{ "common_recv_time": "1679288652", "common_log_id": "1241605473179125803", "common_stream_trace_id": "297327824860947860", "common_direction": "69", "common_stream_dir": "3", "common_start_time": "1679288618", "common_end_time": "1679288652", "common_con_duration_ms": "33828", "common_establish_latency_ms": "224", "common_processing_time": "1679288653", "common_ingestion_time": "1679288652", "common_entrance_id": "0", "common_device_id": "21426007", "common_egress_link_id": null, "common_ingress_link_id": null, "common_isp": "", "common_data_center": "", "common_sled_ip": "10.225.11.4", "common_device_group": "BOL-IGW", "common_app_behavior": "", "common_action": "0", "common_sub_action": "", "common_policy_id": "0", "common_user_tags": "", "common_user_region": "", "common_client_ip": "196.189.240.199", "common_internal_ip": "196.189.240.199", "common_client_port": "33981", "common_client_location": "Ethiopia.Other.Other", "common_client_asn": "24757", "common_subscriber_id": "", "common_imei": "", "common_imsi": "", "common_phone_number": "", "common_server_ip": "87.250.250.207", "common_external_ip": "87.250.250.207", "common_server_port": "443", "common_server_location": "Russia.Other.Other", "common_server_asn": "13238", "common_app_id": "{\"THIRD\":[{\"app_name\":\"yandex\",\"app_id\":523,\"surrogate_id\":0,\"packet_sequence\":4}]}", "common_userdefine_app_name": "", "common_app_identify_info": "[{\"app_name\":\"yandex\",\"packet_sequence\":4}]", "common_app_label": "yandex", "common_app_surrogate_id": "", "common_l7_protocol": "HTTPS", "common_protocol_label": "ETHERNET.IPv4.TCP", "common_service_category": [ "1029", "1054" ], "common_service": "0", "common_l4_protocol": "IPv4_TCP", "common_sessions": "1", "common_c2s_pkt_num": "14", "common_s2c_pkt_num": "13", "common_c2s_pkt_diff": "14", "common_s2c_pkt_diff": "13", "common_c2s_byte_num": "6803517918177926166", "common_s2c_byte_num": "33156", "common_c2s_byte_diff": "6803517918177926166", "common_s2c_byte_diff": "33156", "common_c2s_ipfrag_num": "0", "common_s2c_ipfrag_num": "0", "common_c2s_tcp_lostlen": "0", "common_s2c_tcp_lostlen": "0", "common_c2s_tcp_unorder_num": "0", "common_s2c_tcp_unorder_num": "0", "common_c2s_pkt_retrans": "0", "common_s2c_pkt_retrans": "0", "common_c2s_byte_retrans": "0", "common_s2c_byte_retrans": "0", "common_first_ttl": "61", "common_tcp_client_isn": "2627347684", "common_tcp_server_isn": "1225175342", "common_mirrored_pkts": "0", "common_mirrored_bytes": "0", "common_address_type": "4", "common_schema_type": "SSL", "common_device_tag": "{\"tags\":[{\"tag\":\"device_group\",\"value\":\"BOL-IGW\"}]}", "common_encapsulation": "0", "common_tunnels": "", "common_address_list": "", "common_has_dup_traffic": "0", "common_stream_error": "", "common_link_info_c2s": "{\"functional_ip\":\"10.225.11.4\",\"thread_count\":48,\"relative_location\":\"internal\",\"hash_dist\":3,\"hash_algo\":0,\"linkinfo\":[{\"type\":\"ethernet\",\"src\":\"90:00:00:91:40:46\",\"dst\":\"0a:0a:0a:0a:00:10\"},{\"type\":\"tuple4v4\",\"sip\":\"10.252.22.1\",\"dip\":\"10.10.0.16\",\"sport\":54789,\"dport\":4789},{\"type\":\"vxlan\",\"vlanid\":0,\"dir\":0,\"linkid\":28,\"linktype\":0},{\"type\":\"ethernet\",\"src\":\"d4:c1:c8:98:c7:60\",\"dst\":\"d4:c1:c8:8f:ac:f0\"}]}", "common_link_info_s2c": "{\"functional_ip\":\"10.225.11.4\",\"thread_count\":48,\"relative_location\":\"external\",\"hash_dist\":3,\"hash_algo\":0,\"linkinfo\":[{\"type\":\"ethernet\",\"src\":\"90:00:00:91:40:46\",\"dst\":\"0a:0a:0a:0a:00:10\"},{\"type\":\"tuple4v4\",\"sip\":\"10.252.22.1\",\"dip\":\"10.10.0.16\",\"sport\":54789,\"dport\":4789},{\"type\":\"vxlan\",\"vlanid\":0,\"dir\":1,\"linkid\":28,\"linktype\":0},{\"type\":\"ethernet\",\"src\":\"d4:c1:c8:8f:ac:f0\",\"dst\":\"d4:c1:c8:98:c7:60\"}]}", "common_packet_capture_file": "", "http_url": "", "http_host": "", "http_domain": "yandex.net", "http_request_line": "", "http_response_line": "", "http_request_header": "", "http_response_header": "", "http_request_content": "", "http_response_content": "", "http_request_body": "", "http_response_body": "", "http_request_body_key": "", "http_response_body_key": "", "http_proxy_flag": "0", "http_sequence": "0", "http_snapshot": "", "http_cookie": "", "http_referer": "", "http_user_agent": "", "http_request_content_length": "", "http_request_content_type": "", "http_response_content_length": "", "http_response_content_type": "", "http_content_length": "", "http_content_type": "", "http_set_cookie": "", "http_version": "", "http_response_latency_ms": "0", "http_session_duration_ms": "0", "http_action_file_size": "0", "mail_protocol_type": "", "mail_account": "", "mail_to_cmd": "", "mail_from_cmd": "", "mail_from": "", "mail_to": "", "mail_cc": "", "mail_bcc": "", "mail_subject": "", "mail_subject_charset": "", "mail_content": "", "mail_content_charset": "", "mail_attachment_name": "", "mail_attachment_name_charset": "", "mail_attachment_content": "", "mail_eml_file": "", "mail_snapshot": "", "dns_message_id": "0", "dns_qr": null, "dns_opcode": null, "dns_aa": "0", "dns_tc": "0", "dns_rd": "0", "dns_ra": "0", "dns_rcode": "0", "dns_qdcount": "0", "dns_ancount": "0", "dns_nscount": "0", "dns_arcount": "0", "dns_qname": "", "dns_qtype": "0", "dns_qclass": "0", "dns_cname": "", "dns_sub": "0", "dns_rr": "", "dns_response_latency_ms": "0", "ssl_version": "", "ssl_sni": "report.appmetrica.yandex.net", "ssl_san": "", "ssl_cn": "", "ssl_pinningst": null, "ssl_intercept_state": null, "ssl_passthrough_reason": "", "ssl_server_side_latency": null, "ssl_client_side_latency": null, "ssl_server_side_version": "", "ssl_client_side_version": "", "ssl_cert_verify": null, "ssl_error": "", "ssl_con_latency_ms": "562", "ssl_ja3_fingerprint": "", "ssl_ja3_hash": "9b02ebd3a43b62d825e1ac605b621dc8", "ssl_cert_issuer": "", "ssl_cert_subject": "", "quic_version": "", "quic_sni": "", "quic_user_agent": "", "ftp_account": "", "ftp_url": "", "ftp_content": "", "ftp_link_type": "", "bgp_type": "0", "bgp_as_num": "", "bgp_route": "", "voip_calling_account": "", "voip_called_account": "", "voip_calling_number": "", "voip_called_number": "", "streaming_media_url": "", "streaming_media_protocol": "", "app_extra_info": "", "rdp_cookie": "", "rdp_security_protocol": "", "rdp_client_channels": "", "rdp_keyboard_layout": "", "rdp_client_version": "", "rdp_client_name": "", "rdp_client_product_id": "", "rdp_desktop_width": "", "rdp_desktop_height": "", "rdp_requested_color_depth": "", "rdp_certificate_type": "", "rdp_certificate_count": "0", "rdp_certificate_permanent": "0", "rdp_encryption_level": "", "rdp_encryption_method": "", "sip_call_id": "", "sip_originator_description": "", "sip_responder_description": "", "sip_user_agent": "", "sip_server": "", "sip_originator_sdp_connect_ip": "", "sip_originator_sdp_media_port": "0", "sip_originator_sdp_media_type": "", "sip_originator_sdp_content": "", "sip_responder_sdp_connect_ip": "", "sip_responder_sdp_media_port": "0", "sip_responder_sdp_media_type": "", "sip_responder_sdp_content": "", "sip_duration_s": "0", "sip_bye": "", "rtp_payload_type_c2s": null, "rtp_payload_type_s2c": null, "rtp_pcap_path": "", "rtp_originator_dir": "0", "ssh_version": "", "ssh_auth_success": "", "ssh_client_version": "", "ssh_server_version": "", "ssh_cipher_alg": "", "ssh_kex_alg": "", "ssh_host_key_alg": "", "ssh_host_key": "", "ssh_mac_alg": "", "ssh_compression_alg": "", "ssh_hassh": "", "stratum_cryptocurrency": "", "stratum_mining_pools": "", "stratum_mining_program": "" }