{ "flags_identify_info": [1,2,3], "security_rule_list": ["aaa","bbb", "ccc"], "tcp_rtt_ms": 61, "ssl_ja3s_hash": "cd5a8d2e276eabf0839bf1a25acc479e", "ssl_version": "v3", "ssl_cn": "*.google.com", "ssl_cert_issuer": "CN=GTS CA 1C3;O=Google Trust Services LLC;C=US;;;;", "ssl_cert_subject": "CN=*.google.com;;;;;;", "ssl_san": "*.google.com;*.appengine.google.com;*.bdn.dev;*.cloud.google.com;*.crowdsource.google.com;*.datacompute.google.com;*.google.ca;*.google.cl;*.google.co.in;*.google.co.jp;*.google.co.uk;*.google.com.ar;*.google.com.au;*.google.com.br;*.google.com.co;*.google.com.mx;*.google.com.tr;*.google.com.vn;*.google.de;*.google.es;*.google.fr;*.google.hu;*.google.it;*.google.nl;*.google.pl;*.google.pt;*.googleadapis.com;*.googleapis.cn;*.googlevideo.com;*.gstatic.cn;*.gstatic-cn.com;*.gstaticcnapps.cn;googlecnapps.cn;*.googlecnapps.cn;googleapps-cn.com;*.googleapps-cn.com;gkecnapps.cn;*.gkecnapps.cn;googledownloads.cn;*.googledownloads.cn;recaptcha.net.cn;*.recaptcha.net.cn;widevine.cn;*.widevine.cn;ampproject.org.cn;*.ampproject.org.cn;ampproject.net.cn;*.ampproject.net.cn;google-analytics-cn.com;*.google-analytics-cn.com;googleadservices-cn.com;*.googleadservices-cn.com;googlevads-cn.com;*.googlevads-cn.com;googleapis-cn.com;*.googleapis-cn.com;googleoptimize-cn.com;*.googleoptimize-cn.com;doubleclick-cn.net;*.doubleclick-cn.net;*.fls.doubleclick-cn.net;*.g.doubleclick-cn.net;doubleclick.cn;*.doubleclick.cn;*.fls.doubleclick.cn;*.g.doubleclick.cn;dartsearch-cn.net;*.dartsearch-cn.net;googletraveladservices-cn.com;*.googletraveladservices-cn.com;googletagservices-cn.com;*.googletagservices-cn.com;googletagmanager-cn.com;*.googletagmanager-cn.com;googlesyndication-cn.com;*.googlesyndication-cn.com;*.safeframe.googlesyndication-cn.com;app-measurement-cn.com;*.app-measurement-cn.com;gvt1-cn.com;*.gvt1-cn.com;gvt2-cn.com;*.gvt2-cn.com;2mdn-cn.net;*.2mdn-cn.net;googleflights-cn.net;*.googleflights-cn.net;admob-cn.com;*.admob-cn.com;*.gstatic.com;*.metric.gstatic.com;*.gvt1.com;*.gcpcdn.gvt1.com;*.gvt2.com;*.gcp.gvt2.com;*.url.google.com;*.youtube-nocookie.com;*.ytimg.com;android.com;*.android.com;*.flash.android.com;g.cn;*.g.cn;g.co;*.g.co;goo.gl;www.goo.gl;google-analytics.com;*.google-analytics.com;google.com;googlecommerce.com;*.googlecommerce.com;ggpht.cn", "in_src_mac": "d4:c1:c8:8f:ac:f0", "in_dest_mac": "d4:c1:c8:98:c7:60", "tcp_client_isn": 2664633009, "tcp_server_isn": 2183931785, "address_type": 4, "client_ip": "196.190.248.0", "server_ip": "142.250.185.34", "client_port": 16986, "server_port": 443, "in_link_id": 0, "out_link_id": 0, "start_timestamp_ms": 1702610615910, "end_timestamp_ms": 1702610615996, "duration_ms": 86, "sent_pkts": 0, "sent_bytes": 0, "received_pkts": 10, "received_bytes": 7246, "tcp_c2s_ip_fragments": 0, "tcp_s2c_ip_fragments": 0, "tcp_c2s_rtx_pkts": 0, "tcp_c2s_rtx_bytes": 0, "tcp_s2c_rtx_pkts": 0, "tcp_s2c_rtx_bytes": 0, "tcp_c2s_o3_pkts": 0, "tcp_s2c_o3_pkts": 0, "tcp_c2s_lost_bytes": 0, "tcp_s2c_lost_bytes": 0, "flags": 0, "decoded_as": "SSL", "decoded_path": "ETHERNET.IPv4.UDP.VXLAN.ETHERNET.IPv4.TCP", "t_vsys_id": 1, "vsys_id": 1, "session_id": 11849422307955, "tcp_handshake_latency_ms": 37, "server_os_desc": "Android", "device_tag": "{\"tags\":[{\"tag\":\"device_id\",\"value\":\"device_1\"}]}", "sled_ip": "127.0.0.1", "dup_traffic_flag": 0 }