]> git.ipfire.org Git - thirdparty/suricata.git/commitdiff
doc: quic in eve/schema
authorPhilippe Antoine <pantoine@oisf.net>
Fri, 26 May 2023 06:58:43 +0000 (08:58 +0200)
committerVictor Julien <victor@inliniac.net>
Thu, 16 Nov 2023 20:36:27 +0000 (21:36 +0100)
Ticket: #6076

etc/schema.json

index 28182cb95d980680e290382cc57db56bcb7c2c0b..c194017ddf6ffc29c689dba019364fb443b23d17 100644 (file)
             "optional": true,
             "properties": {
                 "cyu": {
+                    "description": "ja3-like fingerprint for versions of QUIC before standardization",
                     "type": "array",
                     "minItems": 1,
                     "items": {
                         "type": "object",
                         "properties": {
                             "hash": {
+                                "description": "cyu hash hex representation",
                                 "type": "string"
                             },
                             "string": {
+                                "description": "cyu hash string representation",
                                 "type": "string"
                             }
                         },
                     }
                 },
                 "extensions": {
+                    "description": "list of extensions in hello",
                     "type": "array",
                     "minItems": 1,
                     "items": {
                         "type": "object",
                         "properties": {
                             "name": {
+                                "description": "human-friendly name of the extension",
                                 "type": "string"
                             },
                             "type": {
+                                "description": "integer identifier of the extension",
                                 "type": "integer"
                             },
                             "values": {
+                                "description": "extension values",
                                 "type": "array",
                                 "minItems": 1,
                                 "items": {
                     }
                 },
                 "ja3": {
+                    "description": "ja3 from client, as in TLS",
                     "type": "object",
                     "optional": true,
                     "properties": {
                         "hash": {
+                            "description": "ja3 hex representation",
                             "type": "string"
                         },
                         "string": {
+                            "description": "ja3 string representation",
                             "type": "string"
                         }
                     },
                     "additionalProperties": false
                 },
                 "ja3s": {
+                    "description": "ja3 from server, as in TLS",
                     "type": "object",
                     "optional": true,
                     "properties": {
                         "hash": {
+                            "description": "ja3s hex representation",
                             "type": "string"
                         },
                         "string": {
+                            "description": "ja3s string representation",
                             "type": "string"
                         }
                     },
                     "additionalProperties": false
                 },
                 "sni": {
+                    "description": "Server Name Indication",
                     "type": "string"
                 },
                 "ua": {
+                    "description": "User Agent for versions of QUIC before standardization",
                     "type": "string"
                 },
                 "version": {
+                    "description": "Quic protocol version",
                     "type": "string"
                 }
             },