Протокол; OSI; Количество извлекаемых полей

Ethernet; Data Link; 3 ARP/RARP; Data Link; 10 GRE; Data Link; 6 VLAN-C-Tag; Data Link; 5 PPPoE; Data Link; 6 PPTP; Data Link; 5 IPv4; Network; 18 IPv6; Network; 42 ICMP; Network; 5 ICMPv6; Network; 5 IGMP; Network; 1 OSPF; Network; 11 Teredo; Network; 14 Wireguard; Network; 14 OpenVPN; Network; 17 TCP; Transport; 19 UDP; Transport; 5 QUIC; Transport; 75 DTLS; Transport; 174 TLS; Session; 156 ISAKMP; Session; 10 L2TP; Session; 19 PPP; Session; 3 SOCKS; Session; 19 RTCP; Session; 35 DNS; Application; 67 MDNS; Application; 69 Dropbox Lan Sync; Application; 4 Dropbox Lan Sync Discovery; Application; 1 FTP; Application; 10 FTPS; Application; - SFTP; Application; 7 SSH; Application; - Telnet; Application; 1 POP3; Application; 5 POP3S; Application; - SMTP; Application; 5 SMTPS; Application; - IMAP; Application; - IMAPS; Application; - NNTPS; Application; - WebSocket; Application; 10 STUN; Application; 10 RTP/SRTP; Application; 18 NTP; Application; - HTTP; Application; 34 HTTP/2; Application; 60 SIP; Application; 34 BitTorrent; Application; - BitTorrent DHT; Application; 12 BitTorrent UTP; Application; - BitTorrent Tracker; Application; - DNSCrypt; Application; - DNS over TLS; Application; - SRTP over DTLS; Application; -

Сервис; Категория; Workflow; Описание

Yandex;Ecosystem;-;Yandex LLC is a Russian technology company that provides Internet-related products and services including a web browser, search engine, cloud computing, web mapping, online food ordering, streaming media, online shopping, and a ridesharing company. Google;Ecosystem;-;Google LLC is an American multinational corporation and technology company focusing on online advertising, search engine technology, cloud computing, computer software, quantum computing, e-commerce, consumer electronics, and artificial intelligence (AI). Meta;Ecosystem;-;Meta Platforms, Inc. is an American multinational technology company which owns and operates Facebook, Instagram, Threads, and WhatsApp, among other products and services. Apple;Ecosystem;-;Apple Inc. is an American multinational corporation and technology company. Yandex CDN;CDN;-;Yandex Cloud CDN - a service for setting up Content Delivery Networks (CDN). Cloud CDN helps you streamline static content delivery for your web service, boost user loyalty, and improve your SEO ranking. Google Cloud;Cloud;-;Google Cloud is a suite of cloud computing services that runs on the same infrastructure that Google uses internally for their own consumer products, such as Google Search, Gmail, and YouTube. MS365;Office;-;Microsoft 365 is a cloud-powered productivity platform which provides the access to the following applications: Microsoft Teams, Word, Excel, PowerPoint, Outlook, OneDrive, and so much more. Cloudflare;Cloud, CDN;-;Cloudflare is an American company that provides content delivery network services, cybersecurity, DDoS mitigation, wide area network services, reverse proxies, Domain Name Service, ICANN-accredited domain registration, and other services. Fastly;Cloud, CDN;-;Fastly is an American company that provides content delivery network services, image optimization, and load balancing services. Akamai;Cloud, CDN;-;Akamai is the cybersecurity and cloud computing company that powers and protects business online. Amazon AWS;Cloud;-;Amazon Web Services (AWS) is a comprehensive and widely adopted cloud computing platform offered by Amazon. Amazon Cloudfront;CDN;-;Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. Digital Ocean;Cloud;-;DigitalOcean is a cloud computing platform, specifically an infrastructure as a service (IaaS) provider, designed to offer developers, startups, and small to medium-sized businesses (SMBs) simple and affordable cloud solutions. Vultr;Cloud;-;Vultr is a cloud computing company that provides cloud infrastructure services, including cloud servers, cloud storage, and bare metal solutions. Facebook CDN;CDN;-;Facebook's CDN, also known as the Facebook Edge Network, is a distributed network of servers that stores and delivers content like images, videos, and scripts closer to users, optimizing content delivery and improving loading times. Kingsoft;Cloud, CDN;-;Kingsoft is a Chinese software and internet services company that is known for its office suite, WPS Office, and its cloud computing services, Kingsoft Cloud. Telegram;IM;-;Telegram is a cloud-based mobile and desktop messaging app with a focus on security and speed. Viber;IM;-;Viber is a cross-platform voice over IP (VoIP) and instant messaging (IM) software application owned by Japanese multinational company Rakuten, provided as freeware for the Google Android, iOS, Microsoft Windows, Apple macOS and Linux platforms. YouTube;Social Network;-;YouTube is an American social media and online video sharing platform owned by Google. Yandex Cloud;Cloud;-;Yandex Cloud - a full-fledged cloud platform providing scalable infrastructure, storage, machine learning and development tools to build and enhance digital services and applications. Yandex DNS;DNS, Network Service;-;Yandex DNS service. MS Teams;Office;-;Microsoft Teams is a team collaboration application developed by Microsoft as part of the Microsoft 365 family of products, offering workspace chat and video conferencing, file storage, and integration of proprietary and third-party applications and services. MS Exchange;Office;-;Microsoft Exchange Service is Microsoft's email, calendaring, contact, scheduling and collaboration platform. MS SharePoint;Office;-;SharePoint Online and OneDrive for Business. MS Azure;Cloud;-;Microsoft Azure is the cloud computing platform developed by Microsoft. It has management, access and development of applications and services to individuals, companies, and governments through its global infrastructure. Facebook;Social Network;-;Facebook is a social media and social networking service owned by the American technology conglomerate Meta. WhatsApp;IM;-;WhatsApp is an instant messaging (IM) and voice-over-IP (VoIP) service owned by technology conglomerate Meta. Instagram;Social Network;-;Instagram is a photo and video sharing social networking service owned by Meta Platforms. Twitter;Social Network;-;Twitter is a social networking service that was rebranded in 2023 to create the social networking service X. VKontakte;Social Network;-;VK (VKontakte) is a Russian online social media and social networking service based in Saint Petersburg. Discord;Social Network;-;Discord is a free communication app used by tens of millions of people to talk and hang out with their favorite creators, communities and friends. Nintendo;Gaming;-;Nintendo is a multinational consumer electronics and video game company. Sberbank;Banking;-;Sberbank is a large Russian banking and financial services company. TBank;Banking;-;TBank, formerly known as Tinkoff Bank is a Russian commercial bank. Revolut;Banking;-;Revolut is a British multinational neobank and fintech company that offers banking services for individuals and businesses. Zoom;Meetings;-;Zoom is a cloud-based video conferencing platform that enables users to conduct online meetings, webinars, and live chats. Spotify;Music;-;Spotify is a popular audio streaming service that provides access to millions of songs, podcasts, and other audio content. iCloud;File Storage;-;iCloud is Apple's cloud service that securely stores your data and keeps it synchronized across your Apple devices. iCloud Private Relay;VPN;-;iCloud Private Relay — part of an iCloud+ subscription — helps protect your privacy when you browse the web in Safari. iTunes;Media;-;iTunes is a media player, media library, and mobile device management (MDM) utility developed by Apple. Apple Mail;Mail;-;Apple Mail is Apple's built-in email client for its operating systems like macOS, iOS, iPadOS, watchOS, and visionOS. Apple TV;Media;-;Apple TV is a digital media player and microconsole developed and sold by Apple Inc.. Apple Updates;Update;-;Apple Updates is a service provided for installing, restoring, and updating software on Apple devices: iOS, iPadOS, macOS, watchOS, and tvOS. Apple Push Notification;Push;-;Apple Push Notification service (APNs) is a cloud-based service provided by Apple that enables third-party developers to send notifications to Apple devices (iPhones, iPads, Macs, Apple Watches, and Apple TVs). AppStore;Application Store;-;App Store is a digital marketplace, like Apple's App Store or Google Play Store, where users can discover, download, and purchase software applications (apps) for their devices. FaceTime;Meetings;-;FaceTime is a video and audio call service developed by Apple. Apple Pay;Payment;-;Apple Pay is a mobile payment and digital wallet service developed by Apple, allowing users to make contactless payments using their Apple devices like iPhones, Apple Watches, iPads, and Macs. Apple Maps;Maps;-;Apple Maps is a navigation and mapping application developed by Apple, pre-installed on Apple devices like iPhones, iPads, Apple Watches, and Macs. Apple Music;Music;-;Apple Music is a subscription-based music and video streaming service offered by Apple Inc. Gmail;Mail;-;Gmail is a free, web-based email service provided by Google. Google Maps;Maps;-;Google Maps is a web mapping service developed by Google, providing detailed geographical information and navigation tools. Google Play;Application Store;-;Google Play is a digital distribution service operated by Google. Dropbox;File Storage;-;Dropbox is a cloud storage service that allows users to store, share, and sync files across multiple devices. Cloudflare DNS;DNS, Network Service;-;Cloudflare DNS is a service that provides both authoritative DNS and a public DNS resolver for faster and more private internet browsing. Zendesk;Enterprise;-;Zendesk is a cloud-based customer service platform that helps businesses manage and streamline interactions with customers across various channels like email, chat, social media, and voice calls.

Расширение; Описание; Кеш

Data structure; Проверяет нераспознанный протокол на соответствие различным паттернам, например первые два байта определяет размер полезной нагрузки.; Нет DNS cache; Кеширует IP адреса (для заранее заданных хостов), полученных из DNS ответов, чтобы использовать их для последующей классификации сервисов.; Да FTP cache; Кеширует IP адрес и порт, полученный из FTP-CONTROL потока, для последующей классификации FTP-DATA потока (передача файла).; Да Session cache; Кеширует TLS Session ID, DTLS Connection ID, QUIC Connection ID для установленных сервисов, чтобы детектировать connection migration и корректно определять сервис для таких потоков.; Да TLS certificate; Извлекает common_name и dns_name из TLS сертификата.; Нет HTTP/2 field block; Декодирует HTTP/2 заголовки (HPACK).; Да Host name; Извлекает имя хоста для такие протоколов как SSDP, HTTP, HTTP/2, TLS, DTLS.; Нет HTTP metadata; Извлекает метаданные из HTTP пакета. Например: детектирует HTTP Pipeline, декодирует значение заголовка Authorization-Credentials, и так далее.; Нет Tree; Строит цепочку протоколов.; Нет DNS response name; Извлекает из DNS ответа доменные имена.; Нет Classifier; Расширение выполняет классификацию интернет сервисов и позволяет сконфигурировать набор метрик и техник для выявление для каждого в отдельности. Также, расширение выставляет флаги для сессии, такие как is_final_protocol, is_final_service, is_offload, и так далее.; Нет TLS Metadata; Расширение извлекает дополнительную информацию из TLS сессии, например JA3/JA3S хеши.; Нет

Название; Описание

ECH; Encrypted Client Hello. The tag is presented only when ECH exists, but SNI doesn't exist. FTP Data; FTP data trasnmission. DNS Response Name; Processed dns response name - concatenated labels, resolving offsets, etc. JA3; The fingerprinting the client's TLS handshake (Client Hello). JA3S; The fingerprinting the server's response (Server Hello). JA3 hash; MD5 hash of JA3. Format: TLSVersion,Ciphers,Extensions,EllipticCurves,EllipticCurvePointFormats. JA3 MD5; MD5 hash of JA3. Format: TLSVersion,Ciphers,Extensions,EllipticCurves,EllipticCurvePointFormats. JA3S MD5; MD5 hash of JA3S. Format: TLSVersion,Cipher,Extensions. HTTP/2 Header; The http/2 protocol header block field: name:value. HTTP/2 Push Promise header; The http/2 protocol push-promise block field: name:value. HTTP/2 Continuation header; The http/2 protocol continuation block field: name:value. HTTP Authorization Credentials; Base64 decoded value of Proxy-Authorization header value. TLS Certificate Common name; The CommonName certificate field. TLS Certificate General DNS Name; The dNSName certificate field. Belongs to extension section. Protocol Path; Protocol path string (hierarchical chain of protocol that are used in a session). Bitrate;The bitrate is a measure of how much data is transferred over a network in a given period of time. Measured in bits per second (bps). Average packet size; Average packet size of processed packets. Inter-arrival Time; Inter-arrival Time is the difference in time between the arrival of two consecutive packets at a receiver. Measured in nanoseconds. For one flow packet avg iat is 0. Flow start time; Timestamp of the first flow packet.. Flow last activity time; Timestamp of the last flow packet. Flow duration; The flow duration time.