diff --git a/format/README.md b/format/README.md index cce1e6e..141032d 100644 --- a/format/README.md +++ b/format/README.md @@ -1,11 +1,11 @@ -# D4 encapsulation protocol (DRAFT) +# D4 encapsulation protocol version 1 (DRAFT) ## Headers | Name | bit size | Description | |---------------|-----------|:----------------------------------------------------------------------:| | version | uint 8 | Version of the header | -| type | uint 8 | Data encapsulated type | +| type | uint 8 | Data encapsulated type | | uuid | uint 128 | Sensor uuid | | timestamp | uint 64 | Encapsulation time | | hmac | uint 256 | Header authenticated header (HMAC-SHA-256-128) | @@ -14,8 +14,13 @@ ## Type |Type| Description | -|----|:------------| -| 0 | Reserved | -| 1 | pcap | -| 2 | meta header (JSON)| +|----|:-----------------------------------| +| 0 | Reserved | +| 1 | pcap (libpcap 2.4) | +| 2 | meta header (JSON) | +| 3 | generic log line | +| 4 | dnscap output | +| 5 | pcapng | +| 6 | generic NDJSON or JSON Lines | +| 7 | generic YAF (Yet Another Flowmeter)|