Enum pfwl_field_id_t¶

Defined in File peafowl.h

Enum Documentation¶

enum pfwl_field_id_t¶

Protocol fields which can be extracted by peafowl.

Values:

enumerator PFWL_FIELDS_L7_SIP_REQUEST_URI¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_METHOD¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_CALLID¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_REASON¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_RTCPXR_CALLID¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_CSEQ¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_CSEQ_METHOD_STRING¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_VIA¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_CONTACT_URI¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_RURI_USER¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_RURI_DOMAIN¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_FROM_USER¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_FROM_DOMAIN¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_TO_USER¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_TO_DOMAIN¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_PAI_USER¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_PAI_DOMAIN¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_PID_URI¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_FROM_URI¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_TO_URI¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_RURI_URI¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_TO_TAG¶: [STRING]

enumerator PFWL_FIELDS_L7_SIP_FROM_TAG¶: [STRING]

enumerator PFWL_FIELDS_L7_DNS_NAME_SRV¶: [STRING] Server name

enumerator PFWL_FIELDS_L7_DNS_NS_IP_1¶: [STRING] Server name IP address

enumerator PFWL_FIELDS_L7_DNS_NS_IP_2¶: [STRING] Server name IP address

enumerator PFWL_FIELDS_L7_DNS_AUTH_SRV¶: [STRING] Authority name

enumerator PFWL_FIELDS_L7_SSL_VERSION¶: [NUMBER] SSL Version

enumerator PFWL_FIELDS_L7_SSL_VERSION_HANDSHAKE¶: [NUMBER] SSL Handshake Version (for client and server hellos)

enumerator PFWL_FIELDS_L7_SSL_HANDSHAKE_TYPE¶: [NUMBER] SSL Handshake type

enumerator PFWL_FIELDS_L7_SSL_CIPHER_SUITES¶: [STRING] Cypher Suites

enumerator PFWL_FIELDS_L7_SSL_EXTENSIONS¶: [STRING] Extensions

enumerator PFWL_FIELDS_L7_SSL_ELLIPTIC_CURVES¶: [STRING] Supported elliptic curves

enumerator PFWL_FIELDS_L7_SSL_ELLIPTIC_CURVES_POINT_FMTS¶: [STRING] Supported elliptic curves point formats

enumerator PFWL_FIELDS_L7_SSL_SNI¶: [STRING] Server name extension found in client certificate

enumerator PFWL_FIELDS_L7_SSL_CERTIFICATE¶: [STRING] Server name found in server certificate

enumerator PFWL_FIELDS_L7_SSL_JA3¶: [STRING] SSL JA3 Fingerprint (https://github.com/salesforce/ja3). If HANDSHAKE_TYPE == 0x01

enumerator PFWL_FIELDS_L7_HTTP_VERSION_MAJOR¶: [NUMBER] HTTP Version - Major

enumerator PFWL_FIELDS_L7_HTTP_VERSION_MINOR¶: [NUMBER] HTTP Version - Minor

enumerator PFWL_FIELDS_L7_HTTP_METHOD¶: [NUMBER] HTTP Method. For the possible values

enumerator PFWL_FIELDS_L7_HTTP_STATUS_CODE¶: [NUMBER] HTTP Status code

enumerator PFWL_FIELDS_L7_HTTP_MSG_TYPE¶: [NUMBER] HTTP request or response. For the possible values

enumerator PFWL_FIELDS_L7_HTTP_BODY¶: [STRING] HTTP Body

enumerator PFWL_FIELDS_L7_HTTP_URL¶: [STRING] HTTP URL

enumerator PFWL_FIELDS_L7_HTTP_HEADERS¶: [MMAP] HTTP headers

enumerator PFWL_FIELDS_L7_RTP_PTYPE¶: [NUMBER] RTP Payload Type

enumerator PFWL_FIELDS_L7_RTP_SEQNUM¶: [NUMBER] RTP Sequence Number

enumerator PFWL_FIELDS_L7_RTP_TIMESTP¶: [NUMBER] RTP Timestamp

enumerator PFWL_FIELDS_L7_RTP_SSRC¶: [NUMBER] RTP Syncronization Source Identifier (Host byte order)

enumerator PFWL_FIELDS_L7_RTCP_SENDER_ALL¶: [NUMBER] To extract all the Sender fields

enumerator PFWL_FIELDS_L7_RTCP_SENDER_SSRC¶: [NUMBER] RTCP Sender SSRC

enumerator PFWL_FIELDS_L7_RTCP_SENDER_TIME_MSW¶: [NUMBER] RTCP Sender timestamp MSW

enumerator PFWL_FIELDS_L7_RTCP_SENDER_TIME_LSW¶: [NUMBER] RTCP Sender timestamp LSW

enumerator PFWL_FIELDS_L7_RTCP_SENDER_TIME_RTP¶: [NUMBER] RTCP Sender timestamp RTP

enumerator PFWL_FIELDS_L7_RTCP_SENDER_PKT_COUNT¶: [NUMBER] RTCP Sender packet count

enumerator PFWL_FIELDS_L7_RTCP_SENDER_OCT_COUNT¶: [NUMBER] RTCP Sender octet count

enumerator PFWL_FIELDS_L7_RTCP_SENDER_ID¶: [NUMBER] RTCP Sender Identifier

enumerator PFWL_FIELDS_L7_RTCP_SENDER_FLCNPL¶: [NUMBER] RTCP Sender Fraction lost + Cumulative pkt lost

enumerator PFWL_FIELDS_L7_RTCP_SENDER_EXT_SEQN_RCV¶: [NUMBER] RTCP Sender Extended highest sequence number received

enumerator PFWL_FIELDS_L7_RTCP_SENDER_INT_JITTER¶: [NUMBER] RTCP Sender Interarrival Jitter

enumerator PFWL_FIELDS_L7_RTCP_SENDER_LSR¶: [NUMBER] RTCP Sender Last SR timestamp

enumerator PFWL_FIELDS_L7_RTCP_SENDER_DELAY_LSR¶: [NUMBER] RTCP Sender Delay last SR timestamp

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_ALL¶: [NUMBER] To extract all the Receiver fields

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_SSRC¶: [NUMBER] RTCP Receiver SSRC

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_ID¶: [NUMBER] RTCP Receiver Identifier

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_FLCNPL¶: [NUMBER] RTCP Receiver Fraction lost + Cumulative pkt lost

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_EXT_SEQN_RCV¶: [NUMBER] RTCP Receiver Extended highest sequence number received

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_INT_JITTER¶: [NUMBER] RTCP Receiver Interarrival Jitter

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_LSR¶: [NUMBER] RTCP Receiver Last SR timestamp

enumerator PFWL_FIELDS_L7_RTCP_RECEIVER_DELAY_LSR¶: [NUMBER] RTCP Receiver Delay last SR timestamp

enumerator PFWL_FIELDS_L7_RTCP_SDES_CSRC¶: [NUMBER] RTCP Source description CSRC ID

enumerator PFWL_FIELDS_L7_RTCP_SDES_TEXT¶: [STRING] RTCP Source description Text

enumerator PFWL_FIELDS_L7_JSON_RPC_FIRST¶: [NUMBER] Dummy value to mark first JSON RPC field.

enumerator PFWL_FIELDS_L7_JSON_RPC_VERSION¶: [NUMBER] JSON-RPC version.

enumerator PFWL_FIELDS_L7_JSON_RPC_MSG_TYPE¶: [NUMBER] Msg type. 0 = Request

enumerator PFWL_FIELDS_L7_JSON_RPC_ID¶: [STRING] Id field.

enumerator PFWL_FIELDS_L7_JSON_RPC_METHOD¶: [STRING] Method field.

enumerator PFWL_FIELDS_L7_JSON_RPC_PARAMS¶: [STRING] Params field.

enumerator PFWL_FIELDS_L7_JSON_RPC_RESULT¶: [STRING] Result field.

enumerator PFWL_FIELDS_L7_JSON_RPC_ERROR¶: [STRING] Error field.

enumerator PFWL_FIELDS_L7_JSON_RPC_LAST¶: [NUMBER] Dummy value to mark last JSON RPC field.

enumerator PFWL_FIELDS_L7_QUIC_VERSION¶: [STRING] Version.

enumerator PFWL_FIELDS_L7_QUIC_SNI¶: [STRING] Server Name Indication.

enumerator PFWL_FIELDS_L7_QUIC_UAID¶: [STRING] User Agent Identifier.

enumerator PFWL_FIELDS_L7_QUIC_JA3¶: [STRING] Quic/TLS JA3 Fingerprint (https://github.com/salesforce/ja3)

enumerator PFWL_FIELDS_L7_STUN_MAPPED_ADDRESS¶: [STRING] Mapped address (or xor-mapped address) (format x.y.z.w for IPv4 and a:b:c:d:e:f:g:h for IPv6).

enumerator PFWL_FIELDS_L7_STUN_MAPPED_ADDRESS_PORT¶: [NUMBER] Mapped address port (or xor-mapped port) .

enumerator PFWL_FIELDS_L7_NUM¶: [STRING] Dummy value to indicate number of fields. Must be the last field specified.