@@ -43,7 +43,6 @@ BYTES_REV uint64 e29305id1
4343PACKETS_REV uint32 e29305id2
4444TCP_FLAGS_REV uint8 e29305id6
4545
46-
4746# --- DNS specific fields ---
4847DNS_ANSWERS uint16 cesnet:DNSAnswers # DNS answers
4948DNS_RCODE uint8 cesnet:DNSRCode # DNS rcode
@@ -74,7 +73,6 @@ FME_DNS_ID uint16 flowmon:dnsId
7473FME_DNS_RR_TTL uint32 flowmon:dnsCrrTtl # DNS rr ttl
7574# Note: Old fields DNS_RCODE, DNS_PSIDE and DNS_DO are not available anymore...
7675
77-
7876# --- SMTP specific fields ---
7977SMTP_COMMAND_FLAGS uint32 cesnet:SMTPCommands # SMTP command flags
8078SMTP_MAIL_CMD_COUNT uint32 cesnet:SMTPMailCount # SMTP MAIL command count
@@ -119,8 +117,6 @@ FME_SIP_CALLING_PARTY string flowmon:sipCallingParty
119117FME_SIP_CALLED_PARTY string flowmon:sipCalledParty # SIP to
120118FME_SIP_VIA string flowmon:sipVia # SIP VIA
121119
122-
123-
124120# --- HTTP elements ---
125121HTTP_REQUEST_METHOD_ID uint32 e16982id500 # HTTP request method id
126122HTTP_REQUEST_HOST string e16982id501 # HTTP(S) request host
@@ -131,7 +127,6 @@ HTTP_REQUEST_REFERER string e16982id505
131127HTTP_RESPONSE_STATUS_CODE uint32 e16982id506 # HTTP response status code
132128HTTP_RESPONSE_CONTENT_TYPE string e16982id507 # HTTP response content type
133129
134-
135130FME_HTTP_METHOD_ID uint16 flowmon:httpMethodID
136131FME_HTTP_UA_OS uint16 flowmon:httpUaOs
137132FME_HTTP_UA_OS_MAJ uint16 flowmon:httpUaOsMaj
@@ -145,7 +140,6 @@ FME_HTTP_REQUEST_HOST string flowmon:httpHost
145140FME_HTTP_REQUEST_URL string flowmon:httpUrl # HTTP request url
146141FME_HTTP_RESPONSE_STATUS_CODE uint32 flowmon:httpStatusCode # HTTP response status code
147142
148-
149143# --- Other fields ---
150144IPV6_TUN_TYPE uint8 e16982id405 # IPv6 tunnel type
151145APP_ID bytes e0id95 # Application ID from libprotoident / NBAR2 / Flowmon's NBAR plugin
@@ -183,29 +177,24 @@ FME_TLS_JA_3FINGERPRINT bytes flowmon:tlsJa3Fingerprint
183177TLS_SNI string cesnet:TLSSNI # Server Name Indication https://en.wikipedia.org/wiki/Server_Name_Indication
184178TLS_JA_3FINGERPRINT bytes cesnet:tlsJa3Fingerprint # tlsJa3Fingerprint
185179
186-
187-
188180# --- Per-Packet Information elements ---
189181PPI_PKT_LENGTHS uint16* e0id291/cesnet:packetLength # basicList of packet lengths
190182PPI_PKT_TIMES time* e0id291/cesnet:packetTime # basicList of packet timestamps
191183PPI_PKT_FLAGS uint8* e0id291/cesnet:packetFlag # basicList of packet TCP flags
192184PPI_PKT_DIRECTIONS int8* e0id291/cesnet:packetDirection # basicList of packet directions
193185
194186# --- SSDP Information elements ---
195-
196187SSDP_LOCATION_PORT uint16 cesnet:SSDPLocationPort
197188SSDP_SERVER string cesnet:SSDPServer
198189SSDP_USER_AGENT string cesnet:SSDPUserAgent
199190SSDP_NT string cesnet:SSDPNT
200191SSDP_ST string cesnet:SSDPST
201192
202193# --- DNSDD Information elements ---
203-
204194DNSSD_QUERIES string cesnet:DNSSDQueries
205195DNSSD_RESPONSES string cesnet:DNSSDResponses
206196
207197# --- OVPN Information elements ---
208-
209198OVPN_CONF_LEVEL uint8 cesnet:OVPNConfLevel
210199
211200# --- NTP Information elements ---
@@ -224,7 +213,6 @@ NTP_RECV string cesnet:NTPRecv
224213NTP_SENT string cesnet:NTPSent
225214
226215# --- ARP Information elements ---
227-
228216ARP_HA_FORMAT uint16 cesnet:ARPHAFormat
229217ARP_PA_FORMAT uint16 cesnet:ARPPAFormat
230218ARP_OPCODE uint16 cesnet:ARPOpcode
@@ -234,11 +222,9 @@ ARP_DST_HA bytes cesnet:ARPDstHA
234222ARP_DST_PA bytes cesnet:ARPDstPa
235223
236224# --- NetBios Information elements ---
237-
238225NB_NAME string cesnet:NBName
239226NB_SUFFIX uint8 cesnet:NBSuffix
240227
241228# --- IDPContent Information elements ---
242-
243229IDP_CONTENT bytes cesnet:IDPContent
244230IDP_CONTENT_REV bytes cesnet:IDPContentRev
0 commit comments