{ "signatures": [ { "andConditions": [ { "notFlag": 0, "orConditions": [ { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-hl-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-a-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p95-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p11.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p0-private.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-ttcp-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-017.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldl.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api-play.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api13-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-mptcp.filve.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-cny01-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-c-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v13-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-i.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-colda.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldi.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-016.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldg.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v27-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v99-coldx.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldf.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-j.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-x.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p29.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-io-flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv26.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf86-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "222-222-194-4-ad3fcaf9.free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un80.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un803.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v9-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v97.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-hl.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-lf-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-g.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf26-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un802.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un801.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog5-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldk.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-e.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-d-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf1-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-sh.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-h.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-ecom-toc.jinritemai.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "http.host", "protocol": "http", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-fe.ecombdstatic.com" } ] } ] } ], "iconColor": "", "signatureDesc": "", "signatureId": 2047, "signatureName": "douyin_20230509_http" }, { "andConditions": [ { "notFlag": 0, "orConditions": [ { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-hl-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-a-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p95-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p11.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p0-private.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-ttcp-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-017.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldl.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api-play.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api13-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-mptcp.filve.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-cny01-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-c-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v13-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-i.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-colda.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldi.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-016.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldg.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v27-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v99-coldx.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldf.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-j.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-x.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p29.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-io-flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv26.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf86-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "222-222-194-4-ad3fcaf9.free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un80.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un803.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v9-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v97.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-hl.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-lf-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-g.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf26-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un802.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un801.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog5-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldk.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-e.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-d-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf1-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-sh.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-h.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-ecom-toc.jinritemai.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "quic.sni", "protocol": "quic", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-fe.ecombdstatic.com" } ] } ] } ], "iconColor": "", "signatureDesc": "", "signatureId": 2046, "signatureName": "douyin_20230509_quic" }, { "andConditions": [ { "notFlag": 0, "orConditions": [ { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-hl-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-a-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p95-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p11.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p0-private.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-ttcp-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-017.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldl.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api-play.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api13-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-mptcp.filve.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-cny01-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-c-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v13-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-i.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-colda.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldi.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-016.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldg.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v27-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v99-coldx.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldf.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-j.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-x.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p29.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-io-flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv26.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf86-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "222-222-194-4-ad3fcaf9.free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un80.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un803.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v9-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v97.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-hl.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-lf-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-g.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf26-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un802.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un801.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog5-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldk.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-e.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-d-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf1-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-sh.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-h.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-ecom-toc.jinritemai.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "ssl.handshake.extensions_server_name", "protocol": "ssl", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-fe.ecombdstatic.com" } ] } ] } ], "iconColor": "", "signatureDesc": "", "signatureId": 2045, "signatureName": "douyin_20230509_sni" }, { "andConditions": [ { "notFlag": 0, "orConditions": [ { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-hl-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-a-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p95-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p11.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p0-private.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-webcast.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-ttcp-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-017.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldl.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api-play.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api13-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-mptcp.filve.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-cny01-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-c-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p5-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-p.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v13-a.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-i.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-colda.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldi.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hb-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v83-016.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldg.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v27-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v99-coldx.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-hn-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldf.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-sep-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-j.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold1.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v11-x.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p29.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-webcast-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-vr-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-io-flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-vs.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-f5-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-tsl-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11.source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-rtmp-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l3.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-lls-f5.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-l3-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-vs.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe01.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-spe.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-io.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-hot.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hs-f5-encryption.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-vs-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-tsl.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-hls-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-vr-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l95.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-source.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l6-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l3-enc.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l29.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l26-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l13.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-encryption.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l11-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-l1-cny.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-hs-f5-enc.flive.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f96.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f6.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-f1-proxy.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v26.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast100-ws-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv26.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-spe-l3.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-tsl-hs-spe-f5.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf86-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "right", "format": "uncase plain", "keywordObj": [ { "keywords": ".free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "222-222-194-4-ad3fcaf9.free-lbv6.idouyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log0-misc-alinc2-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log3-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom3-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un80.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un803.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-zj.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search100-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v3-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast26-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v9-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "log5-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "mon11-misc-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search3-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v97.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec3-core-hl.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api5-normal-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier-aweme-lf-ipainner.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-g.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "search5-search-hl.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-normal-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf26-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-im-opt-exp.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "pull-flv-spe-l11.douyinliving.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "push-rtmp-hs-spe-f5.douyincdn.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un802.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v6-chb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "webcast5-core-c-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-re-un801.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf9-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-webcastcdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api26-core-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog5-applog-lq.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldk.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-e.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v1-cold.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "rtlog3-applog-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-d-sign.douyinpic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "frontier100-aweme-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "sf1-cdn-tos.douyinstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "api3-normal-quic-lf.amemv.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v95-sh.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-coldb.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "v5-h.douyinvod.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p26-item.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf6-cm.ecombdstatic.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-aio.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf3-ecom-toc.jinritemai.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p9-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p3-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "p6-cm-sign.ecombdimg.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lq.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ec5-core-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "ecom5-normal-lf.ecombdapi.com" } ] }, { "attributeType": "string", "attributeName": "dns.qry.name", "protocol": "dns", "exprType": "none", "matchMethod": "complete", "format": "uncase plain", "keywordObj": [ { "keywords": "lf1-fe.ecombdstatic.com" } ] } ] } ], "iconColor": "", "signatureDesc": "", "signatureId": 2041, "signatureName": "douyin_20230509_dns" } ], "applications": [ { "appName": "douyin_20230509", "appLongname": "douyin_20230509", "appId": 15534, "description": "", "appProperties": { "category": "business-systems", "characteristics": "", "continueScanning": 0, "denyAction": { "method": "drop", "after_n_packets": 0, "send_icmp_unreachable": 0, "send_tcp_reset": 1 }, "parentAppId": 0, "parentAppName": "", "risk": "1", "subcategory": "auth-service", "tcpHalfClose": 0, "tcpTimeWait": 0, "tcpTimeout": 0, "technology": "browser-based", "udpTimeout": 0 }, "appSurrogates": [ { "group_by": "session", "ordered_match": "no", "signature_sequence": [ { "signature": "douyin_20230509_http", "exclude": 0 } ], "time_window": 0 }, { "group_by": "session", "ordered_match": "no", "signature_sequence": [ { "signature": "douyin_20230509_quic", "exclude": 0 } ], "time_window": 0 }, { "group_by": "session", "ordered_match": "no", "signature_sequence": [ { "signature": "douyin_20230509_sni", "exclude": 0 } ], "time_window": 0 }, { "group_by": "session", "ordered_match": "no", "signature_sequence": [ { "signature": "douyin_20230509_dns", "exclude": 0 } ], "time_window": 0 } ], "seqNo": 15534, "opUser": -1 } ] }