{ "code": 200, "msg": "Success", "data": { "total": 1, "pages": 1, "links": [{ "name": "category_name_query", "source_column": ["fqdn_category_list"], "path": "/v1/policy/object?type=fqdn_category", "key": "category_id", "value": "category_name" }, { "name": "rule_name_query", "source_column": ["security_rule_id", "monitor_rule_id", "proxy_rule_id", "statistics_rule_id", "shaping_rule_id", "sc_rule_id", "security_rule_list", "monitor_rule_list", "shaping_rule_list", "sc_rule_list", "statistics_rule_list", "proxy_rule_list"], "path": "/policy/rule", "key": "ids", "value": "name" }], "page_no": 1, "list": [{ "recv_time": "1713425329", "log_id": "338075132080234516", "decoded_as": "BASE", "session_id": "322142722277131200", "start_timestamp_ms": "2024-04-18T07:26:44.726Z", "end_timestamp_ms": "2024-04-18T07:26:49.426Z", "duration_ms": 4700, "tcp_handshake_latency_ms": 1280, "processing_time": "1713425329", "ingestion_time": "1713425329", "insert_time": "1713425334", "device_id": "9800192208110449", "out_link_id": 65535, "in_link_id": 65535, "data_center": "YGN-MYTEL", "device_group": "YGN-MYTEL", "sled_ip": "10.161.12.15", "address_type": 4, "vsys_id": 1, "t_vsys_id": 1, "flags": "28688", "flags_identify_info": "[1,6,1,3]", "monitor_rule_list": ["215"], "monitor_mirrored_pkts": 15, "monitor_mirrored_bytes": 2248, "client_ip": "10.86.121.127", "client_port": 58574, "client_os_desc": "Android", "client_geolocation": "", "client_asn": null, "subscriber_id": "", "imei": "", "imsi": "", "apn": "", "phone_number": "", "server_ip": "1.94.101.136", "server_port": 7001, "server_os_desc": "Linux", "server_geolocation": "China.Unknown.Unknown..", "server_asn": "55990", "server_fqdn": "", "server_domain": "", "app_transition": "gtp.gtpv2", "app": "gtp", "app_content": "", "ip_protocol": "tcp", "decoded_path": "ETHERNET.MPLS.ETHERNET.VLAN.IPv4.UDP.GTP.IPv4.TCP", "fqdn_category_list": [], "sent_pkts": "9", "received_pkts": "6", "sent_bytes": "1456", "received_bytes": "792", "tcp_c2s_ip_fragments": "0", "tcp_s2c_ip_fragments": "0", "tcp_c2s_lost_bytes": "0", "tcp_s2c_lost_bytes": "0", "tcp_c2s_o3_pkts": "0", "tcp_s2c_o3_pkts": "0", "tcp_c2s_rtx_pkts": "0", "tcp_s2c_rtx_pkts": "0", "tcp_c2s_rtx_bytes": "0", "tcp_s2c_rtx_bytes": "0", "tcp_rtt_ms": 64, "tcp_client_isn": "2941150783", "tcp_server_isn": "2718623916", "packet_capture_file": "", "in_src_mac": "d8:67:d9:4a:87:7f", "out_src_mac": "cc:1a:fa:ec:5a:e0", "in_dest_mac": "cc:1a:fa:ec:5a:e0", "out_dest_mac": "d8:67:d9:4a:87:7f", "encapsulation": "[{\"tunnels_schema_type\":\"GTP\",\"gtp_endpoint_a2b_teid\":1887109754,\"gtp_endpoint_b2a_teid\":335895415,\"gtp_endpoint_a_ip\":\"117.142.233.145\",\"gtp_endpoint_b_ip\":\"103.85.107.11\",\"gtp_endpoint_a_port\":2152,\"gtp_endpoint_b_port\":2152},{\"tunnels_schema_type\":\"VLAN\",\"vlan_c2s_direction_id\":[100],\"vlan_s2c_direction_id\":[100]},{\"tunnels_schema_type\":\"MULTIPATH_ETHERNET\",\"c2s_source_mac\":\"d8:67:d9:4a:87:7f\",\"c2s_destination_mac\":\"cc:1a:fa:ec:5a:e0\",\"s2c_source_mac\":\"cc:1a:fa:ec:5a:e0\",\"s2c_destination_mac\":\"d8:67:d9:4a:87:7f\"},{\"tunnels_schema_type\":\"MPLS\",\"mpls_c2s_direction_label\":[48108,48004],\"mpls_s2c_direction_label\":[0,48142]},{\"tunnels_schema_type\":\"MULTIPATH_ETHERNET\",\"c2s_source_mac\":\"28:b4:48:5d:37:0c\",\"c2s_destination_mac\":\"c8:b6:d3:72:e3:9c\",\"s2c_source_mac\":\"c8:b6:d3:72:e4:b9\",\"s2c_destination_mac\":\"28:b4:48:5d:37:0c\"}]", "dup_traffic_flag": 0, "tunnel_endpoint_a_desc": "", "tunnel_endpoint_b_desc": "", "http_url": "", "http_host": "", "http_request_line": "", "http_response_line": "", "http_request_content_length": null, "http_request_content_type": "", "http_response_content_length": null, "http_response_content_type": "", "http_request_body": "", "http_response_body": "", "http_sequence": null, "http_cookie": "", "http_referer": "", "http_user_agent": "", "http_set_cookie": "", "http_version": "", "http_status_code": null, "http_response_latency_ms": null, "http_action_file_size": null, "http_session_duration_ms": null, "mail_protocol_type": "", "mail_account": "", "mail_from_cmd": "", "mail_to_cmd": "", "mail_from": "", "mail_password": "", "mail_to": "", "mail_cc": "", "mail_bcc": "", "mail_subject": "", "mail_subject_charset": "", "mail_attachment_name": "", "mail_attachment_name_charset": "", "mail_eml_file": "", "dns_message_id": null, "dns_qr": null, "dns_opcode": null, "dns_aa": null, "dns_tc": null, "dns_rd": null, "dns_ra": null, "dns_rcode": null, "dns_qdcount": null, "dns_ancount": null, "dns_nscount": null, "dns_arcount": null, "dns_qname": "", "dns_qtype": null, "dns_qclass": null, "dns_cname": "", "dns_sub": null, "dns_rr": "", "dns_response_latency_ms": null, "ssl_version": "", "ssl_sni": "", "ssl_san": "", "ssl_cn": "", "ssl_handshake_latency_ms": null, "ssl_ja3_hash": "", "ssl_ja3s_hash": "", "ssl_cert_issuer": "", "ssl_cert_subject": "", "ssl_esni_flag": null, "ssl_ech_flag": null, "dtls_cookie": "", "dtls_version": "", "dtls_sni": "", "dtls_san": "", "dtls_cn": "", "dtls_handshake_latency_ms": null, "dtls_ja3_fingerprint": "", "dtls_ja3_hash": "", "dtls_cert_issuer": "", "dtls_cert_subject": "", "quic_version": "", "quic_sni": "", "quic_user_agent": "", "ftp_account": "", "ftp_url": "", "ftp_link_type": "", "sip_call_id": "", "sip_originator_description": "", "sip_responder_description": "", "sip_user_agent": "", "sip_server": "", "sip_originator_sdp_connect_ip": "", "sip_originator_sdp_media_port": null, "sip_originator_sdp_media_type": "", "sip_originator_sdp_content": "", "sip_responder_sdp_connect_ip": "", "sip_responder_sdp_media_port": null, "sip_responder_sdp_media_type": "", "sip_responder_sdp_content": "", "sip_duration_s": null, "sip_bye": "", "rtp_payload_type_c2s": null, "rtp_payload_type_s2c": null, "rtp_pcap_path": "", "rtp_originator_dir": null, "ssh_version": "", "ssh_auth_success": "", "ssh_client_version": "", "ssh_server_version": "", "ssh_cipher_alg": "", "ssh_mac_alg": "", "ssh_compression_alg": "", "ssh_kex_alg": "", "ssh_host_key_alg": "", "ssh_host_key": "", "ssh_hassh": "", "stratum_cryptocurrency": "", "stratum_mining_pools": "", "stratum_mining_program": "", "stratum_mining_subscribe": "", "rdp_cookie": "", "rdp_security_protocol": "", "rdp_client_channels": "", "rdp_keyboard_layout": "", "rdp_client_version": "", "rdp_client_name": "", "rdp_client_product_id": "", "rdp_desktop_width": "", "rdp_desktop_height": "", "rdp_requested_color_depth": "", "rdp_certificate_type": "", "rdp_certificate_count": null, "rdp_certificate_permanent": null, "rdp_encryption_level": "", "rdp_encryption_method": "" }], "page_size": 20 }, "success": true }