标题,含义,数据类型,覆盖率
:ips,源IP,IPv4,100%
:ipd,目标IP,IPv4,100%
:ips.latd,源IP纬度,浮点,99.26%
:ipd.latd,目标IP纬度,浮点,98.74%
:ips.lond,源IP经度,浮点,99.26%
:ipd.lond,目标IP经度,浮点,98.74%
:ips.ispn,源IP的ISP名称,字符串,93.18%
:ipd.ispn,目标IP的ISP名称,字符串,97.61%
:ips.orgn,源IP组织名称,字符串,93.18%
:ipd.orgn,目标IP组织名称,字符串,97.61%
:ips.city,源IP所在城市,字符串,99.26%
:ipd.city,目标IP所在城市,字符串,98.74%
:ips.anon,源IP匿名状态,"anon, hosting"或"anon, vpn"或"anon, server"或无,12.66%
:ipd.anon,目标IP匿名状态,"anon, hosting"或"anon, vpn"或"anon, server"或无,15.54%
:ips.doma,源IP域名,字符串,28.91%
:ipd.doma,目标IP域名,字符串,13.48%
:prs,源端口,整数,100%
:prd,目标端口,整数,100%
scnt,源国家,2小写字母缩写,100%
dcnt,目标国家,2小写字母缩写,100%
server-ip,服务器IP,IPv4,100%
client-ip,客户端IP,IPv4,100%
time,时间,202X-XX-XX XX:XX:XX.XXXXXX,100%
timestamp,时间戳,六位小数浮点,100%
1ipp,IP协议编号,整数,100%
4dbn,数据库编号,整数,100%
tabl,数据库表头名,"TlsC"/"TlsS",100%
4ksz,密钥大小,整数,23.85%
cnrs,可否恢复,布尔,92.35%
isrs,是否恢复,布尔,76.12%
cnam,证书通用名称,字符串,12.81%
0ver,TLS版本,2字节,100%
snam,服务器名,字符串,45.85%
4dur,传输持续时间,整数,100%
8seq,会话偏移量,整数,100%
2tmo,数据库时间与会话结束时间偏移量,整数,100%
name,链路名称,枚举,100%
source-node,源节点,枚举,100%
cipher-suite,加密套件,诸如"TLS_ECHDE_ECDSA_WITH_AES_256_GCM_SHA384"的枚举,13.90%
ecdhe-named-curve,ecdhe使用的圆锥曲线名称,secpXXXr1(其中XXX为三位数字),10.73%
0cph,TLS加密套件,2字节,52.14%
0crv,TLS圆锥曲线名称,2字节,12.45%
0rnd,TLS随机值,28字节,99.14%
0rnt,TLS随机时间,4字节,100%
8ack,反向方向字节数,整数,100%
8pak,数据包数量,整数,100%
8did,记录本地数据库ID,整数,100%
4srs,Luciferin ID(系统或设备标识符),整数,100%
8ppk,有效载荷数据包数量,整数,100%
8ses,会话偏移量,整数,100%
8byt,实际观察到有效载荷字节数,整数,100%
8dbd,数据库日志起始时间戳,整数,100%
crcc,,2大写字母,6.27%
orga,,字符串,6.28%
orgu,,字符串或整数,5.03%
eiph,,布尔,0.06%
@iph,,2字母,0.06%