|
|
||
|---|---|---|
| .. | ||
| README.md | ||
| type.json | ||
README.md
D4 encapsulation protocol version 1 (DRAFT)
Headers
| Name | bit size | Description |
|---|---|---|
| version | uint 8 | Version of the header |
| type | uint 8 | Data encapsulated type |
| uuid | uint 128 | Sensor UUID |
| timestamp | uint 64 | Encapsulation time |
| hmac | uint 256 | Header authentication (HMAC-SHA-256-128) |
| size | uint 32 | Payload size |
Type
The type is the list of format encapsulated within the D4 protocol.
| Type | Description |
|---|---|
| 0 | Reserved |
| 1 | pcap (libpcap 2.4) |
| 2 | meta header (JSON) |
| 3 | generic log line |
| 4 | dnscap output |
| 5 | pcapng (diagnostic) |
| 6 | generic NDJSON or JSON Lines |
| 7 | generic YAF (Yet Another Flowmeter) |
The D4 type list is available in JSON format.
