{"expand":"renderedFields,names,schema,operations,editmeta,changelog,versionedRepresentations","id":"26673","self":"https://jira.geedge.net/rest/api/2/issue/26673","key":"OMPUB-472","fields":{"issuetype":{"self":"https://jira.geedge.net/rest/api/2/issuetype/10004","id":"10004","description":"","iconUrl":"https://jira.geedge.net/secure/viewavatar?size=xsmall&avatarId=10303&avatarType=issuetype","name":"故障","subtask":false,"avatarId":10303},"components":[],"timespent":null,"timeoriginalestimate":null,"description":"新疆IDC环境中，CN生成的服务质量报告显示，Unknow Application排名第二、流量占比为14%。该APP流量情况及描述信息如下：\r\n{code:java}\r\ndescription:\r\nUnknown is a virtual protocol created for DPI that represents flows that are not recognized by the system. Most of the time, its presence is due to the existence of a business application whose specifications are not made available to the public. Such flows can be defined in the system by means of a User Defined Application\r\n{code}\r\n \r\n\r\n!image-2022-04-20-11-49-03-101.png|width=579,height=247!\r\n\r\n查看APP详情页发现，标记为Unknow APP的流量中，主要为快手、抖音等提供的服务。同时，识别为kuaishou application的流量仅占总流量的1.3%，不符合预期。  !image-2022-04-20-12-01-34-024.png|width=583,height=268!\r\n\r\n ","project":{"self":"https://jira.geedge.net/rest/api/2/project/10206","id":"10206","key":"OMPUB","name":"Operation and Maintenance","projectTypeKey":"business","avatarUrls":{"48x48":"https://jira.geedge.net/secure/projectavatar?pid=10206&avatarId=10715","24x24":"https://jira.geedge.net/secure/projectavatar?size=small&pid=10206&avatarId=10715","16x16":"https://jira.geedge.net/secure/projectavatar?size=xsmall&pid=10206&avatarId=10715","32x32":"https://jira.geedge.net/secure/projectavatar?size=medium&pid=10206&avatarId=10715"},"projectCategory":{"self":"https://jira.geedge.net/rest/api/2/projectCategory/10002","id":"10002","description":"系统运维","name":"MaintenanceDev"}},"fixVersions":[],"aggregatetimespent":null,"resolution":{"self":"https://jira.geedge.net/rest/api/2/resolution/10101","id":"10101","description":"Sometime solution has been changed, and the issue go to meaningless","name":"Unavailable"},"timetracking":{},"customfield_10401":null,"customfield_10104":null,"customfield_10402":null,"customfield_10105":"0|i02qb0:","customfield_10403":null,"customfield_10404":null,"attachment":[{"self":"https://jira.geedge.net/rest/api/2/attachment/27259","id":"27259","filename":"image-2022-04-20-11-49-03-101.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-20T11:49:03.661+0800","size":655950,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27259/image-2022-04-20-11-49-03-101.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27259/_thumb_27259.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/27257","id":"27257","filename":"image-2022-04-20-12-01-34-024.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-20T12:01:35.052+0800","size":1191500,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27257/image-2022-04-20-12-01-34-024.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27257/_thumb_27257.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/27692","id":"27692","filename":"image-20220429122249102.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-29T12:57:37.126+0800","size":147137,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27692/image-20220429122249102.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27692/_thumb_27692.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/27691","id":"27691","filename":"image-2022-04-29-12-55-35-415.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-29T12:55:34.946+0800","size":157112,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27691/image-2022-04-29-12-55-35-415.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27691/_thumb_27691.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/27721","id":"27721","filename":"image-2022-05-05-14-41-06-885.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T14:41:07.063+0800","size":15041,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27721/image-2022-05-05-14-41-06-885.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27721/_thumb_27721.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/27722","id":"27722","filename":"image-2022-05-05-14-43-20-912.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T14:43:21.119+0800","size":75245,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27722/image-2022-05-05-14-43-20-912.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27722/_thumb_27722.png"},{"self":"https://jira.geedge.net/rest/api/2/attachment/27724","id":"27724","filename":"image-2022-05-05-14-44-43-675.png","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T14:44:43.936+0800","size":148204,"mimeType":"image/png","content":"https://jira.geedge.net/secure/attachment/27724/image-2022-05-05-14-44-43-675.png","thumbnail":"https://jira.geedge.net/secure/thumbnail/27724/_thumb_27724.png"}],"aggregatetimeestimate":null,"resolutiondate":"2022-06-08T17:27:56.369+0800","workratio":-1,"summary":"【XJ-NPM现场】APP sketch中Unknown Application情况","lastViewed":null,"watches":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-472/watchers","watchCount":5,"isWatching":false},"creator":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"subtasks":[],"created":"2022-04-20T12:02:19.577+0800","reporter":{"self":"https://jira.geedge.net/rest/api/2/user?username=yinjiangyi","name":"yinjiangyi","key":"JIRAUSER10307","emailAddress":"yinjiangyi@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/6be446933247b34320483e6eda3c73e3?d=mm&s=32"},"displayName":"尹姜谊","active":true,"timeZone":"Asia/Shanghai"},"customfield_10000":"{summaryBean=com.atlassian.jira.plugin.devstatus.rest.SummaryBean@6bf6b344[summary={pullrequest=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@5c09d905[overall=PullRequestOverallBean{stateCount=0, state='OPEN', details=PullRequestOverallDetails{openCount=0, mergedCount=0, declinedCount=0}},byInstanceType={}], build=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@25693198[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BuildOverallBean@37ba15c1[failedBuildCount=0,successfulBuildCount=0,unknownBuildCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], review=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@2437967b[overall=com.atlassian.jira.plugin.devstatus.summary.beans.ReviewsOverallBean@14021a8[stateCount=0,state=<null>,dueDate=<null>,overDue=false,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], deployment-environment=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@6d4925e9[overall=com.atlassian.jira.plugin.devstatus.summary.beans.DeploymentOverallBean@a3a219c[topEnvironments=[],showProjects=false,successfulCount=0,count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], repository=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@1226eaee[overall=com.atlassian.jira.plugin.devstatus.summary.beans.CommitOverallBean@12ebd463[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}], branch=com.atlassian.jira.plugin.devstatus.rest.SummaryItemBean@36a9ddba[overall=com.atlassian.jira.plugin.devstatus.summary.beans.BranchOverallBean@6d442c32[count=0,lastUpdated=<null>,lastUpdatedTimestamp=<null>],byInstanceType={}]},errors=[],configErrors=[]], devSummaryJson={\"cachedValue\":{\"errors\":[],\"configErrors\":[],\"summary\":{\"pullrequest\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":\"OPEN\",\"details\":{\"openCount\":0,\"mergedCount\":0,\"declinedCount\":0,\"total\":0},\"open\":true},\"byInstanceType\":{}},\"build\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"failedBuildCount\":0,\"successfulBuildCount\":0,\"unknownBuildCount\":0},\"byInstanceType\":{}},\"review\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"stateCount\":0,\"state\":null,\"dueDate\":null,\"overDue\":false,\"completed\":false},\"byInstanceType\":{}},\"deployment-environment\":{\"overall\":{\"count\":0,\"lastUpdated\":null,\"topEnvironments\":[],\"showProjects\":false,\"successfulCount\":0},\"byInstanceType\":{}},\"repository\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}},\"branch\":{\"overall\":{\"count\":0,\"lastUpdated\":null},\"byInstanceType\":{}}}},\"isStale\":false}}","aggregateprogress":{"progress":0,"total":0},"customfield_10100":null,"priority":{"self":"https://jira.geedge.net/rest/api/2/priority/3","iconUrl":"https://jira.geedge.net/images/icons/priorities/medium.svg","name":"Medium","id":"3"},"customfield_10200":null,"customfield_10400":null,"labels":["XJ-CUCC-IDC"],"environment":null,"timeestimate":null,"aggregatetimeoriginalestimate":null,"versions":[],"duedate":"2022-05-09","progress":{"progress":0,"total":0},"issuelinks":[],"comment":{"comments":[{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40352","id":"40352","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=lizhao","name":"lizhao","key":"JIRAUSER10139","emailAddress":"lizhao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10139&avatarId=11202","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10139&avatarId=11202","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10139&avatarId=11202","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10139&avatarId=11202"},"displayName":"李钊","active":true,"timeZone":"Asia/Shanghai"},"body":"该问题已移至ompub，需现场运维同事协助解决。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=lizhao","name":"lizhao","key":"JIRAUSER10139","emailAddress":"lizhao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10139&avatarId=11202","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10139&avatarId=11202","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10139&avatarId=11202","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10139&avatarId=11202"},"displayName":"李钊","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-21T16:32:10.967+0800","updated":"2022-04-21T16:32:10.967+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40877","id":"40877","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"body":"1、通过CN界面中unknown --> 流量 中相关域名排名 TOP10的域名是kwimgs.com，vivo.com.cn，lxdns.net，douyinvod.com，heytapimage.com，douyincdn.com，badambiz.com，douyinstatic.com，pangolin-sdk-toutiao.com，toutiaoapi.com，\r\n\r\n2、识别为unknown的 TOP10 域名中，douyin开头的有三个，分别是douyinvod.com，douyincdn.com，douyinstatic.com，通过CN界面中搜索douyin --> 流量 中相关域名排名 TOP10的域名douyinvod.com，amemv.com，douyinpic.com，dbankcdn.com，weathercn.com，yximgs.com，heytapdownload.com，snssdk.com，kwimgs.com，bytegecko.com\r\n\r\n识别为douyin APP的 TOP10域名 douyinvod.com，amemv.com，douyinpic.com，dbankcdn.com，weathercn.com，yximgs.com，heytapdownload.com，snssdk.com，kwimgs.com，bytegecko.com\r\n\r\n识别为unknown APP的 TOP10域名 kwimgs.com，vivo.com.cn，lxdns.net，douyinvod.com，heytapimage.com，douyincdn.com，badambiz.com，douyinstatic.com，pangolin-sdk-toutiao.com，toutiaoapi.com\r\n\r\n其中 kwimgs.com和douyincdn.com同时出现在douyin和unknown 中，unknown中的douyincdn.com和douyinstatic.com明显是属于douyin app的域名。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-29T12:56:37.231+0800","updated":"2022-04-29T12:56:37.231+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40896","id":"40896","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"body":"初步将unknown中TOP100的域名根据备案公司名称 配置到新的自定义APP中，经与[~lizhao] 讨论，对于CN来说会有问题，暂时不进行配置。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-29T17:33:35.323+0800","updated":"2022-04-29T17:33:35.323+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40906","id":"40906","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"body":"使用联通手机号拨测douyin的流量，一部分去了新疆联通IDC，一部分去了新疆联通省口；\r\n\r\n4次抓包，同一域名v26-web.douyinvod.com每次分别与新疆联通IDC的1个IP建立TLS连接，查看日志，common_app_label两次被识别为douyin，两次被识别为300hu。\r\n\r\nPCAP与导出的会话日志：https://files.geedge.net/d/084c3b79b96648b6b889/","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-29T19:29:06.415+0800","updated":"2022-05-05T10:30:24.108+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40907","id":"40907","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=lizhao","name":"lizhao","key":"JIRAUSER10139","emailAddress":"lizhao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10139&avatarId=11202","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10139&avatarId=11202","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10139&avatarId=11202","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10139&avatarId=11202"},"displayName":"李钊","active":true,"timeZone":"Asia/Shanghai"},"body":"# app识别不会完全准确，这个可以接受。\r\n # 目前存在一些未识别的APP流量，如果能够通过增加已有APP特征，把其中用户特别关注的流量修正一下最好。\r\n # 目前只支持增加新APP修正这部分流量，建议暂时先不修正，影响不大。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=lizhao","name":"lizhao","key":"JIRAUSER10139","emailAddress":"lizhao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10139&avatarId=11202","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10139&avatarId=11202","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10139&avatarId=11202","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10139&avatarId=11202"},"displayName":"李钊","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-04-29T20:12:53.695+0800","updated":"2022-04-29T20:13:12.644+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40927","id":"40927","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"body":" \r\n||抓包次数||数据包||数据包中会话数||APP识别连接数||APP识别结果||\r\n|第一次|[第一次抓包.pcap|https://files.geedge.net/d/084c3b79b96648b6b889/files/?p=%2F%E7%AC%AC%E4%B8%80%E6%AC%A1%2F%E7%AC%AC%E4%B8%80%E6%AC%A1%E6%8A%93%E5%8C%85.pcap]|1|1|douyin|\r\n|第二次|[cucc-idc-2.pcap|https://files.geedge.net/d/084c3b79b96648b6b889/files/?p=%2F%E7%AC%AC%E4%BA%8C%E6%AC%A1%2Fcucc-idc-2.pcap]|19|19|douyin|\r\n|第三次|[第三次抓包.pcap|https://files.geedge.net/d/084c3b79b96648b6b889/files/?p=%2F%E7%AC%AC%E4%B8%89%E6%AC%A1%2F%E7%AC%AC%E4%B8%89%E6%AC%A1%E6%8A%93%E5%8C%85.pcap]|25|24|douyin|\r\n|第四次|[第四次抓包.pcap|https://files.geedge.net/d/084c3b79b96648b6b889/files/?p=%2F%E7%AC%AC%E5%9B%9B%E6%AC%A1%2F%E7%AC%AC%E5%9B%9B%E6%AC%A1%E6%8A%93%E5%8C%85.pcap]|30|30|douyin|\r\n\r\n结论：\r\n\r\n以上数据包，第三方识别引擎能正常识别，不存在误识别现象\r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T14:46:37.249+0800","updated":"2022-05-05T15:30:45.788+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40930","id":"40930","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"body":"[~jiayimeng] 看前述描述，我理解现在存在的问题如下：\r\n\r\n背景：\r\n\r\n        联通CN探针目前仅启用第三方DPI进行App识别\r\n\r\n现象：\r\n # 观察整体App识别结果，标识为unknow的会话中，存在包含“douyin”的FQDN\r\n # 通过四次拨测，发现存在拨测客户端访问抖音的行为，在CN的会话记录日志中，被误识别为300hu，经伟浩读包测试，发现都被正确识别为douyin\r\n\r\n可能的问题：\r\n\r\n       现象1：第三方DPI的识别逻辑可能是IP，也可能是FQDN，在没有捕获到识别为unknow的pcap包并且读包复现前，不好下定论，也没法跟第三方DPI交流误识别的问题\r\n\r\n      现象2：对于拨测行为有识别为300hu的现象，结合伟浩前述本地读包没有误识别的结果，怀疑为AppID->AppLabel的映射有误\r\n\r\n \r\n\r\n后续操作：\r\n\r\n      现象1：继续拨测，或者在CN探针(TSG功能端)尝试捕获识别为unknow的流量，尝试找到能够复现识别为unknow的包\r\n\r\n      现象2：提供下原始的会话记录日志（SESSION_RECORD）信息，协助确认是否由于AppID->AppLabel映射错误导致的误识别，common_app_id字段中包含原始的AppID，此外不排除现象1与现象2原因相同的可能性\r\n\r\n ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=yangwei","name":"yangwei","key":"JIRAUSER10103","emailAddress":"yangwei@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10103&avatarId=10708","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10103&avatarId=10708","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10103&avatarId=10708","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10103&avatarId=10708"},"displayName":"杨威","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T15:49:41.555+0800","updated":"2022-05-05T16:15:06.747+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40936","id":"40936","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"body":"现象一：\r\n\r\n目前从现场提供的日志，标记为unknow的会话分为三种情况：\r\n # 在抖音直播过程中产生的HTTP请求，且Host为 pull-flv-xxx. douyincdn.com 这一类HTTP请求第三方无法识别\r\n # ipv6地址的抖音，第三方无法识别\r\n # HTTP请求，且Host为lf3-webcastcdn-tos.douyinstatic.com第三方无法识别\r\n\r\n需要和第三方沟通后，进一步定位","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=fengweihao","name":"fengweihao","key":"JIRAUSER10110","emailAddress":"fengweihao@geedgenetworks.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/3bddeeb16a4306fa184f545ab7d34129?d=mm&s=32"},"displayName":"冯伟浩","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T18:04:17.653+0800","updated":"2022-05-05T18:04:17.653+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40938","id":"40938","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"body":"现象2：\r\n\r\n今日拨测5次，均识别正确，未出现识别为300hu的情况，app_id也显示的是douyin的id，原始日志与pcap包：[https://files.geedge.net/d/bf7637d24ecf4744b517/]\r\n\r\n待明日继续拨测","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-05T18:34:31.406+0800","updated":"2022-05-05T19:35:14.711+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40962","id":"40962","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=lizhao","name":"lizhao","key":"JIRAUSER10139","emailAddress":"lizhao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10139&avatarId=11202","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10139&avatarId=11202","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10139&avatarId=11202","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10139&avatarId=11202"},"displayName":"李钊","active":true,"timeZone":"Asia/Shanghai"},"body":"后续操作建议：\r\n # TSG增加功能，支持用户对已有APP添加新的特征。[~liuyang] \r\n # XJ现场，自建名为douyin_customized和kuaishou_customized的app，将unknown中douyin相关与kuaishou相关域名作为特征配置进去，评估对app误识别修正的效果。[~jiayimeng] ","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=lizhao","name":"lizhao","key":"JIRAUSER10139","emailAddress":"lizhao@geedgenetworks.com","avatarUrls":{"48x48":"https://jira.geedge.net/secure/useravatar?ownerId=JIRAUSER10139&avatarId=11202","24x24":"https://jira.geedge.net/secure/useravatar?size=small&ownerId=JIRAUSER10139&avatarId=11202","16x16":"https://jira.geedge.net/secure/useravatar?size=xsmall&ownerId=JIRAUSER10139&avatarId=11202","32x32":"https://jira.geedge.net/secure/useravatar?size=medium&ownerId=JIRAUSER10139&avatarId=11202"},"displayName":"李钊","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-06T14:17:03.027+0800","updated":"2022-05-06T14:17:03.027+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/40988","id":"40988","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"body":"XJ现场，自建名为douyin_customized的app，将unknown中的douyincdn.com，douyinvod.com，douyinstatic.com，idouyinvod.com，huoshanvod.com 共计5条douyin相关的域名作为SNI特征已配置；自建名为kuaishou_customized的app，将unknown中kwimgs.com，etoote.com，eckwai.com，yximgs.com，共计4条kuaishou相关域名作为SNI特征已配置。","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-06T17:40:02.855+0800","updated":"2022-05-06T17:40:02.855+0800"},{"self":"https://jira.geedge.net/rest/api/2/issue/26673/comment/41473","id":"41473","author":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"body":"XJ现场，目前unknown仍在top 10以内，主要为vivo.com.cn占比很高","updateAuthor":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"created":"2022-05-18T10:47:07.189+0800","updated":"2022-05-18T10:47:07.189+0800"}],"maxResults":12,"total":12,"startAt":0},"votes":{"self":"https://jira.geedge.net/rest/api/2/issue/OMPUB-472/votes","votes":0,"hasVoted":false},"worklog":{"startAt":0,"maxResults":20,"total":0,"worklogs":[]},"assignee":{"self":"https://jira.geedge.net/rest/api/2/user?username=jiayimeng","name":"jiayimeng","key":"JIRAUSER10223","emailAddress":"jiayimeng@zdjizhi.com","avatarUrls":{"48x48":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=48","24x24":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=24","16x16":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=16","32x32":"https://www.gravatar.com/avatar/b60d1aabf7a7b02f5cb23d2f8de58b80?d=mm&s=32"},"displayName":"贾依蒙","active":true,"timeZone":"Asia/Shanghai"},"updated":"2023-01-10T18:43:05.999+0800","status":{"self":"https://jira.geedge.net/rest/api/2/status/10103","description":"这一问题被认为是完成, 这项决议是正确的。问题已关闭可以重新开放。","iconUrl":"https://jira.geedge.net/images/icons/statuses/generic.png","name":"已关闭","id":"10103","statusCategory":{"self":"https://jira.geedge.net/rest/api/2/statuscategory/3","id":3,"key":"done","colorName":"green","name":"完成"}}}}