From f1803fbff11f08b0aae7b0059972aea0eed9e2b4 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 1 Oct 2019 15:42:40 +0200
Subject: [PATCH] chg: [meta-type] JSON added

---
 format/README.md      |  1 +
 format/meta-type.json | 20 ++++++++++++++++++++
 2 files changed, 21 insertions(+)
 create mode 100644 format/meta-type.json

diff --git a/format/README.md b/format/README.md
index 2e86e92..bc7d18f 100644
--- a/format/README.md
+++ b/format/README.md
@@ -54,3 +54,4 @@ the next packet to be decoded as type 254 in the stream. The JSON object MUST at
 | ja3-jl  | JA3 fingerprinting JL version |
 | d4-telemetry | D4 project sensor telemetry |
 | fascia       | fascia JSON object |
+| maltrail     | [mailtrail](https://github.com/stamparm/maltrail) logging |
diff --git a/format/meta-type.json b/format/meta-type.json
new file mode 100644
index 0000000..1c9f9ad
--- /dev/null
+++ b/format/meta-type.json
@@ -0,0 +1,20 @@
+[
+  {
+    "type": "ja3-jl",
+    "description": "JA3 fingerprint JL version",
+    "ref": "https://github.com/D4-project/sensor-d4-tls-fingerprinting"
+  },
+  {
+    "type": "d4-telemetry",
+    "description": "D4 project sensor telemetry"
+  },
+  {
+    "type": "fascia",
+    "description": "FASCIA JSON Object"
+  },
+  {
+    "type": "maltrail",
+    "description": "Mailtrail logging",
+    "ref": "https://github.com/stamparm/maltrail"
+  }
+]