_time":"2020-04-01 12:22:36",
"common_end_time":"2020-04-01 12:22:45",
"common_establish_latency_ms":"0",
"common_con_duration_ms":"9000",
"common_stream_dir":"3",
"common_address_list":"57791-80-192.168.50.43-140.210.66.234",
"common_has_dup_traffic":"0",
"common_stream_error":"",
"common_stream_trace_id":"7980242613032",
"http_url":"",
"http_host":"www.xiaozhu.com",
"http_domain":"xiaozhu.com",
"http_request_line":"",
"http_response_line":"",
"http_request_header":"",
"http_response_header":"",
"http_request_body":"",
"http_response_body":"",
"http_request_body_key":"",
"http_response_body_key":"",
"http_proxy_flag":"0",
"http_sequence":"0",
"http_snapshot":"",
"http_cookie":"",
"http_referer":"",
"http_user_agent":"",
"http_content_length":"",
"http_content_type":"",
"http_set_cookie":"",
"http_version":"",
"http_response_lantency_ms":"0",
"http_session_duration_ms":"0",
"mail_protocol_type":"",
"mail_account":"",
"mail_from_cmd":"",
"mail_to_cmd":"",
"mail_from":"",
"mail_to":"",
"mail_cc":"",
"mail_bcc":"",
"mail_subject":"",
"mail_subject_charset":"",
"mail_content":"",
"mail_content_charset":"",
"mail_attachment_name":"",
"mail_attachment_name_charset":"",
"mail_attachment_content":"",
"mail_eml_file":"",
"mail_snapshot":"",
"dns_message_id":"0",
"dns_aa":"0",
"dns_tc":"0",
"dns_rd":"0",
"dns_ra":"0",
"dns_rcode":"0",
"dns_qdcount":"0",
"dns_ancount":"0",
"dns_nscount":"0",
"dns_arcount":"0",
"dns_qname":"",
"dns_qtype":"0",
"dns_qclass":"0",
"dns_cname":"",
"dns_sub":"0",
"dns_rr":"",
"ssl_version":"",
"ssl_sni":"",
"ssl_san":"",
"ssl_cn":"",
"ssl_server_side_latency":"0",
"ssl_client_side_latency":"0",
"ssl_server_side_version":"",
"ssl_client_side_version":"",
"ssl_error":"",
"ssl_con_latency_ms":"0",
"ftp_account":"",
"ftp_url":"",
"ftp_content":"",
"bgp_type":"0",
"bgp_as_num":"",
"bgp_route":"",
"voip_calling_account":"",
"voip_called_account":"",
"voip_calling_number":"",
"voip_called_number":"",
"streaming_media_url":"",
"streaming_media_protocol":""
}
],
"pageNo":1,
"pageSize":30,
"pages":0,
"total":0
},
"msg":"Success",
"success":true
}</msg>
<status status="PASS" starttime="20200401 12:24:26.642" endtime="20200401 12:24:26.643"></status>
</kw>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>${LogListResponse.json()}[data][list]</arg>
</arguments>
<assign>
<var>${log}</var>
</assign>
<msg timestamp="20200401 12:24:26.644" level="INFO">${log} = [{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '577...</msg>
<status status="PASS" starttime="20200401 12:24:26.643" endtime="20200401 12:24:26.644"></status>
</kw>
<kw name="${logs} IN [ ${log} ]" type="for">
<kw name="${logs} = [{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '577..." type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${logs}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.645" level="INFO">[{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57791', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '140.210.66.234', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '23724,4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '506', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:22:36', 'common_end_time': '2020-04-01 12:22:45', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '9000', 'common_stream_dir': '3', 'common_address_list': '57791-80-192.168.50.43-140.210.66.234', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980242613032', 'http_url': '', 'http_host': 'www.xiaozhu.com', 'http_domain': 'xiaozhu.com', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}]</msg>
<status status="PASS" starttime="20200401 12:24:26.645" endtime="20200401 12:24:26.645"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.644" endtime="20200401 12:24:26.645"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.644" endtime="20200401 12:24:26.646"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>%%%%%%%%%%%%%%%%%%%%%%%%${logs}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.646" level="INFO">%%%%%%%%%%%%%%%%%%%%%%%%[{'common_recv_time': '2020-04-01 12:23:34', 'common_log_id': '48583713115473920', 'common_policy_id': '79', 'common_subscriber_id': '', 'common_client_ip': '192.168.50.43', 'common_client_port': '57791', 'common_l4_protocol': 'IPv4_TCP', 'common_address_type': '4', 'common_server_ip': '140.210.66.234', 'common_server_port': '80', 'common_action': '128', 'common_direction': '0', 'common_entrance_id': '0', 'common_sled_ip': '192.168.40.161', 'common_client_location': 'Private IP', 'common_client_asn': 'N/A', 'common_server_location': 'China', 'common_server_asn': '23724,4808', 'common_c2s_pkt_num': '4', 'common_s2c_pkt_num': '4', 'common_c2s_byte_num': '80', 'common_s2c_byte_num': '506', 'common_service': '0', 'common_schema_type': 'HTTP', 'common_user_tags': '', 'common_sub_action': '', 'common_user_region': '', 'common_device_id': '', 'common_link_id': '0', 'common_isp': '', 'common_encapsulation': '0', 'common_app_label': '', 'common_app_id': '0', 'common_protocol_id': '0', 'common_start_time': '2020-04-01 12:22:36', 'common_end_time': '2020-04-01 12:22:45', 'common_establish_latency_ms': '0', 'common_con_duration_ms': '9000', 'common_stream_dir': '3', 'common_address_list': '57791-80-192.168.50.43-140.210.66.234', 'common_has_dup_traffic': '0', 'common_stream_error': '', 'common_stream_trace_id': '7980242613032', 'http_url': '', 'http_host': 'www.xiaozhu.com', 'http_domain': 'xiaozhu.com', 'http_request_line': '', 'http_response_line': '', 'http_request_header': '', 'http_response_header': '', 'http_request_body': '', 'http_response_body': '', 'http_request_body_key': '', 'http_response_body_key': '', 'http_proxy_flag': '0', 'http_sequence': '0', 'http_snapshot': '', 'http_cookie': '', 'http_referer': '', 'http_user_agent': '', 'http_content_length': '', 'http_content_type': '', 'http_set_cookie': '', 'http_version': '', 'http_response_lantency_ms': '0', 'http_session_duration_ms': '0', 'mail_protocol_type': '', 'mail_account': '', 'mail_from_cmd': '', 'mail_to_cmd': '', 'mail_from': '', 'mail_to': '', 'mail_cc': '', 'mail_bcc': '', 'mail_subject': '', 'mail_subject_charset': '', 'mail_content': '', 'mail_content_charset': '', 'mail_attachment_name': '', 'mail_attachment_name_charset': '', 'mail_attachment_content': '', 'mail_eml_file': '', 'mail_snapshot': '', 'dns_message_id': '0', 'dns_aa': '0', 'dns_tc': '0', 'dns_rd': '0', 'dns_ra': '0', 'dns_rcode': '0', 'dns_qdcount': '0', 'dns_ancount': '0', 'dns_nscount': '0', 'dns_arcount': '0', 'dns_qname': '', 'dns_qtype': '0', 'dns_qclass': '0', 'dns_cname': '', 'dns_sub': '0', 'dns_rr': '', 'ssl_version': '', 'ssl_sni': '', 'ssl_san': '', 'ssl_cn': '', 'ssl_server_side_latency': '0', 'ssl_client_side_latency': '0', 'ssl_server_side_version': '', 'ssl_client_side_version': '', 'ssl_error': '', 'ssl_con_latency_ms': '0', 'ftp_account': '', 'ftp_url': '', 'ftp_content': '', 'bgp_type': '0', 'bgp_as_num': '', 'bgp_route': '', 'voip_calling_account': '', 'voip_called_account': '', 'voip_calling_number': '', 'voip_called_number': '', 'streaming_media_url': '', 'streaming_media_protocol': ''}]</msg>
<status status="PASS" starttime="20200401 12:24:26.646" endtime="20200401 12:24:26.646"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${client_ip}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.647" endtime="20200401 12:24:26.647"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${policy_id}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.647" endtime="20200401 12:24:26.648"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}""</arg>
<arg>${parmkey}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.648" endtime="20200401 12:24:26.648"></status>
</kw>
<kw name="Should Contain" library="BuiltIn">
<doc>Fails if ``container`` does not contain ``item`` one or more times.</doc>
<arguments>
<arg>${logs}"${parmkey}"</arg>
<arg>${parmvalue}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.648" endtime="20200401 12:24:26.649"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.017" endtime="20200401 12:24:26.649"></status>
</kw>
<kw name="DeletePolicyAndObject" library="PolicyObject" type="teardown">
<arguments>
<arg>${policyIds}</arg>
<arg>${objectids}</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyAndObject</arg>
</arguments>
<msg timestamp="20200401 12:24:26.650" level="INFO">toDeletePolicy_DeletePolicyAndObject</msg>
<status status="PASS" starttime="20200401 12:24:26.650" endtime="20200401 12:24:26.650"></status>
</kw>
<kw name="Get Length" library="BuiltIn">
<doc>Returns and logs the length of the given item as an integer.</doc>
<arguments>
<arg>${policyids}</arg>
</arguments>
<assign>
<var>${listlenth}</var>
</assign>
<msg timestamp="20200401 12:24:26.651" level="INFO">Length is 2</msg>
<msg timestamp="20200401 12:24:26.651" level="INFO">${listlenth} = 2</msg>
<status status="PASS" starttime="20200401 12:24:26.651" endtime="20200401 12:24:26.651"></status>
</kw>
<kw name="${var} IN RANGE [ ${listlenth} ]" type="for">
<kw name="${var} = 0" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${var}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.652" level="INFO">0</msg>
<status status="PASS" starttime="20200401 12:24:26.652" endtime="20200401 12:24:26.652"></status>
</kw>
<kw name="DeletePolicy" library="PolicyObject">
<arguments>
<arg>${policyids}[${var}]</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyDeletePolicy</arg>
</arguments>
<msg timestamp="20200401 12:24:26.653" level="INFO">toDeletePolicy_DeletePolicyDeletePolicy</msg>
<status status="PASS" starttime="20200401 12:24:26.653" endtime="20200401 12:24:26.653"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:24:26.654" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:24:26.654" endtime="20200401 12:24:26.654"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.655" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:24:26.655" endtime="20200401 12:24:26.656"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.656" level="INFO">DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"policyType":"tsg_security","policyIds":[78]}
json=None</msg>
<msg timestamp="20200401 12:24:26.798" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.656" endtime="20200401 12:24:26.798"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.799" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.799" endtime="20200401 12:24:26.799"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.800" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.800" endtime="20200401 12:24:26.800"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.801" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:24:26.801" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:24:26.801" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.800" endtime="20200401 12:24:26.801"></status>
</kw>
<msg timestamp="20200401 12:24:26.802" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.653" endtime="20200401 12:24:26.802"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:24:26.803" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:24:26.802" endtime="20200401 12:24:26.803"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.803" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.803" endtime="20200401 12:24:26.804"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.804" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.804" endtime="20200401 12:24:26.805"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.805" endtime="20200401 12:24:26.805"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.652" endtime="20200401 12:24:26.805"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.652" endtime="20200401 12:24:26.805"></status>
</kw>
<kw name="${var} = 1" type="foritem">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>${var}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.806" level="INFO">1</msg>
<status status="PASS" starttime="20200401 12:24:26.806" endtime="20200401 12:24:26.807"></status>
</kw>
<kw name="DeletePolicy" library="PolicyObject">
<arguments>
<arg>${policyids}[${var}]</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>toDeletePolicy_DeletePolicyDeletePolicy</arg>
</arguments>
<msg timestamp="20200401 12:24:26.808" level="INFO">toDeletePolicy_DeletePolicyDeletePolicy</msg>
<status status="PASS" starttime="20200401 12:24:26.807" endtime="20200401 12:24:26.808"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/compile</arg>
<arg>${body}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:24:26.809" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:24:26.808" endtime="20200401 12:24:26.809"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.809" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:24:26.809" endtime="20200401 12:24:26.810"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.811" level="INFO">DELETE Request using : uri=/v1/policy/compile, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"policyType":"tsg_security","policyIds":[79]}
json=None</msg>
<msg timestamp="20200401 12:24:26.880" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.810" endtime="20200401 12:24:26.880"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.881" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.881" endtime="20200401 12:24:26.881"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.882" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.882" endtime="20200401 12:24:26.882"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.883" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:24:26.883" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:24:26.883" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.882" endtime="20200401 12:24:26.883"></status>
</kw>
<msg timestamp="20200401 12:24:26.884" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.808" endtime="20200401 12:24:26.884"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:24:26.884" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:24:26.884" endtime="20200401 12:24:26.885"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.885" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.885" endtime="20200401 12:24:26.885"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.886" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.886" endtime="20200401 12:24:26.886"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.887" endtime="20200401 12:24:26.887"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.807" endtime="20200401 12:24:26.887"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.806" endtime="20200401 12:24:26.887"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.651" endtime="20200401 12:24:26.887"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>todeleteobj_DeletePolicyAndObject</arg>
</arguments>
<msg timestamp="20200401 12:24:26.888" level="INFO">todeleteobj_DeletePolicyAndObject</msg>
<status status="PASS" starttime="20200401 12:24:26.888" endtime="20200401 12:24:26.888"></status>
</kw>
<kw name="DeleteObject" library="PolicyObject">
<arguments>
<arg>${objectids}</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>todeleteobj</arg>
</arguments>
<msg timestamp="20200401 12:24:26.889" level="INFO">todeleteobj</msg>
<status status="PASS" starttime="20200401 12:24:26.889" endtime="20200401 12:24:26.889"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>{"objectIds":[${objectids}]}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:24:26.890" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:24:26.890" endtime="20200401 12:24:26.890"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.891" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:24:26.890" endtime="20200401 12:24:26.891"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.892" level="INFO">DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"objectIds":[474]}
json=None</msg>
<msg timestamp="20200401 12:24:26.971" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.891" endtime="20200401 12:24:26.972"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.973" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.972" endtime="20200401 12:24:26.973"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.974" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.973" endtime="20200401 12:24:26.974"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.975" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:24:26.976" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:24:26.976" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.975" endtime="20200401 12:24:26.976"></status>
</kw>
<msg timestamp="20200401 12:24:26.976" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.889" endtime="20200401 12:24:26.976"></status>
</kw>
<kw name="Get From Dictionary" library="Collections">
<doc>Returns a value from the given ``dictionary`` based on the given ``key``.</doc>
<arguments>
<arg>${response}</arg>
<arg>code</arg>
</arguments>
<assign>
<var>${response_code}</var>
</assign>
<msg timestamp="20200401 12:24:26.977" level="INFO">${response_code} = 200</msg>
<status status="PASS" starttime="20200401 12:24:26.977" endtime="20200401 12:24:26.977"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:26.978" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.978" endtime="20200401 12:24:26.978"></status>
</kw>
<kw name="Convert To String" library="BuiltIn">
<doc>Converts the given item to a Unicode string.</doc>
<arguments>
<arg>${response}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.979" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.978" endtime="20200401 12:24:26.979"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:26.979" endtime="20200401 12:24:26.980"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.888" endtime="20200401 12:24:26.980"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.649" endtime="20200401 12:24:26.980"></status>
</kw>
<tags>
<tag>Allow</tag>
<tag>DENY</tag>
<tag>FQDN</tag>
<tag>HTTP</tag>
<tag>IP</tag>
<tag>tsg_adc</tag>
<tag>tsg_security</tag>
</tags>
<status status="PASS" starttime="20200401 12:23:05.671" endtime="20200401 12:24:26.980" critical="yes"></status>
</test>
<status status="FAIL" starttime="20200401 12:20:36.911" endtime="20200401 12:24:26.981"></status>
</suite>
<status status="FAIL" starttime="20200401 12:20:36.908" endtime="20200401 12:24:26.984"></status>
</suite>
<status status="FAIL" starttime="20200401 12:20:36.905" endtime="20200401 12:24:26.986"></status>
</suite>
<status status="FAIL" starttime="20200401 12:20:36.902" endtime="20200401 12:24:26.988"></status>
</suite>
<kw name="LogoutAndDelLocalIP" library="LoginAndLogoutTypeSwitch" type="teardown">
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>'${loginType}' == 'api'</arg>
<arg>ApiLogoutAndDelLocalIP</arg>
<arg>aa</arg>
<arg>ELSE IF</arg>
<arg>'${loginType}' == 'cli'</arg>
<arg>CliLogout</arg>
<arg>ELSE</arg>
<arg>UiLogoutAndDelLocalIP</arg>
<arg>bb</arg>
</arguments>
<kw name="ApiLogoutAndDelLocalIP" library="LoginLogout">
<arguments>
<arg>aa</arg>
</arguments>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>ApiLogoutAndDelLocalIP${tempparm}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.992" level="INFO">ApiLogoutAndDelLocalIPaa</msg>
<status status="PASS" starttime="20200401 12:24:26.992" endtime="20200401 12:24:26.992"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>to_LogoutAndDelLocalIP_LogoutAndDelLocalIP</arg>
</arguments>
<msg timestamp="20200401 12:24:26.993" level="INFO">to_LogoutAndDelLocalIP_LogoutAndDelLocalIP</msg>
<status status="PASS" starttime="20200401 12:24:26.992" endtime="20200401 12:24:26.993"></status>
</kw>
<kw name="Run Keyword If" library="BuiltIn">
<doc>Runs the given keyword with the given arguments, if ``condition`` is true.</doc>
<arguments>
<arg>${addTestClentIPFlag}==1</arg>
<arg>DelLocalIPObject</arg>
</arguments>
<kw name="DelLocalIPObject" library="PolicyObject">
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>to_DelLocalIPObject</arg>
</arguments>
<msg timestamp="20200401 12:24:26.994" level="INFO">to_DelLocalIPObject</msg>
<status status="PASS" starttime="20200401 12:24:26.994" endtime="20200401 12:24:26.994"></status>
</kw>
<kw name="BaseDeleteRequest" library="Common">
<arguments>
<arg>/v1/policy/object</arg>
<arg>{"objectIds":[${testClentID}]}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<kw name="Set Variable" library="BuiltIn">
<doc>Returns the given values which can then be assigned to a variables.</doc>
<arguments>
<arg>{"Authorization":"${token}","Content-Type":"application/json"}</arg>
</arguments>
<assign>
<var>${headers}</var>
</assign>
<msg timestamp="20200401 12:24:26.995" level="INFO">${headers} = {"Authorization":"3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;","Content-Type":"application/json"}</msg>
<status status="PASS" starttime="20200401 12:24:26.995" endtime="20200401 12:24:26.995"></status>
</kw>
<kw name="Create Session" library="RequestsLibrary">
<doc>Create Session: create a HTTP session to a server</doc>
<arguments>
<arg>api</arg>
<arg>http://${host}:${port}</arg>
<arg>${headers}</arg>
</arguments>
<msg timestamp="20200401 12:24:26.996" level="INFO">Creating Session using : alias=api, url=http://192.168.40.120:8080, headers={'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}, cookies={}, auth=None, timeout=None, proxies=None, verify=False, debug=0 </msg>
<status status="PASS" starttime="20200401 12:24:26.996" endtime="20200401 12:24:26.997"></status>
</kw>
<kw name="Delete Request" library="RequestsLibrary">
<doc>Send a DELETE request on the session object found using the
given `alias`</doc>
<arguments>
<arg>api</arg>
<arg>${requestUri}</arg>
<arg>data=${data}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:26.998" level="INFO">DELETE Request using : uri=/v1/policy/object, params=None, allow_redirects=True, timeout=None
headers={'User-Agent': 'python-requests/2.23.0', 'Accept-Encoding': 'gzip, deflate', 'Accept': '*/*', 'Connection': 'keep-alive', 'Authorization': '3bb6ef1b-f163-496e-a194-ceece638d10e&amp;981&amp;', 'Content-Type': 'application/json'}
data={"objectIds":[470]}
json=None</msg>
<msg timestamp="20200401 12:24:27.066" level="INFO">${response} = &lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:26.997" endtime="20200401 12:24:27.067"></status>
</kw>
<kw name="Log" library="BuiltIn">
<doc>Logs the given message with the given level.</doc>
<arguments>
<arg>return data =${response}</arg>
</arguments>
<msg timestamp="20200401 12:24:27.069" level="INFO">return data =&lt;Response [200]&gt;</msg>
<status status="PASS" starttime="20200401 12:24:27.068" endtime="20200401 12:24:27.070"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response.status_code}</arg>
<arg>200</arg>
</arguments>
<msg timestamp="20200401 12:24:27.072" level="INFO">Argument types are:
&lt;class 'int'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:27.071" endtime="20200401 12:24:27.073"></status>
</kw>
<kw name="To Json" library="RequestsLibrary">
<doc>Convert a string to a JSON object</doc>
<arguments>
<arg>${response.content}</arg>
</arguments>
<assign>
<var>${response}</var>
</assign>
<msg timestamp="20200401 12:24:27.076" level="INFO">To JSON using : content={
"code":200,
"msg":"Success",
"success":true
} </msg>
<msg timestamp="20200401 12:24:27.076" level="INFO">To JSON using : pretty_print=False </msg>
<msg timestamp="20200401 12:24:27.077" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:27.074" endtime="20200401 12:24:27.077"></status>
</kw>
<msg timestamp="20200401 12:24:27.078" level="INFO">${response} = {'code': 200, 'msg': 'Success', 'success': True}</msg>
<status status="PASS" starttime="20200401 12:24:26.995" endtime="20200401 12:24:27.079"></status>
</kw>
<kw name="Should Be Equal As Strings" library="BuiltIn">
<doc>Fails if objects are unequal after converting them to strings.</doc>
<arguments>
<arg>${response}</arg>
<arg>{'code': 200, 'msg': 'Success', 'success': True}</arg>
</arguments>
<msg timestamp="20200401 12:24:27.080" level="INFO">Argument types are:
&lt;class 'dict'&gt;
&lt;type 'unicode'&gt;</msg>
<status status="PASS" starttime="20200401 12:24:27.079" endtime="20200401 12:24:27.081"></status>
</kw>
<kw name="Set Global Variable" library="BuiltIn">
<doc>Makes a variable available globally in all tests and suites.</doc>
<arguments>
<arg>${testClentID}</arg>
<arg>${EMPTY}</arg>
</arguments>
<msg timestamp="20200401 12:24:27.083" level="INFO">${testClentID} = </msg>
<status status="PASS" starttime="20200401 12:24:27.082" endtime="20200401 12:24:27.083"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.993" endtime="20200401 12:24:27.084"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.993" endtime="20200401 12:24:27.084"></status>
</kw>
<kw name="Logout" library="LoginLogout">
<kw name="Post" library="REST">
<tags>
<tag>http</tag>
</tags>
<doc>*Sends a POST request to the endpoint.*</doc>
<arguments>
<arg>/v1/user/logout</arg>
<arg>headers=${headers}</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:27.086" endtime="20200401 12:24:27.105"></status>
</kw>
<kw name="Object" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON object.*</doc>
<arguments>
<arg>response body</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:27.105" endtime="20200401 12:24:27.106"></status>
</kw>
<kw name="Integer" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON integer.*</doc>
<arguments>
<arg>$.code</arg>
<arg>200</arg>
</arguments>
<status status="PASS" starttime="20200401 12:24:27.106" endtime="20200401 12:24:27.129"></status>
</kw>
<kw name="Integer" library="REST">
<tags>
<tag>assertions</tag>
</tags>
<doc>*Asserts the field as JSON integer.*</doc>
<arguments>
<arg>$.code</arg>
</arguments>
<assign>
<var>${rescode}</var>
</assign>
<msg timestamp="20200401 12:24:27.152" level="INFO">${rescode} = [200]</msg>
<status status="PASS" starttime="20200401 12:24:27.130" endtime="20200401 12:24:27.152"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:27.085" endtime="20200401 12:24:27.152"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.991" endtime="20200401 12:24:27.153"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.991" endtime="20200401 12:24:27.153"></status>
</kw>
<status status="PASS" starttime="20200401 12:24:26.990" endtime="20200401 12:24:27.153"></status>
</kw>
<status status="FAIL" starttime="20200401 12:20:35.673" endtime="20200401 12:24:27.153"></status>
</suite>
<statistics>
<total>
<stat pass="2" fail="1">Critical Tests</stat>
<stat pass="2" fail="1">All Tests</stat>
</total>
<tag>
<stat pass="2" fail="1">Allow</stat>
<stat pass="0" fail="1">Category</stat>
<stat pass="2" fail="1">DENY</stat>
<stat pass="2" fail="0">FQDN</stat>
<stat pass="2" fail="1">HTTP</stat>
<stat pass="2" fail="0">IP</stat>
<stat pass="0" fail="1">SubID</stat>
<stat pass="2" fail="1">tsg_adc</stat>
<stat pass="2" fail="1">tsg_security</stat>
</tag>
<suite>
<stat pass="2" fail="1" id="s1" name="Tsg Autotest">Tsg Autotest</stat>
<stat pass="2" fail="1" id="s1-s1" name="01-TestCase">Tsg Autotest.01-TestCase</stat>
<stat pass="2" fail="1" id="s1-s1-s1" name="Tsg Adc">Tsg Autotest.01-TestCase.Tsg Adc</stat>
<stat pass="2" fail="1" id="s1-s1-s1-s1" name="Api Security">Tsg Autotest.01-TestCase.Tsg Adc.Api Security</stat>
<stat pass="2" fail="1" id="s1-s1-s1-s1-s1" name="AllowHttpTests">Tsg Autotest.01-TestCase.Tsg Adc.Api Security.AllowHttpTests</stat>
</suite>
</statistics>
<errors>
</errors>
</robot>
Reference in New Issue View Git Blame Copy Permalink