50 lines
3.5 KiB
JSON
50 lines
3.5 KiB
JSON
{
|
|
"flags_identify_info": [1,2,3],
|
|
"security_rule_list": ["aaa","bbb", "ccc"],
|
|
"tcp_rtt_ms": 61,
|
|
"ssl_ja3s_hash": "cd5a8d2e276eabf0839bf1a25acc479e",
|
|
"ssl_version": "v3",
|
|
"ssl_cn": "*.google.com",
|
|
"ssl_cert_issuer": "CN=GTS CA 1C3;O=Google Trust Services LLC;C=US;;;;",
|
|
"ssl_cert_subject": "CN=*.google.com;;;;;;",
|
|
"ssl_san": "*.google.com;*.appengine.google.com;*.bdn.dev;*.cloud.google.com;*.crowdsource.google.com;*.datacompute.google.com;*.google.ca;*.google.cl;*.google.co.in;*.google.co.jp;*.google.co.uk;*.google.com.ar;*.google.com.au;*.google.com.br;*.google.com.co;*.google.com.mx;*.google.com.tr;*.google.com.vn;*.google.de;*.google.es;*.google.fr;*.google.hu;*.google.it;*.google.nl;*.google.pl;*.google.pt;*.googleadapis.com;*.googleapis.cn;*.googlevideo.com;*.gstatic.cn;*.gstatic-cn.com;*.gstaticcnapps.cn;googlecnapps.cn;*.googlecnapps.cn;googleapps-cn.com;*.googleapps-cn.com;gkecnapps.cn;*.gkecnapps.cn;googledownloads.cn;*.googledownloads.cn;recaptcha.net.cn;*.recaptcha.net.cn;widevine.cn;*.widevine.cn;ampproject.org.cn;*.ampproject.org.cn;ampproject.net.cn;*.ampproject.net.cn;google-analytics-cn.com;*.google-analytics-cn.com;googleadservices-cn.com;*.googleadservices-cn.com;googlevads-cn.com;*.googlevads-cn.com;googleapis-cn.com;*.googleapis-cn.com;googleoptimize-cn.com;*.googleoptimize-cn.com;doubleclick-cn.net;*.doubleclick-cn.net;*.fls.doubleclick-cn.net;*.g.doubleclick-cn.net;doubleclick.cn;*.doubleclick.cn;*.fls.doubleclick.cn;*.g.doubleclick.cn;dartsearch-cn.net;*.dartsearch-cn.net;googletraveladservices-cn.com;*.googletraveladservices-cn.com;googletagservices-cn.com;*.googletagservices-cn.com;googletagmanager-cn.com;*.googletagmanager-cn.com;googlesyndication-cn.com;*.googlesyndication-cn.com;*.safeframe.googlesyndication-cn.com;app-measurement-cn.com;*.app-measurement-cn.com;gvt1-cn.com;*.gvt1-cn.com;gvt2-cn.com;*.gvt2-cn.com;2mdn-cn.net;*.2mdn-cn.net;googleflights-cn.net;*.googleflights-cn.net;admob-cn.com;*.admob-cn.com;*.gstatic.com;*.metric.gstatic.com;*.gvt1.com;*.gcpcdn.gvt1.com;*.gvt2.com;*.gcp.gvt2.com;*.url.google.com;*.youtube-nocookie.com;*.ytimg.com;android.com;*.android.com;*.flash.android.com;g.cn;*.g.cn;g.co;*.g.co;goo.gl;www.goo.gl;google-analytics.com;*.google-analytics.com;google.com;googlecommerce.com;*.googlecommerce.com;ggpht.cn",
|
|
"in_src_mac": "d4:c1:c8:8f:ac:f0",
|
|
"in_dest_mac": "d4:c1:c8:98:c7:60",
|
|
"tcp_client_isn": 2664633009,
|
|
"tcp_server_isn": 2183931785,
|
|
"address_type": 4,
|
|
"client_ip": "196.190.248.0",
|
|
"server_ip": "142.250.185.34",
|
|
"client_port": 16986,
|
|
"server_port": 443,
|
|
"in_link_id": 0,
|
|
"out_link_id": 0,
|
|
"start_timestamp_ms": 1702610615910,
|
|
"end_timestamp_ms": 1702610615996,
|
|
"duration_ms": 86,
|
|
"sent_pkts": 0,
|
|
"sent_bytes": 0,
|
|
"received_pkts": 10,
|
|
"received_bytes": 7246,
|
|
"tcp_c2s_ip_fragments": 0,
|
|
"tcp_s2c_ip_fragments": 0,
|
|
"tcp_c2s_rtx_pkts": 0,
|
|
"tcp_c2s_rtx_bytes": 0,
|
|
"tcp_s2c_rtx_pkts": 0,
|
|
"tcp_s2c_rtx_bytes": 0,
|
|
"tcp_c2s_o3_pkts": 0,
|
|
"tcp_s2c_o3_pkts": 0,
|
|
"tcp_c2s_lost_bytes": 0,
|
|
"tcp_s2c_lost_bytes": 0,
|
|
"flags": 0,
|
|
"decoded_as": "SSL",
|
|
"decoded_path": "ETHERNET.IPv4.UDP.VXLAN.ETHERNET.IPv4.TCP",
|
|
"t_vsys_id": 1,
|
|
"vsys_id": 1,
|
|
"session_id": 11849422307955,
|
|
"tcp_handshake_latency_ms": 37,
|
|
"server_os_desc": "Android",
|
|
"device_tag": "{\"tags\":[{\"tag\":\"device_id\",\"value\":\"device_1\"}]}",
|
|
"sled_ip": "127.0.0.1",
|
|
"dup_traffic_flag": 0
|
|
} |