127 lines
3.6 KiB
Plaintext
127 lines
3.6 KiB
Plaintext
#TYPE：1:UCHAR,2:USHORT,3:ULONG,4:ULOG,5:USTRING,6:FILE,7:UBASE64,8:PACKET
|
||
#TYPE TOPIC SERVICE
|
||
TOPIC SECURITY-EVENT 0
|
||
TOPIC SESSION-RECORD 1
|
||
TOPIC INTERNAL-RTP-RECORD 2
|
||
TOPIC VOIP-RECORD 3
|
||
TOPIC INTERIM-SESSION-RECORD 4
|
||
TOPIC TRANSACTION-RECORD 5
|
||
TOPIC GTPC-RECORD 6
|
||
TOPIC BGP-RECORD 7
|
||
|
||
#TYPE FIELD VALUE
|
||
LONG common_policy_id 1
|
||
LONG common_service 2
|
||
LONG common_action 3
|
||
LONG common_start_time 4
|
||
LONG common_end_time 5
|
||
STRING common_l4_protocol 6
|
||
LONG common_address_type 7
|
||
STRING common_server_ip 8
|
||
STRING common_client_ip 9
|
||
LONG common_server_port 10
|
||
LONG common_client_port 11
|
||
LONG common_stream_dir 12
|
||
STRING common_address_list 13
|
||
LONG common_entrance_id 14
|
||
LONG common_device_id 15
|
||
LONG common_link_id 16
|
||
STRING common_isp 17
|
||
LONG common_encapsulation 18
|
||
LONG common_direction 19
|
||
STRING common_sled_ip 20
|
||
STRING common_user_tags 21
|
||
STRING common_user_region 22
|
||
STRING common_app_label 23
|
||
LONG common_app_id 24
|
||
LONG common_protocol_id 25
|
||
LONG common_c2s_pkt_num 26
|
||
LONG common_s2c_pkt_num 27
|
||
LONG common_c2s_byte_num 28
|
||
LONG common_s2c_byte_num 29
|
||
LONG common_con_duration_ms 30
|
||
LONG common_has_dup_traffic 31
|
||
STRING common_stream_error 32
|
||
STRING common_stream_trace_id 33
|
||
STRING common_schema_type 34
|
||
STRING http_host 35
|
||
STRING ssl_sni 36
|
||
LONG common_establish_latency_ms 37
|
||
STRING common_sub_action 38
|
||
STRING common_client_asn 39
|
||
STRING common_server_asn 40
|
||
STRING common_client_location 41
|
||
STRING common_server_location 42
|
||
STRING quic_sni 43
|
||
STRING ssl_ja3_hash 44
|
||
STRING common_data_center 45
|
||
STRING common_l7_protocol 46
|
||
STRING common_tcp_client_isn 47
|
||
STRING common_tcp_server_isn 48
|
||
LONG common_app_surrogate_id 49
|
||
STRING sip_from 50
|
||
STRING sip_to 51
|
||
STRING common_tunnels 52
|
||
STRING tunnels_schema_type 53
|
||
STRING gtp_endpoint_a_ip 54
|
||
STRING gtp_endpoint_b_ip 55
|
||
STRING gtp_endpoint_a_port 56
|
||
STRING gtp_endpoint_b_port 57
|
||
STRING gtp_a2b_teid 58
|
||
STRING gtp_b2a_teid 59
|
||
STRING mpls_c2s_direction_label 60
|
||
STRING mpls_s2c_direction_label 61
|
||
STRING vlan_c2s_direction_id 62
|
||
STRING vlan_s2c_direction_id 63
|
||
STRING source_mac 64
|
||
STRING destination_mac 65
|
||
STRING c2s_source_mac 66
|
||
STRING c2s_destination_mac 67
|
||
STRING s2c_source_mac 68
|
||
STRING s2c_destination_mac 69
|
||
STRING client_ip 70
|
||
STRING server_ip 71
|
||
STRING pptp_uplink_tunnel_id 72
|
||
STRING pptp_downlink_tunnel_id 73
|
||
STRING common_service_category 74
|
||
STRING common_apn 75
|
||
STRING common_imsi 76
|
||
STRING common_imei 77
|
||
STRING common_phone_number 78
|
||
STRING common_userdefine_app_name 79
|
||
LONG common_mirrored_pkts 80
|
||
LONG common_mirrored_bytes 81
|
||
STRING common_subscriber_id 82
|
||
LONG http_action_file_size 83
|
||
STRING common_link_info_c2s 84
|
||
STRING common_link_info_s2c 85
|
||
STRING quic_version 86
|
||
STRING quic_user_agent 87
|
||
STRING common_device_tag 88
|
||
LONG l2tp_lac2lns_tunnel_id 89
|
||
LONG l2tp_lns2lac_tunnel_id 90
|
||
LONG l2tp_lac2lns_session_id 91
|
||
LONG l2tp_lns2lac_session_id 92
|
||
STRING l2tp_access_concentrator_ip 93
|
||
STRING l2tp_network_server_ip 94
|
||
LONG l2tp_access_concentrator_port 95
|
||
LONG l2tp_network_server_port 96
|
||
STRING l2tp_version 97
|
||
STRING common_packet_capture_file 98
|
||
STRING common_app_behavior 99
|
||
STRING http_url 100
|
||
STRING common_app_identify_info 101
|
||
STRING app_extra_info 102
|
||
STRING http_request_body 103
|
||
STRING http_response_body 104
|
||
STRING mail_eml_file 105
|
||
LONG common_vsys_id 106
|
||
STRING dtls_sni 107
|
||
STRING common_tunnel_endpoint_a_desc 108
|
||
STRING common_tunnel_endpoint_b_desc 109
|
||
LONG common_t_vsys_id 110
|
||
STRING common_app_full_path 111
|
||
LONG common_flags 112
|
||
LONG common_shaping_rule_ids 113
|
||
LONG common_flags_identify_info 114
|