This page lists every field whose value can be searched within the Host dataset.

The difference between a keyword and a text field is that searches on keyword fields will only return exact matches, while searches on text fields will return fuzzy matches.

Hosts

HOST INFORMATION

Path Type Docs
ip ip
name text

HOST OPERATING SYSTEM

Path Type Docs
operating_system.component_uniform_resource_identifiers text URIs of software components related to the identified software.
operating_system.edition text Captures edition-related terms applied by the vendor to the product, deprecated in CPE 2.3, but kept for backwards compatibility with CPE 2.2.
operating_system.language text Valid language tag as defined by [RFC5646], and should be used to define the language supported in the user interface of the product being described.
operating_system.other.key text
operating_system.other.value text
operating_system.part keyword Defines the class of this software, a for application, o for operating system, h for hardware devices.
operating_system.product text Identifies the most common and recognizable title or name of the product.
operating_system.source text Defines the source that this software information was derived from.
operating_system.sw_edition text Characterizes how the product is tailored to a particular market or class of end users.
operating_system.target_hw text Characterizes the instruction set architecture (e.g., x86) on which the product being described. Bytecode-intermediate languages, such as Java bytecode for the Java Virtual Machine or Microsoft Common Intermediate Language for the Common Language Runtime virtual machine, are be considered instruction set architectures.
operating_system.target_sw text Characterizes the software computing environment within which the product operates.
operating_system.uniform_resource_identifier text CPE uri format as defined here: https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf
operating_system.update text Vendor-Specific alphanumeric strings characterizing the particular update, service pack, or point release of the product.
operating_system.vendor text Identifies the person or organization that manufactured or created the product.
operating_system.version text Vendor-Specific alphanumeric strings characterizing the particular release version of the product.

HOST LOCATION

Path Type Docs
location.city text The English name of the detected city.
location.continent keyword The English name of the detected continent (North America, Europe, Asia, South America, Africa, Oceania, Antarctica).
location.coordinates.latitude double
location.coordinates.longitude double
location.country text The English name of the detected country.
location.country_code keyword The detected two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
location.postal_code keyword The postal code (if applicable) of the detected location.
location.province text The state or province name of the detected location.
location.registered_country text The English name of the registered country.
location.registered_country_code keyword The registered country's two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
location.timezone text The IANA time zone database name of the detected location.

HOST AUTONOMOUS SYSTEM

Path Type Docs
autonomous_system.asn unsigned_long The ASN (autonomous system number) of the host's autonomous system.
autonomous_system.bgp_prefix text The autonomous system's CIDR.
autonomous_system.country_code keyword The autonomous system's two-letter ISO 3166-1 alpha-2 country code (US, CN, GB, RU, ...).
autonomous_system.description text Brief description of the autonomous system.
autonomous_system.name text The friendly name of the autonomous system.
autonomous_system.organization text The name of the organization managning the autonomous system.

HOST DNS

Path Type Docs
dns.names text
dns.reverse_dns.names text
dns.reverse_dns.resolved_at date

SERVICE INFORMATION

Path Type Docs
services.banner text
services.banner_hex text
services.extended_service_name text
services.perspective_id text
services.port unsigned_long
services.service_name text
services.source_ip ip
services.transport_protocol text
services.truncated boolean

TLS

Path Type Docs
services.certificate text
services.jarm.cipher_and_version_fingerprint text The first 30 byte portion of the Jarm fingerprint.
services.jarm.fingerprint text The 62 byte Jarm fingerprint of the service.
services.jarm.observed_at date The time the service was fingerprinted
services.jarm.tls_extensions_sha256 text The second 32 byte portion of the Jarm fingerprint
services.tls.certificates.chain.fingerprint keyword SHA 256 fingerprint of the certificate in the certificate chain.
services.tls.certificates.chain.issuer_dn text Distinguished name of the entity that has signed and issued the certificate.
services.tls.certificates.chain.subject_dn text Distinguished name of the entity that the certificate belongs to.
services.tls.certificates.chain_fps_sha_256 keyword DEPRECATED (04/30/2021) - Use `chain` instead.
services.tls.certificates.leaf_data.fingerprint keyword SHA256 fingerprint of the TBS certificate.
services.tls.certificates.leaf_data.issuer.common_name text
services.tls.certificates.leaf_data.issuer.country text
services.tls.certificates.leaf_data.issuer.domain_component text
services.tls.certificates.leaf_data.issuer.email_address text
services.tls.certificates.leaf_data.issuer.jurisdiction_country text
services.tls.certificates.leaf_data.issuer.jurisdiction_locality text
services.tls.certificates.leaf_data.issuer.jurisdiction_province text
services.tls.certificates.leaf_data.issuer.locality text
services.tls.certificates.leaf_data.issuer.organization text
services.tls.certificates.leaf_data.issuer.organization_id text
services.tls.certificates.leaf_data.issuer.organizational_unit text
services.tls.certificates.leaf_data.issuer.postal_code keyword
services.tls.certificates.leaf_data.issuer.province text
services.tls.certificates.leaf_data.issuer.serial_number keyword
services.tls.certificates.leaf_data.issuer.street_address text
services.tls.certificates.leaf_data.issuer_dn text Distinguished name of the entity that has signed and issued the certificate.
services.tls.certificates.leaf_data.names text Common names for the entity.
services.tls.certificates.leaf_data.pubkey_algorithm text Algorithm used to create the public key.
services.tls.certificates.leaf_data.pubkey_bit_size integer Size of the public key.
services.tls.certificates.leaf_data.public_key.dsa.g text
services.tls.certificates.leaf_data.public_key.dsa.p text
services.tls.certificates.leaf_data.public_key.dsa.q text
services.tls.certificates.leaf_data.public_key.dsa.y text
services.tls.certificates.leaf_data.public_key.ecdsa.b text
services.tls.certificates.leaf_data.public_key.ecdsa.curve keyword
services.tls.certificates.leaf_data.public_key.ecdsa.gx text
services.tls.certificates.leaf_data.public_key.ecdsa.gy text
services.tls.certificates.leaf_data.public_key.ecdsa.length unsigned_long
services.tls.certificates.leaf_data.public_key.ecdsa.n text
services.tls.certificates.leaf_data.public_key.ecdsa.p text
services.tls.certificates.leaf_data.public_key.ecdsa.pub text
services.tls.certificates.leaf_data.public_key.ecdsa.x text
services.tls.certificates.leaf_data.public_key.ecdsa.y text
services.tls.certificates.leaf_data.public_key.fingerprint text
services.tls.certificates.leaf_data.public_key.key_algorithm keyword
services.tls.certificates.leaf_data.public_key.rsa.exponent text
services.tls.certificates.leaf_data.public_key.rsa.length unsigned_long
services.tls.certificates.leaf_data.public_key.rsa.modulus text
services.tls.certificates.leaf_data.signature.self_signed boolean Denotes if the certificate was self signed.
services.tls.certificates.leaf_data.signature.signature_algorithm keyword Cryptographic algorithm used by the CA to sign this certificate.
services.tls.certificates.leaf_data.subject.common_name text
services.tls.certificates.leaf_data.subject.country text
services.tls.certificates.leaf_data.subject.domain_component text
services.tls.certificates.leaf_data.subject.email_address text
services.tls.certificates.leaf_data.subject.jurisdiction_country text
services.tls.certificates.leaf_data.subject.jurisdiction_locality text
services.tls.certificates.leaf_data.subject.jurisdiction_province text
services.tls.certificates.leaf_data.subject.locality text
services.tls.certificates.leaf_data.subject.organization text
services.tls.certificates.leaf_data.subject.organization_id text
services.tls.certificates.leaf_data.subject.organizational_unit text
services.tls.certificates.leaf_data.subject.postal_code keyword
services.tls.certificates.leaf_data.subject.province text
services.tls.certificates.leaf_data.subject.serial_number keyword
services.tls.certificates.leaf_data.subject.street_address text
services.tls.certificates.leaf_data.subject_dn text Distinguished name of the entity associated with the public key.
services.tls.certificates.leaf_data.tbs_fingerprint keyword Fingerprint of the TBS certificate.
services.tls.certificates.leaf_fp_sha_256 keyword SHA 256 fingerprint of the TBS certificate.
services.tls.cipher_selected text Cipher suite chosen for the exchange.
services.tls.server_key_exchange.dh_params.group.p text
services.tls.server_key_exchange.dh_params.public_key text
services.tls.server_key_exchange.ec_params.named_curve unsigned_long Elliptic-Curve ID value.
services.tls.server_key_exchange.ec_params.public_key text
services.tls.server_key_exchange.rsa_params.public_key.e text
services.tls.server_key_exchange.rsa_params.public_key.n text
services.tls.server_key_exchange.signature text DEPRECATED (05/10/2021)
services.tls.session_ticket.length unsigned_long
services.tls.session_ticket.lifetime_hint unsigned_long Hint from server about how long the session ticket should be stored.
services.tls.version_selected text Certificate version v1(0), v2(1), v3(2).

SOFTWARE

Path Type Docs
services.software.component_uniform_resource_identifiers text URIs of software components related to the identified software.
services.software.edition text Captures edition-related terms applied by the vendor to the product, deprecated in CPE 2.3, but kept for backwards compatibility with CPE 2.2.
services.software.language text Valid language tag as defined by [RFC5646], and should be used to define the language supported in the user interface of the product being described.
services.software.other.key text
services.software.other.value text
services.software.part keyword Defines the class of this software, a for application, o for operating system, h for hardware devices.
services.software.product text Identifies the most common and recognizable title or name of the product.
services.software.source text Defines the source that this software information was derived from.
services.software.sw_edition text Characterizes how the product is tailored to a particular market or class of end users.
services.software.target_hw text Characterizes the instruction set architecture (e.g., x86) on which the product being described. Bytecode-intermediate languages, such as Java bytecode for the Java Virtual Machine or Microsoft Common Intermediate Language for the Common Language Runtime virtual machine, are be considered instruction set architectures.
services.software.target_sw text Characterizes the software computing environment within which the product operates.
services.software.uniform_resource_identifier text CPE uri format as defined here: https://nvlpubs.nist.gov/nistpubs/Legacy/IR/nistir7695.pdf
services.software.update text Vendor-Specific alphanumeric strings characterizing the particular update, service pack, or point release of the product.
services.software.vendor text Identifies the person or organization that manufactured or created the product.
services.software.version text Vendor-Specific alphanumeric strings characterizing the particular release version of the product.

AMQP

Path Type Docs
services.amqp.explicit_tls boolean Connected via a TLS connection after initial handshake
services.amqp.implicit_tls boolean Connected via a TLS wrapped connection (AMQPS)
services.amqp.protocol_id.id unsigned_long
services.amqp.protocol_id.name text
services.amqp.version.major unsigned_long
services.amqp.version.minor unsigned_long
services.amqp.version.revision unsigned_long

ANY_CONNECT

Path Type Docs
services.any_connect.aggregate_auth_version integer Version number indicated by the response for config-auth exchange
services.any_connect.auth_methods text Supported methods for users to enter credentials for this VPN
services.any_connect.groups text List of groups a user can authenticate with to use this VPN
services.any_connect.raw text XML content of the config-auth response
services.any_connect.response_type text Type of the response packet received after initializing the config-auth exchange

BACNET

Path Type Docs
services.bacnet.application_software_revision text
services.bacnet.description text
services.bacnet.firmware_revision text
services.bacnet.instance_number unsigned_long
services.bacnet.location text
services.bacnet.model_name text
services.bacnet.object_name text
services.bacnet.vendor_id unsigned_long
services.bacnet.vendor_name text

COAP

Path Type Docs
services.coap.code text
services.coap.message_id unsigned_long
services.coap.message_type text
services.coap.payload text
services.coap.token text
services.coap.version unsigned_long

CWMP

Path Type Docs
services.cwmp.http_info.body text
services.cwmp.http_info.body_hash keyword
services.cwmp.http_info.body_size integer
services.cwmp.http_info.favicons.md5_hash keyword
services.cwmp.http_info.favicons.name text
services.cwmp.http_info.favicons.size integer
services.cwmp.http_info.headers.accept_patch text
services.cwmp.http_info.headers.accept_ranges text
services.cwmp.http_info.headers.access_control_allow_origin text
services.cwmp.http_info.headers.age text
services.cwmp.http_info.headers.allow text
services.cwmp.http_info.headers.alt_svc text
services.cwmp.http_info.headers.alternate_protocol text
services.cwmp.http_info.headers.cache_control text
services.cwmp.http_info.headers.connection text
services.cwmp.http_info.headers.content_disposition text
services.cwmp.http_info.headers.content_encoding text
services.cwmp.http_info.headers.content_language text
services.cwmp.http_info.headers.content_length text
services.cwmp.http_info.headers.content_location text
services.cwmp.http_info.headers.content_md5 text
services.cwmp.http_info.headers.content_range text
services.cwmp.http_info.headers.content_security_policy text
services.cwmp.http_info.headers.content_type text
services.cwmp.http_info.headers.date text
services.cwmp.http_info.headers.etag text
services.cwmp.http_info.headers.expires text
services.cwmp.http_info.headers.last_modified text
services.cwmp.http_info.headers.link text
services.cwmp.http_info.headers.location text
services.cwmp.http_info.headers.p3p text
services.cwmp.http_info.headers.pragma text
services.cwmp.http_info.headers.proxy_agent text
services.cwmp.http_info.headers.proxy_authenticate text
services.cwmp.http_info.headers.public_key_pins text
services.cwmp.http_info.headers.referer text
services.cwmp.http_info.headers.refresh text
services.cwmp.http_info.headers.retry_after text
services.cwmp.http_info.headers.server text
services.cwmp.http_info.headers.set_cookie text
services.cwmp.http_info.headers.status text
services.cwmp.http_info.headers.strict_transport_security text
services.cwmp.http_info.headers.trailer text
services.cwmp.http_info.headers.transfer_encoding text
services.cwmp.http_info.headers.unknown.name text
services.cwmp.http_info.headers.unknown.value text
services.cwmp.http_info.headers.upgrade text
services.cwmp.http_info.headers.vary text
services.cwmp.http_info.headers.via text
services.cwmp.http_info.headers.warning text
services.cwmp.http_info.headers.www_authenticate text
services.cwmp.http_info.headers.x_content_duration text
services.cwmp.http_info.headers.x_content_security_policy text
services.cwmp.http_info.headers.x_content_type_options text
services.cwmp.http_info.headers.x_forwarded_for text
services.cwmp.http_info.headers.x_frame_options text
services.cwmp.http_info.headers.x_powered_by text
services.cwmp.http_info.headers.x_real_ip text
services.cwmp.http_info.headers.x_ua_compatible text
services.cwmp.http_info.headers.x_webkit_csp text
services.cwmp.http_info.headers.x_xss_protection text
services.cwmp.http_info.html_tags text
services.cwmp.http_info.html_title text
services.cwmp.http_info.protocol text
services.cwmp.http_info.status_code integer
services.cwmp.http_info.status_reason text

DNP3

Path Type Docs
services.dnp3.banner text

DNS

Path Type Docs
services.dns.additionals.name text
services.dns.additionals.response text
services.dns.answers.name text
services.dns.answers.response text
services.dns.authorities.name text
services.dns.authorities.response text
services.dns.edns.do boolean
services.dns.edns.options text
services.dns.edns.udp unsigned_long
services.dns.edns.version unsigned_long
services.dns.questions.name text
services.dns.questions.response text
services.dns.r_code text
services.dns.resolves_correctly boolean
services.dns.server_type text
services.dns.version text

ELASTICSEARCH

Path Type Docs
services.elasticsearch.http_info.headers.accept_patch text
services.elasticsearch.http_info.headers.accept_ranges text
services.elasticsearch.http_info.headers.access_control_allow_origin text
services.elasticsearch.http_info.headers.age text
services.elasticsearch.http_info.headers.allow text
services.elasticsearch.http_info.headers.alt_svc text
services.elasticsearch.http_info.headers.alternate_protocol text
services.elasticsearch.http_info.headers.cache_control text
services.elasticsearch.http_info.headers.connection text
services.elasticsearch.http_info.headers.content_disposition text
services.elasticsearch.http_info.headers.content_encoding text
services.elasticsearch.http_info.headers.content_language text
services.elasticsearch.http_info.headers.content_length text
services.elasticsearch.http_info.headers.content_location text
services.elasticsearch.http_info.headers.content_md5 text
services.elasticsearch.http_info.headers.content_range text
services.elasticsearch.http_info.headers.content_security_policy text
services.elasticsearch.http_info.headers.content_type text
services.elasticsearch.http_info.headers.date text
services.elasticsearch.http_info.headers.etag text
services.elasticsearch.http_info.headers.expires text
services.elasticsearch.http_info.headers.last_modified text
services.elasticsearch.http_info.headers.link text
services.elasticsearch.http_info.headers.location text
services.elasticsearch.http_info.headers.p3p text
services.elasticsearch.http_info.headers.pragma text
services.elasticsearch.http_info.headers.proxy_agent text
services.elasticsearch.http_info.headers.proxy_authenticate text
services.elasticsearch.http_info.headers.public_key_pins text
services.elasticsearch.http_info.headers.referer text
services.elasticsearch.http_info.headers.refresh text
services.elasticsearch.http_info.headers.retry_after text
services.elasticsearch.http_info.headers.server text
services.elasticsearch.http_info.headers.set_cookie text
services.elasticsearch.http_info.headers.status text
services.elasticsearch.http_info.headers.strict_transport_security text
services.elasticsearch.http_info.headers.trailer text
services.elasticsearch.http_info.headers.transfer_encoding text
services.elasticsearch.http_info.headers.unknown.name text
services.elasticsearch.http_info.headers.unknown.value text
services.elasticsearch.http_info.headers.upgrade text
services.elasticsearch.http_info.headers.vary text
services.elasticsearch.http_info.headers.via text
services.elasticsearch.http_info.headers.warning text
services.elasticsearch.http_info.headers.www_authenticate text
services.elasticsearch.http_info.headers.x_content_duration text
services.elasticsearch.http_info.headers.x_content_security_policy text
services.elasticsearch.http_info.headers.x_content_type_options text
services.elasticsearch.http_info.headers.x_forwarded_for text
services.elasticsearch.http_info.headers.x_frame_options text
services.elasticsearch.http_info.headers.x_powered_by text
services.elasticsearch.http_info.headers.x_real_ip text
services.elasticsearch.http_info.headers.x_ua_compatible text
services.elasticsearch.http_info.headers.x_webkit_csp text
services.elasticsearch.http_info.headers.x_xss_protection text
services.elasticsearch.http_info.status text
services.elasticsearch.http_info.status_code integer
services.elasticsearch.node_info.cluster_combined_info.filesystem.available text Human-friendly available size
services.elasticsearch.node_info.cluster_combined_info.filesystem.available_in_bytes unsigned_long Available size in bytes
services.elasticsearch.node_info.cluster_combined_info.filesystem.free text Human-friendly free size
services.elasticsearch.node_info.cluster_combined_info.filesystem.free_in_bytes unsigned_long Free size in bytes
services.elasticsearch.node_info.cluster_combined_info.filesystem.total text Human-friendly total size
services.elasticsearch.node_info.cluster_combined_info.filesystem.total_in_bytes unsigned_long Total size in bytes
services.elasticsearch.node_info.cluster_combined_info.indices.count unsigned_long Total number of indices with shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.docs.count unsigned_long Total number of non-deleted documents across all primary shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.docs.deleted unsigned_long Total number of deleted documents across all primary shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.indices.store.reserved_in_bytes unsigned_long A prediction, in bytes, of how much larger the shard stores will eventually grow due to ongoing peer recoveries, restoring snapshots, and similar activities
services.elasticsearch.node_info.cluster_combined_info.indices.store.size_in_bytes unsigned_long Total size, in bytes, of all shards assigned to selected nodes
services.elasticsearch.node_info.cluster_combined_info.name text
services.elasticsearch.node_info.cluster_combined_info.status text
services.elasticsearch.node_info.cluster_combined_info.timestamp unsigned_long
services.elasticsearch.node_info.cluster_combined_info.uuid text
services.elasticsearch.node_info.nodes.node_data.build_flavor text
services.elasticsearch.node_info.nodes.node_data.build_hash text
services.elasticsearch.node_info.nodes.node_data.build_type text
services.elasticsearch.node_info.nodes.node_data.host text
services.elasticsearch.node_info.nodes.node_data.ingest_processors text
services.elasticsearch.node_info.nodes.node_data.ip ip
services.elasticsearch.node_info.nodes.node_data.jvm.gc text
services.elasticsearch.node_info.nodes.node_data.jvm.input_args text
services.elasticsearch.node_info.nodes.node_data.jvm.memory_pools text
services.elasticsearch.node_info.nodes.node_data.jvm.start_time text
services.elasticsearch.node_info.nodes.node_data.jvm.start_time_ms unsigned_long
services.elasticsearch.node_info.nodes.node_data.jvm.version text
services.elasticsearch.node_info.nodes.node_data.jvm.vm_name text
services.elasticsearch.node_info.nodes.node_data.jvm.vm_vendor text
services.elasticsearch.node_info.nodes.node_data.jvm.vm_version text
services.elasticsearch.node_info.nodes.node_data.modules.class_name text
services.elasticsearch.node_info.nodes.node_data.modules.desc text
services.elasticsearch.node_info.nodes.node_data.modules.elastic_version text
services.elasticsearch.node_info.nodes.node_data.modules.ext_plugins text
services.elasticsearch.node_info.nodes.node_data.modules.has_native_ctrl boolean
services.elasticsearch.node_info.nodes.node_data.modules.java_version text
services.elasticsearch.node_info.nodes.node_data.modules.name text
services.elasticsearch.node_info.nodes.node_data.modules.version text
services.elasticsearch.node_info.nodes.node_data.name text
services.elasticsearch.node_info.nodes.node_data.os.allocated_proc integer
services.elasticsearch.node_info.nodes.node_data.os.arch text
services.elasticsearch.node_info.nodes.node_data.os.available_proc integer
services.elasticsearch.node_info.nodes.node_data.os.name text
services.elasticsearch.node_info.nodes.node_data.os.pretty_name text
services.elasticsearch.node_info.nodes.node_data.os.refresh_interval_ms unsigned_long
services.elasticsearch.node_info.nodes.node_data.os.version text
services.elasticsearch.node_info.nodes.node_data.roles text
services.elasticsearch.node_info.nodes.node_data.settings.cluster_name text
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.enabled text
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.machine_memory text
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.ml.max_open_jobs text
services.elasticsearch.node_info.nodes.node_data.settings.node.attr.xpack_installed text
services.elasticsearch.node_info.nodes.node_data.settings.node.name text
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.keep_alive text
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.max integer
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.min integer
services.elasticsearch.node_info.nodes.node_data.thread_pool_list.queue_size integer
services.elasticsearch.node_info.nodes.node_data.total_indexing_buffer unsigned_long
services.elasticsearch.node_info.nodes.node_data.version text
services.elasticsearch.node_info.nodes.node_name text
services.elasticsearch.system_info.cluster_uuid text Cluster UUID
services.elasticsearch.system_info.name text Cluster Name
services.elasticsearch.system_info.tagline text Elasticsearch identifying tagline
services.elasticsearch.system_info.version.build_date text
services.elasticsearch.system_info.version.build_flavor text
services.elasticsearch.system_info.version.build_hash text
services.elasticsearch.system_info.version.build_snapshot boolean
services.elasticsearch.system_info.version.build_type text
services.elasticsearch.system_info.version.lucene_version text
services.elasticsearch.system_info.version.min_idx_compat_ver text
services.elasticsearch.system_info.version.min_wire_compat_ver text
services.elasticsearch.system_info.version.number text ES Cluster version

FOX

Path Type Docs
services.fox.app_name text
services.fox.app_version text
services.fox.auth_agent_type text
services.fox.brand_id text
services.fox.host_address text
services.fox.hostid text
services.fox.hostname text
services.fox.id unsigned_long
services.fox.language text
services.fox.os_name text
services.fox.os_version text
services.fox.station_name text
services.fox.sys_info text
services.fox.time_zone text
services.fox.version text
services.fox.vm_name text
services.fox.vm_uuid text
services.fox.vm_version text

FTP

Path Type Docs
services.ftp.auth_ssl_response text
services.ftp.auth_tls_response text
services.ftp.banner text
services.ftp.implicit_tls boolean
services.ftp.status_code integer
services.ftp.status_meaning text

HTTP

Path Type Docs
services.http.response.body text
services.http.response.body_hash keyword
services.http.response.body_size integer
services.http.response.favicons.md5_hash keyword
services.http.response.favicons.name text
services.http.response.favicons.size integer
services.http.response.headers.accept_patch text
services.http.response.headers.accept_ranges text
services.http.response.headers.access_control_allow_origin text
services.http.response.headers.age text
services.http.response.headers.allow text
services.http.response.headers.alt_svc text
services.http.response.headers.alternate_protocol text
services.http.response.headers.cache_control text
services.http.response.headers.connection text
services.http.response.headers.content_disposition text
services.http.response.headers.content_encoding text
services.http.response.headers.content_language text
services.http.response.headers.content_length text
services.http.response.headers.content_location text
services.http.response.headers.content_md5 text
services.http.response.headers.content_range text
services.http.response.headers.content_security_policy text
services.http.response.headers.content_type text
services.http.response.headers.date text
services.http.response.headers.etag text
services.http.response.headers.expires text
services.http.response.headers.last_modified text
services.http.response.headers.link text
services.http.response.headers.location text
services.http.response.headers.p3p text
services.http.response.headers.pragma text
services.http.response.headers.proxy_agent text
services.http.response.headers.proxy_authenticate text
services.http.response.headers.public_key_pins text
services.http.response.headers.referer text
services.http.response.headers.refresh text
services.http.response.headers.retry_after text
services.http.response.headers.server text
services.http.response.headers.set_cookie text
services.http.response.headers.status text
services.http.response.headers.strict_transport_security text
services.http.response.headers.trailer text
services.http.response.headers.transfer_encoding text
services.http.response.headers.unknown.name text
services.http.response.headers.unknown.value text
services.http.response.headers.upgrade text
services.http.response.headers.vary text
services.http.response.headers.via text
services.http.response.headers.warning text
services.http.response.headers.www_authenticate text
services.http.response.headers.x_content_duration text
services.http.response.headers.x_content_security_policy text
services.http.response.headers.x_content_type_options text
services.http.response.headers.x_forwarded_for text
services.http.response.headers.x_frame_options text
services.http.response.headers.x_powered_by text
services.http.response.headers.x_real_ip text
services.http.response.headers.x_ua_compatible text
services.http.response.headers.x_webkit_csp text
services.http.response.headers.x_xss_protection text
services.http.response.html_tags text
services.http.response.html_title text
services.http.response.protocol text
services.http.response.status_code integer
services.http.response.status_reason text

IKE

Path Type Docs
services.ike.v1.accepted_proposal boolean
services.ike.v1.notify_message_types unsigned_long
services.ike.v1.vendor_ids text
services.ike.v2.accepted_proposal boolean
services.ike.v2.notify_message_types unsigned_long
services.ike.v2.vendor_ids text

IMAP

Path Type Docs
services.imap.banner text The IMAP banner.
services.imap.start_tls text The server's response to the STARTTLS command.

IPMI

Path Type Docs
services.ipmi.capabilities.auth_status.anonymous_login_enabled boolean If true, the server allows anonymous login.
services.ipmi.capabilities.auth_status.auth_each_message boolean If true, each message must be authenticated.
services.ipmi.capabilities.auth_status.has_anonymous_users boolean If true, the server has anonymous users.
services.ipmi.capabilities.auth_status.has_named_users boolean If true, the server supports named users.
services.ipmi.capabilities.auth_status.two_key_login_required boolean The KG field.
services.ipmi.capabilities.auth_status.user_auth_disabled boolean If true, user authentication is disabled.
services.ipmi.capabilities.channel_number integer The response channel number
services.ipmi.capabilities.completion_code.name text The human-readable name of the code
services.ipmi.capabilities.completion_code.raw integer The raw completion code
services.ipmi.capabilities.extended_capabilities.supports_ipmi_v1_5 boolean True if IPMI v1.5 is supported
services.ipmi.capabilities.extended_capabilities.supports_ipmi_v2_0 boolean True if IPMI v2.0 is supported
services.ipmi.capabilities.oem_data integer The OEM-specific data
services.ipmi.capabilities.oem_id text The 3-byte OEM identifier
services.ipmi.capabilities.supported_auth_types.extended boolean If true, the extended capabilities are present.
services.ipmi.capabilities.supported_auth_types.md2 boolean True if the MD2 AuthType is supported.
services.ipmi.capabilities.supported_auth_types.md5 boolean True if the MD5 AuthType is supported.
services.ipmi.capabilities.supported_auth_types.none boolean True if the None AuthType is supported.
services.ipmi.capabilities.supported_auth_types.oem_proprietary boolean True if the OEM Proprietary AuthType is supported
services.ipmi.capabilities.supported_auth_types.password boolean True if the Password AuthType is supported.
services.ipmi.capabilities.supported_auth_types.raw integer The raw byte, with the bit mask etc
services.ipmi.command_payload.checksum_error boolean This is set to true if the values of chk1 / chk2 do not match the command data
services.ipmi.command_payload.data text The raw data. On success, this should be the value of the GetAuthenticationCapabilities resopnse
services.ipmi.command_payload.ipmi_command_number.name text The human-readable name of the cmd + NetFn
services.ipmi.command_payload.ipmi_command_number.raw integer The raw value of the cmd value
services.ipmi.command_payload.network_function_code.logical_unit_number.name text The human-readable name of the LUN
services.ipmi.command_payload.network_function_code.logical_unit_number.raw integer The value of the LUN (3 bits)
services.ipmi.command_payload.network_function_code.net_fn.is_request boolean True if the least-significant bit is zero
services.ipmi.command_payload.network_function_code.net_fn.is_response boolean True if the least-significant bit is one
services.ipmi.command_payload.network_function_code.net_fn.name text The human-readable name of the NetFn
services.ipmi.command_payload.network_function_code.net_fn.raw integer The raw value of the NetFn (6 bits, least significant indicates request/response)
services.ipmi.command_payload.network_function_code.net_fn.value integer The normalized value of the NetFn (i.e. raw & 0xfe, so it is always even)
services.ipmi.command_payload.network_function_code.raw integer The raw value of the (NetFn << 2) | LUN
services.ipmi.command_payload.requestor_sequence_number integer The request sequence number.
services.ipmi.raw text The raw data returned by the server
services.ipmi.rmcp_header.message_class.class integer Just the class part of the byte (lower 5 bits of raw)
services.ipmi.rmcp_header.message_class.is_ack boolean True if the message is an acknowledgment to a previous message.
services.ipmi.rmcp_header.message_class.name text The human-readable name of the message class
services.ipmi.rmcp_header.message_class.raw integer The raw message class byte.
services.ipmi.rmcp_header.sequence_number integer Sequence number of this packet in the session.
services.ipmi.rmcp_header.version integer The version. This scanner supports version 6.
services.ipmi.session_header.auth_code text The 16-byte authentication code; not present if auth_type is None.
services.ipmi.session_header.auth_type.name text The raw value of the auth_type
services.ipmi.session_header.auth_type.raw integer The raw value of the auth_type
services.ipmi.session_header.session_id long The ID of this sessiod.
services.ipmi.session_header.session_sequence_number long The session sequence number of this packet in the session

IPP

Path Type Docs
services.ipp.attribute_cups_version text
services.ipp.attribute_ipp_versions text
services.ipp.attribute_printer_uris text
services.ipp.attributes.name text
services.ipp.attributes.value_tag unsigned_long
services.ipp.cups_response.headers.accept_patch text
services.ipp.cups_response.headers.accept_ranges text
services.ipp.cups_response.headers.access_control_allow_origin text
services.ipp.cups_response.headers.age text
services.ipp.cups_response.headers.allow text
services.ipp.cups_response.headers.alt_svc text
services.ipp.cups_response.headers.alternate_protocol text
services.ipp.cups_response.headers.cache_control text
services.ipp.cups_response.headers.connection text
services.ipp.cups_response.headers.content_disposition text
services.ipp.cups_response.headers.content_encoding text
services.ipp.cups_response.headers.content_language text
services.ipp.cups_response.headers.content_length text
services.ipp.cups_response.headers.content_location text
services.ipp.cups_response.headers.content_md5 text
services.ipp.cups_response.headers.content_range text
services.ipp.cups_response.headers.content_security_policy text
services.ipp.cups_response.headers.content_type text
services.ipp.cups_response.headers.date text
services.ipp.cups_response.headers.etag text
services.ipp.cups_response.headers.expires text
services.ipp.cups_response.headers.last_modified text
services.ipp.cups_response.headers.link text
services.ipp.cups_response.headers.location text
services.ipp.cups_response.headers.p3p text
services.ipp.cups_response.headers.pragma text
services.ipp.cups_response.headers.proxy_agent text
services.ipp.cups_response.headers.proxy_authenticate text
services.ipp.cups_response.headers.public_key_pins text
services.ipp.cups_response.headers.referer text
services.ipp.cups_response.headers.refresh text
services.ipp.cups_response.headers.retry_after text
services.ipp.cups_response.headers.server text
services.ipp.cups_response.headers.set_cookie text
services.ipp.cups_response.headers.status text
services.ipp.cups_response.headers.strict_transport_security text
services.ipp.cups_response.headers.trailer text
services.ipp.cups_response.headers.transfer_encoding text
services.ipp.cups_response.headers.unknown.name text
services.ipp.cups_response.headers.unknown.value text
services.ipp.cups_response.headers.upgrade text
services.ipp.cups_response.headers.vary text
services.ipp.cups_response.headers.via text
services.ipp.cups_response.headers.warning text
services.ipp.cups_response.headers.www_authenticate text
services.ipp.cups_response.headers.x_content_duration text
services.ipp.cups_response.headers.x_content_security_policy text
services.ipp.cups_response.headers.x_content_type_options text
services.ipp.cups_response.headers.x_forwarded_for text
services.ipp.cups_response.headers.x_frame_options text
services.ipp.cups_response.headers.x_powered_by text
services.ipp.cups_response.headers.x_real_ip text
services.ipp.cups_response.headers.x_ua_compatible text
services.ipp.cups_response.headers.x_webkit_csp text
services.ipp.cups_response.headers.x_xss_protection text
services.ipp.cups_response.status text
services.ipp.cups_response.status_code integer
services.ipp.cups_version text
services.ipp.major_version unsigned_long
services.ipp.minor_version unsigned_long
services.ipp.response.headers.accept_patch text
services.ipp.response.headers.accept_ranges text
services.ipp.response.headers.access_control_allow_origin text
services.ipp.response.headers.age text
services.ipp.response.headers.allow text
services.ipp.response.headers.alt_svc text
services.ipp.response.headers.alternate_protocol text
services.ipp.response.headers.cache_control text
services.ipp.response.headers.connection text
services.ipp.response.headers.content_disposition text
services.ipp.response.headers.content_encoding text
services.ipp.response.headers.content_language text
services.ipp.response.headers.content_length text
services.ipp.response.headers.content_location text
services.ipp.response.headers.content_md5 text
services.ipp.response.headers.content_range text
services.ipp.response.headers.content_security_policy text
services.ipp.response.headers.content_type text
services.ipp.response.headers.date text
services.ipp.response.headers.etag text
services.ipp.response.headers.expires text
services.ipp.response.headers.last_modified text
services.ipp.response.headers.link text
services.ipp.response.headers.location text
services.ipp.response.headers.p3p text
services.ipp.response.headers.pragma text
services.ipp.response.headers.proxy_agent text
services.ipp.response.headers.proxy_authenticate text
services.ipp.response.headers.public_key_pins text
services.ipp.response.headers.referer text
services.ipp.response.headers.refresh text
services.ipp.response.headers.retry_after text
services.ipp.response.headers.server text
services.ipp.response.headers.set_cookie text
services.ipp.response.headers.status text
services.ipp.response.headers.strict_transport_security text
services.ipp.response.headers.trailer text
services.ipp.response.headers.transfer_encoding text
services.ipp.response.headers.unknown.name text
services.ipp.response.headers.unknown.value text
services.ipp.response.headers.upgrade text
services.ipp.response.headers.vary text
services.ipp.response.headers.via text
services.ipp.response.headers.warning text
services.ipp.response.headers.www_authenticate text
services.ipp.response.headers.x_content_duration text
services.ipp.response.headers.x_content_security_policy text
services.ipp.response.headers.x_content_type_options text
services.ipp.response.headers.x_forwarded_for text
services.ipp.response.headers.x_frame_options text
services.ipp.response.headers.x_powered_by text
services.ipp.response.headers.x_real_ip text
services.ipp.response.headers.x_ua_compatible text
services.ipp.response.headers.x_webkit_csp text
services.ipp.response.headers.x_xss_protection text
services.ipp.response.status text
services.ipp.response.status_code integer
services.ipp.version_string text

KUBERNETES

Path Type Docs
services.kubernetes.endpoints.name text
services.kubernetes.endpoints.self_link text
services.kubernetes.endpoints.subsets.addresses.hostname text
services.kubernetes.endpoints.subsets.addresses.ip ip
services.kubernetes.endpoints.subsets.addresses.node_name text
services.kubernetes.endpoints.subsets.ports.name text
services.kubernetes.endpoints.subsets.ports.port unsigned_long
services.kubernetes.endpoints.subsets.ports.protocol text
services.kubernetes.kubernetes_dashboard_found boolean True if the dashboard is running and accessible
services.kubernetes.nodes.addresses.address text Node address, IP/URL.
services.kubernetes.nodes.addresses.address_type text Node address type, one of Hostname, ExternalIP or InternalIP.
services.kubernetes.nodes.architecture text The Architecture reported by the node.
services.kubernetes.nodes.container_runtime_version text ContainerRuntime Version reported by the node through runtime remote API (e.g. docker://1.5.0).
services.kubernetes.nodes.images text List of container images on this node
services.kubernetes.nodes.kernel_version text Kernel Version reported by the node from 'uname -r' (e.g. 3.16.0-0.bpo.4-amd64).
services.kubernetes.nodes.kube_proxy_version text KubeProxy Version reported by the node.
services.kubernetes.nodes.kubelet_version text Kubelet Version reported by the node.
services.kubernetes.nodes.name text
services.kubernetes.nodes.operating_system text The Operating System reported by the node.
services.kubernetes.nodes.os_image text OS Image reported by the node from /etc/os-release (e.g. Debian GNU/Linux 7 (wheezy)).
services.kubernetes.pod_names text
services.kubernetes.roles.name text
services.kubernetes.roles.rules.api_groups text APIGroups is the name of the APIGroup that contains the resources. If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed.
services.kubernetes.roles.rules.resources text Resources is a list of resources this rule applies to. ResourceAll represents all resources
services.kubernetes.roles.rules.verbs text Verbs is a list of Verbs that apply to ALL the ResourceKinds and AttributeRestrictions contained in this rule. VerbAll represents all kinds.
services.kubernetes.version_info.build_date text Date version was built.
services.kubernetes.version_info.compiler text Go Compiler used
services.kubernetes.version_info.git_commit text Git commit version built from.
services.kubernetes.version_info.git_tree_state text State of the tree when built.
services.kubernetes.version_info.git_version text
services.kubernetes.version_info.go_version text Version of GO used to build version.
services.kubernetes.version_info.major text Kubernetes major version
services.kubernetes.version_info.minor text Kubernetes minor version
services.kubernetes.version_info.platform text Platform compiled for

MEMCACHED

Path Type Docs
services.memcached.ascii_binding_protocol_enabled boolean
services.memcached.binary_binding_protocol_enabled boolean
services.memcached.responds_to_udp boolean
services.memcached.stats.auth_enabled_sasl boolean
services.memcached.stats.libevent text
services.memcached.stats.other.key text
services.memcached.stats.other.value text
services.memcached.version text

MMS

Path Type Docs
services.mms.model text
services.mms.revision text
services.mms.vendor text

MODBUS

Path Type Docs
services.modbus.exception_response.exception_function unsigned_long
services.modbus.exception_response.exception_type unsigned_long
services.modbus.function unsigned_long
services.modbus.mei_response.conformity_level long
services.modbus.mei_response.more_follows boolean
services.modbus.mei_response.objects.model_name text
services.modbus.mei_response.objects.product_code text
services.modbus.mei_response.objects.product_name text
services.modbus.mei_response.objects.revision text
services.modbus.mei_response.objects.user_application_name text
services.modbus.mei_response.objects.vendor text
services.modbus.mei_response.objects.vendor_url text
services.modbus.unit_id long

MONGODB

Path Type Docs
services.mongodb.build_info.build_environment.cc text
services.mongodb.build_info.build_environment.cc_flags text
services.mongodb.build_info.build_environment.cxx text
services.mongodb.build_info.build_environment.cxx_flags text
services.mongodb.build_info.build_environment.dist_arch text
services.mongodb.build_info.build_environment.dist_mod text
services.mongodb.build_info.build_environment.link_flags text
services.mongodb.build_info.build_environment.target_arch text
services.mongodb.build_info.build_environment.target_os text
services.mongodb.build_info.git_version text Version of mongodb server
services.mongodb.build_info.version text Version of mongodb server
services.mongodb.is_master.is_master boolean
services.mongodb.is_master.logical_session_timeout_minutes integer
services.mongodb.is_master.max_bson_object_size integer
services.mongodb.is_master.max_message_size_bytes integer
services.mongodb.is_master.max_wire_version integer
services.mongodb.is_master.max_write_batch_size integer
services.mongodb.is_master.min_wire_version integer
services.mongodb.is_master.read_only boolean

MQTT

Path Type Docs
services.mqtt.connection_ack_raw text Raw CONNACK response packet
services.mqtt.connection_ack_return.raw unsigned_long Raw connect status value
services.mqtt.connection_ack_return.return_value text Connection status
services.mqtt.subscription_ack_return.raw unsigned_long Raw subscription response value
services.mqtt.subscription_ack_return.return_value text Subscription response

MSSQL

Path Type Docs
services.mssql.encrypt_mode text The negotiated ENCRYPT_MODE with the server
services.mssql.instance_name text
services.mssql.prelogin_options.encrypt_mode text
services.mssql.prelogin_options.fed_auth_required boolean
services.mssql.prelogin_options.instance text
services.mssql.prelogin_options.mars boolean
services.mssql.prelogin_options.nonce text
services.mssql.prelogin_options.server_version.build_number unsigned_long
services.mssql.prelogin_options.server_version.major unsigned_long
services.mssql.prelogin_options.server_version.minor unsigned_long
services.mssql.prelogin_options.thread_id unsigned_long
services.mssql.prelogin_options.trace_id text
services.mssql.prelogin_options.unknown.key unsigned_long
services.mssql.prelogin_options.unknown.value text
services.mssql.version text

MYSQL

Path Type Docs
services.mysql.auth_plugin_data text
services.mysql.auth_plugin_name text
services.mysql.capability_flags.client_can_handle_expired_passwords boolean
services.mysql.capability_flags.client_compress boolean
services.mysql.capability_flags.client_connect_attrs boolean
services.mysql.capability_flags.client_connect_with_db boolean
services.mysql.capability_flags.client_deprecated_eof boolean
services.mysql.capability_flags.client_found_rows boolean
services.mysql.capability_flags.client_ignore_sigpipe boolean
services.mysql.capability_flags.client_ignore_space boolean
services.mysql.capability_flags.client_interactive boolean
services.mysql.capability_flags.client_local_files boolean
services.mysql.capability_flags.client_long_flag boolean
services.mysql.capability_flags.client_long_password boolean
services.mysql.capability_flags.client_multi_results boolean
services.mysql.capability_flags.client_multi_statements boolean
services.mysql.capability_flags.client_no_schema boolean
services.mysql.capability_flags.client_odbc boolean
services.mysql.capability_flags.client_plugin_auth boolean
services.mysql.capability_flags.client_plugin_auth_len_enc_client_data boolean
services.mysql.capability_flags.client_protocol_41 boolean
services.mysql.capability_flags.client_ps_multi_results boolean
services.mysql.capability_flags.client_reserved boolean
services.mysql.capability_flags.client_secure_connection boolean
services.mysql.capability_flags.client_session_track boolean
services.mysql.capability_flags.client_ssl boolean
services.mysql.capability_flags.client_transactions boolean
services.mysql.character_set unsigned_long
services.mysql.connection_id unsigned_long
services.mysql.error_code long
services.mysql.error_id text
services.mysql.error_message text
services.mysql.protocol_version unsigned_long
services.mysql.server_version text
services.mysql.status_flags.server_more_results_exists boolean
services.mysql.status_flags.server_ps_out_params boolean
services.mysql.status_flags.server_query_no_good_index_used boolean
services.mysql.status_flags.server_query_no_index_used boolean
services.mysql.status_flags.server_query_was_slow boolean
services.mysql.status_flags.server_session_state_changed boolean
services.mysql.status_flags.server_status_autocommit boolean
services.mysql.status_flags.server_status_cursor_exists boolean
services.mysql.status_flags.server_status_db_dropped boolean
services.mysql.status_flags.server_status_in_trans boolean
services.mysql.status_flags.server_status_in_trans_readonly boolean
services.mysql.status_flags.server_status_last_row_sent boolean
services.mysql.status_flags.server_status_metadata_changed boolean
services.mysql.status_flags.server_status_no_backslash_escapes boolean

NTP

Path Type Docs
services.ntp.get_time_header.leap_indicator unsigned_long
services.ntp.get_time_header.mode unsigned_long
services.ntp.get_time_header.poll integer
services.ntp.get_time_header.precision integer
services.ntp.get_time_header.reference_id text
services.ntp.get_time_header.stratum unsigned_long
services.ntp.get_time_header.version unsigned_long

OPENVPN

Path Type Docs
services.openvpn.accepts_v1 boolean
services.openvpn.accepts_v2 boolean

ORACLE

Path Type Docs
services.oracle.accept_version unsigned_long
services.oracle.connect_flags0.interchange_involved boolean
services.oracle.connect_flags0.services_enabled boolean
services.oracle.connect_flags0.services_linked_in boolean
services.oracle.connect_flags0.services_required boolean
services.oracle.connect_flags0.services_wanted boolean
services.oracle.connect_flags0.unknown_20 boolean
services.oracle.connect_flags0.unknown_40 boolean
services.oracle.connect_flags0.unknown_80 boolean
services.oracle.connect_flags1.interchange_involved boolean
services.oracle.connect_flags1.services_enabled boolean
services.oracle.connect_flags1.services_linked_in boolean
services.oracle.connect_flags1.services_required boolean
services.oracle.connect_flags1.services_wanted boolean
services.oracle.connect_flags1.unknown_20 boolean
services.oracle.connect_flags1.unknown_40 boolean
services.oracle.connect_flags1.unknown_80 boolean
services.oracle.did_resend boolean
services.oracle.global_service_options.attention_processing boolean
services.oracle.global_service_options.broken_connect_notify boolean
services.oracle.global_service_options.can_receive_attention boolean
services.oracle.global_service_options.can_send_attention boolean
services.oracle.global_service_options.direct_io boolean
services.oracle.global_service_options.full_duplex boolean
services.oracle.global_service_options.half_duplex boolean
services.oracle.global_service_options.header_checksum boolean
services.oracle.global_service_options.packet_checksum boolean
services.oracle.global_service_options.unknown_0001 boolean
services.oracle.global_service_options.unknown_0020 boolean
services.oracle.global_service_options.unknown_0040 boolean
services.oracle.global_service_options.unknown_0080 boolean
services.oracle.global_service_options.unknown_0100 boolean
services.oracle.nsn_service_versions.authentication text
services.oracle.nsn_service_versions.data_integrity text
services.oracle.nsn_service_versions.encryption text
services.oracle.nsn_service_versions.supervisor text
services.oracle.nsn_version text
services.oracle.redirect_target.key text
services.oracle.redirect_target.value text
services.oracle.redirect_target_raw text
services.oracle.refuse_error.key text
services.oracle.refuse_error.value text
services.oracle.refuse_error_raw text
services.oracle.refuse_reason_app text
services.oracle.refuse_reason_sys text
services.oracle.refuse_version text

PC_ANYWHERE

Path Type Docs
services.pc_anywhere.name text Workstation Name, with padding bytes removed
services.pc_anywhere.nr text Full 'NR' query response
services.pc_anywhere.status.in_use boolean Workstation is In Use if true, Available if false
services.pc_anywhere.status.raw text Full 'ST' query response

POP3

Path Type Docs
services.pop3.banner text The POP3 banner.
services.pop3.start_tls text The server's response to the STARTTLS command.

POSTGRES

Path Type Docs
services.postgres.authentication_mode.mode text
services.postgres.authentication_mode.payload text
services.postgres.protocol_error._unknown_error_tag text
services.postgres.protocol_error.code text
services.postgres.protocol_error.constraint text
services.postgres.protocol_error.data text
services.postgres.protocol_error.detail text
services.postgres.protocol_error.file text
services.postgres.protocol_error.hint text
services.postgres.protocol_error.internal_position text
services.postgres.protocol_error.internal_query text
services.postgres.protocol_error.line text
services.postgres.protocol_error.message text
services.postgres.protocol_error.position text
services.postgres.protocol_error.routine text
services.postgres.protocol_error.schema text
services.postgres.protocol_error.severity text
services.postgres.protocol_error.severity_v text
services.postgres.protocol_error.table text
services.postgres.protocol_error.where text
services.postgres.startup_error._unknown_error_tag text
services.postgres.startup_error.code text
services.postgres.startup_error.constraint text
services.postgres.startup_error.data text
services.postgres.startup_error.detail text
services.postgres.startup_error.file text
services.postgres.startup_error.hint text
services.postgres.startup_error.internal_position text
services.postgres.startup_error.internal_query text
services.postgres.startup_error.line text
services.postgres.startup_error.message text
services.postgres.startup_error.position text
services.postgres.startup_error.routine text
services.postgres.startup_error.schema text
services.postgres.startup_error.severity text
services.postgres.startup_error.severity_v text
services.postgres.startup_error.table text
services.postgres.startup_error.where text
services.postgres.supported_versions text
services.postgres.transaction_status text

PPTP

Path Type Docs
services.pptp.bearer_message.code unsigned_long
services.pptp.bearer_message.meaning text
services.pptp.error_message.code unsigned_long
services.pptp.error_message.meaning text
services.pptp.firmware.major unsigned_long
services.pptp.firmware.minor unsigned_long
services.pptp.framing_message.code unsigned_long
services.pptp.framing_message.meaning text
services.pptp.hostname text
services.pptp.maximum_channels unsigned_long
services.pptp.protocol.major unsigned_long
services.pptp.protocol.minor unsigned_long
services.pptp.result_message.code unsigned_long
services.pptp.result_message.meaning text
services.pptp.vendor text

PROMETHEUS

Path Type Docs
services.prometheus.http_info.headers.accept_patch text
services.prometheus.http_info.headers.accept_ranges text
services.prometheus.http_info.headers.access_control_allow_origin text
services.prometheus.http_info.headers.age text
services.prometheus.http_info.headers.allow text
services.prometheus.http_info.headers.alt_svc text
services.prometheus.http_info.headers.alternate_protocol text
services.prometheus.http_info.headers.cache_control text
services.prometheus.http_info.headers.connection text
services.prometheus.http_info.headers.content_disposition text
services.prometheus.http_info.headers.content_encoding text
services.prometheus.http_info.headers.content_language text
services.prometheus.http_info.headers.content_length text
services.prometheus.http_info.headers.content_location text
services.prometheus.http_info.headers.content_md5 text
services.prometheus.http_info.headers.content_range text
services.prometheus.http_info.headers.content_security_policy text
services.prometheus.http_info.headers.content_type text
services.prometheus.http_info.headers.date text
services.prometheus.http_info.headers.etag text
services.prometheus.http_info.headers.expires text
services.prometheus.http_info.headers.last_modified text
services.prometheus.http_info.headers.link text
services.prometheus.http_info.headers.location text
services.prometheus.http_info.headers.p3p text
services.prometheus.http_info.headers.pragma text
services.prometheus.http_info.headers.proxy_agent text
services.prometheus.http_info.headers.proxy_authenticate text
services.prometheus.http_info.headers.public_key_pins text
services.prometheus.http_info.headers.referer text
services.prometheus.http_info.headers.refresh text
services.prometheus.http_info.headers.retry_after text
services.prometheus.http_info.headers.server text
services.prometheus.http_info.headers.set_cookie text
services.prometheus.http_info.headers.status text
services.prometheus.http_info.headers.strict_transport_security text
services.prometheus.http_info.headers.trailer text
services.prometheus.http_info.headers.transfer_encoding text
services.prometheus.http_info.headers.unknown.name text
services.prometheus.http_info.headers.unknown.value text
services.prometheus.http_info.headers.upgrade text
services.prometheus.http_info.headers.vary text
services.prometheus.http_info.headers.via text
services.prometheus.http_info.headers.warning text
services.prometheus.http_info.headers.www_authenticate text
services.prometheus.http_info.headers.x_content_duration text
services.prometheus.http_info.headers.x_content_security_policy text
services.prometheus.http_info.headers.x_content_type_options text
services.prometheus.http_info.headers.x_forwarded_for text
services.prometheus.http_info.headers.x_frame_options text
services.prometheus.http_info.headers.x_powered_by text
services.prometheus.http_info.headers.x_real_ip text
services.prometheus.http_info.headers.x_ua_compatible text
services.prometheus.http_info.headers.x_webkit_csp text
services.prometheus.http_info.headers.x_xss_protection text
services.prometheus.http_info.status text
services.prometheus.http_info.status_code integer
services.prometheus.response.active_targets.discovered_labels.address text Address of target.
services.prometheus.response.active_targets.discovered_labels.job text Job of target.
services.prometheus.response.active_targets.discovered_labels.metrics_path text Path to metrics of target.
services.prometheus.response.active_targets.discovered_labels.scheme text URL scheme.
services.prometheus.response.active_targets.health text Whether target is up or down.
services.prometheus.response.active_targets.labels.instance text Instance after relabelling has occurred.
services.prometheus.response.active_targets.labels.job text Job of target after relabelling has occurred.
services.prometheus.response.active_targets.last_error text Last error that occurred within target.
services.prometheus.response.active_targets.last_scrape text Last time Prometheus scraped target.
services.prometheus.response.active_targets.scrape_url text URL that Prometheus scraped.
services.prometheus.response.all_versions text List of the versions of everything that Prometheus finds i.e., version of Prometheus, Go, Node, cAdvisor, etc.
services.prometheus.response.dropped_targets.address text Address of target.
services.prometheus.response.dropped_targets.job text Job of target.
services.prometheus.response.dropped_targets.metrics_path text Path to metrics of target.
services.prometheus.response.dropped_targets.scheme text URL scheme.
services.prometheus.response.go_versions text List of the versions of Go.
services.prometheus.response.prometheus_versions.go_version text Version of Go used to build Prometheus.
services.prometheus.response.prometheus_versions.revision text Revision of Prometheus.
services.prometheus.response.prometheus_versions.version text Version of Prometheus.

RDP

Path Type Docs
services.rdp.certificate_info.internal_x509_chain_fps keyword
services.rdp.certificate_info.proprietary_rsa_key.key_length unsigned_long
services.rdp.certificate_info.proprietary_rsa_key.magic unsigned_long
services.rdp.certificate_info.proprietary_rsa_key.max_bytes_datalen unsigned_long
services.rdp.certificate_info.proprietary_rsa_key.modulus text
services.rdp.certificate_info.proprietary_rsa_key.modulus_bitlen unsigned_long
services.rdp.certificate_info.proprietary_rsa_key.public_exponent unsigned_long
services.rdp.certificate_info.proprietary_rsa_key.signature text
services.rdp.connect_response.connect_id unsigned_long
services.rdp.connect_response.domain_parameters.domain_protocol_version long
services.rdp.connect_response.domain_parameters.max_channel_ids long
services.rdp.connect_response.domain_parameters.max_mcspdu_size long
services.rdp.connect_response.domain_parameters.max_provider_height long
services.rdp.connect_response.domain_parameters.max_token_ids long
services.rdp.connect_response.domain_parameters.max_user_id_channels long
services.rdp.connect_response.domain_parameters.min_throughput long
services.rdp.connect_response.domain_parameters.num_priorities long
services.rdp.protocol_flags.dynvc_graphics_pipeline boolean
services.rdp.protocol_flags.extended_client_data_supported boolean
services.rdp.protocol_flags.neg_resp_reserved boolean
services.rdp.protocol_flags.restricted_admin_mode boolean
services.rdp.protocol_flags.restricted_auth_mode boolean
services.rdp.selected_security_protocol.credssp boolean
services.rdp.selected_security_protocol.credssp_early_auth boolean
services.rdp.selected_security_protocol.error boolean
services.rdp.selected_security_protocol.error_bad_flags boolean
services.rdp.selected_security_protocol.error_hybrid_required boolean
services.rdp.selected_security_protocol.error_ssl_cert_missing boolean
services.rdp.selected_security_protocol.error_ssl_forbidden boolean
services.rdp.selected_security_protocol.error_ssl_required boolean
services.rdp.selected_security_protocol.error_ssl_user_auth_required boolean
services.rdp.selected_security_protocol.error_unknown boolean
services.rdp.selected_security_protocol.raw_value unsigned_long
services.rdp.selected_security_protocol.rdstls boolean
services.rdp.selected_security_protocol.standard_rdp boolean
services.rdp.selected_security_protocol.tls boolean
services.rdp.version.major integer
services.rdp.version.minor integer
services.rdp.version.raw unsigned_long Raw Version Response, Major version is stored in upper 2 bytes, minor in lower 2 bytes.
services.rdp.x224_cc_pdu_srcref unsigned_long

REDIS

Path Type Docs
services.redis.arch_bits text The architecture bits (32 or 64) the Redis server used to build.
services.redis.auth_response text The response from the AUTH command, if sent.
services.redis.build_id text The Build ID of the Redis server.
services.redis.commands text The list of commands actually sent to the server, serialized in inline format, like 'PING' or 'AUTH somePassword'.
services.redis.commands_processed unsigned_long The total number of commands processed by the server.
services.redis.connections_received unsigned_long The total number of connections accepted by the server.
services.redis.gcc_version text The version of the GCC compiler used to compile the Redis server.
services.redis.git_sha1 text The Sha-1 Git commit hash the Redis server used.
services.redis.info_response.key text
services.redis.info_response.value text
services.redis.major unsigned_long Major is the version's major number.
services.redis.mem_allocator text The memory allocator.
services.redis.minor unsigned_long Minor is the version's major number.
services.redis.mode text The mode the Redis server is running (standalone or cluster), read from the the info_response (if available).
services.redis.nonexistent_response text The response from the NONEXISTENT command.
services.redis.os text The OS the Redis server is running, read from the the info_response (if available).
services.redis.patch_level unsigned_long Patchlevel is the version's patchlevel number.
services.redis.ping_response text The response from the PING command; should either be "PONG" or an authentication error.
services.redis.quit_response text The response to the QUIT command.
services.redis.raw_command_output.output text
services.redis.uptime unsigned_long The number of seconds since Redis server start.
services.redis.used_memory unsigned_long The total number of bytes allocated by Redis using its allocator.

S7

Path Type Docs
services.s7.copyright text
services.s7.cpu_profile text
services.s7.firmware text
services.s7.hardware text
services.s7.location text
services.s7.memory_serial_number text
services.s7.module text
services.s7.module_id text
services.s7.module_type text
services.s7.oem_id text
services.s7.plant_id text
services.s7.reserved_for_os text
services.s7.serial_number text
services.s7.system text

SIP

Path Type Docs
services.sip.code integer
services.sip.server text Server software reported by service
services.sip.status text
services.sip.version text SIP version

SKINNY

Path Type Docs
services.skinny.response text

SMB

Path Type Docs
services.smb.group_name text Default group name
services.smb.has_ntlm boolean Server supports the NTLM authentication method
services.smb.native_os text Server-identified operating system
services.smb.negotiation_log.authentication_types text
services.smb.negotiation_log.capabilities unsigned_long
services.smb.negotiation_log.dialect_revision unsigned_long
services.smb.negotiation_log.header_log.command unsigned_long
services.smb.negotiation_log.header_log.credits unsigned_long
services.smb.negotiation_log.header_log.flags unsigned_long
services.smb.negotiation_log.header_log.protocol_id text
services.smb.negotiation_log.header_log.status unsigned_long
services.smb.negotiation_log.security_mode unsigned_long
services.smb.negotiation_log.server_guid text
services.smb.negotiation_log.server_start_time unsigned_long
services.smb.negotiation_log.system_time unsigned_long
services.smb.ntlm text Native LAN manager
services.smb.session_setup_log.header_log.command unsigned_long
services.smb.session_setup_log.header_log.credits unsigned_long
services.smb.session_setup_log.header_log.flags unsigned_long
services.smb.session_setup_log.header_log.protocol_id text
services.smb.session_setup_log.header_log.status unsigned_long
services.smb.session_setup_log.negotiate_flags unsigned_long
services.smb.session_setup_log.setup_flags unsigned_long
services.smb.session_setup_log.target_name text
services.smb.smb_capabilities.smb_dfs_support boolean Server supports Distributed File System
services.smb.smb_capabilities.smb_directory_leasing_support boolean Server supports directory leasing
services.smb.smb_capabilities.smb_encryption_support boolean Server supports encryption
services.smb.smb_capabilities.smb_leasing_support boolean Server supports Leasing
services.smb.smb_capabilities.smb_multichan_support boolean Server supports multiple channels per session
services.smb.smb_capabilities.smb_multicredit_support boolean Server supports multi-credit operations
services.smb.smb_capabilities.smb_persistent_handle_support boolean Server supports persistent handles
services.smb.smb_version.major unsigned_long Major version
services.smb.smb_version.minor unsigned_long Minor version
services.smb.smb_version.revision unsigned_long Protocol Revision
services.smb.smb_version.version_string text Full SMB Version String
services.smb.smbv1_support boolean

SMTP

Path Type Docs
services.smtp.banner text The STMP banner.
services.smtp.ehlo text The server's response to the EHLO command.
services.smtp.implicit_tls boolean True if the handshake was entirely over tls, instead of an upgrade via STARTTLS
services.smtp.start_tls text The server's response to the STARTTLS command.

SNMP

Path Type Docs
services.snmp.oid_interfaces.num_ifaces unsigned_long 1.3.6.1.2.1.2.1 - Number of network interfaces
services.snmp.oid_physical.firmware_rev text 1.3.6.1.2.1.47.1.1.1.1.9 - Firmware revision string
services.snmp.oid_physical.hardware_rev text 1.3.6.1.2.1.47.1.1.1.1.8 - Hardware revision string
services.snmp.oid_physical.mfg_name text 1.3.6.1.2.1.47.1.1.1.1.12 - Name of mfg
services.snmp.oid_physical.model_name text 1.3.6.1.2.1.47.1.1.1.1.13 - Model name of component
services.snmp.oid_physical.name text 1.3.6.1.2.1.47.1.1.1.1.7 - Entity name
services.snmp.oid_physical.serial_num text 1.3.6.1.2.1.47.1.1.1.1.11 - Serial number string
services.snmp.oid_physical.software_rev text 1.3.6.1.2.1.47.1.1.1.1.10 - Software revision string
services.snmp.oid_system.contact text 1.3.6.1.2.1.1.4 - Contact info
services.snmp.oid_system.desc text 1.3.6.1.2.1.1.1 - Description of entity
services.snmp.oid_system.init_time unsigned_long 1.3.6.1.2.1.1.3 - 1/100ths of sec
services.snmp.oid_system.location text 1.3.6.1.2.1.1.6 - Physical location
services.snmp.oid_system.name text 1.3.6.1.2.1.1.5 - Name, usually FQDN
services.snmp.oid_system.object_id text 1.3.6.1.2.1.1.2 - Vendor ID
services.snmp.oid_system.services.layer_1 boolean Physical (e.g. repeaters)
services.snmp.oid_system.services.layer_2 boolean Datalink/subnetwork (e.g. bridges)
services.snmp.oid_system.services.layer_3 boolean Internet (e.g. IP gateways)
services.snmp.oid_system.services.layer_4 boolean End-to-end (e.g. IP hosts)
services.snmp.oid_system.services.layer_5 boolean OSI layer 5
services.snmp.oid_system.services.layer_6 boolean OSI layer 6
services.snmp.oid_system.services.layer_7 boolean Applications (e.g. mail relays)

SSDP

Path Type Docs
services.ssdp.headers.accept_patch text
services.ssdp.headers.accept_ranges text
services.ssdp.headers.access_control_allow_origin text
services.ssdp.headers.age text
services.ssdp.headers.allow text
services.ssdp.headers.alt_svc text
services.ssdp.headers.alternate_protocol text
services.ssdp.headers.cache_control text
services.ssdp.headers.connection text
services.ssdp.headers.content_disposition text
services.ssdp.headers.content_encoding text
services.ssdp.headers.content_language text
services.ssdp.headers.content_length text
services.ssdp.headers.content_location text
services.ssdp.headers.content_md5 text
services.ssdp.headers.content_range text
services.ssdp.headers.content_security_policy text
services.ssdp.headers.content_type text
services.ssdp.headers.date text
services.ssdp.headers.etag text
services.ssdp.headers.expires text
services.ssdp.headers.last_modified text
services.ssdp.headers.link text
services.ssdp.headers.location text
services.ssdp.headers.p3p text
services.ssdp.headers.pragma text
services.ssdp.headers.proxy_agent text
services.ssdp.headers.proxy_authenticate text
services.ssdp.headers.public_key_pins text
services.ssdp.headers.referer text
services.ssdp.headers.refresh text
services.ssdp.headers.retry_after text
services.ssdp.headers.server text
services.ssdp.headers.set_cookie text
services.ssdp.headers.status text
services.ssdp.headers.strict_transport_security text
services.ssdp.headers.trailer text
services.ssdp.headers.transfer_encoding text
services.ssdp.headers.unknown.name text
services.ssdp.headers.unknown.value text
services.ssdp.headers.upgrade text
services.ssdp.headers.vary text
services.ssdp.headers.via text
services.ssdp.headers.warning text
services.ssdp.headers.www_authenticate text
services.ssdp.headers.x_content_duration text
services.ssdp.headers.x_content_security_policy text
services.ssdp.headers.x_content_type_options text
services.ssdp.headers.x_forwarded_for text
services.ssdp.headers.x_frame_options text
services.ssdp.headers.x_powered_by text
services.ssdp.headers.x_real_ip text
services.ssdp.headers.x_ua_compatible text
services.ssdp.headers.x_webkit_csp text
services.ssdp.headers.x_xss_protection text
services.ssdp.upnp_url text

SSH

Path Type Docs
services.ssh.algorithm_selection.client_to_server_alg_group.cipher text
services.ssh.algorithm_selection.client_to_server_alg_group.compression text
services.ssh.algorithm_selection.client_to_server_alg_group.mac text
services.ssh.algorithm_selection.host_key_algorithm text
services.ssh.algorithm_selection.kex_algorithm text
services.ssh.algorithm_selection.server_to_client_alg_group.cipher text
services.ssh.algorithm_selection.server_to_client_alg_group.compression text
services.ssh.algorithm_selection.server_to_client_alg_group.mac text
services.ssh.endpoint_id.comment text
services.ssh.endpoint_id.protocol_version text
services.ssh.endpoint_id.raw text
services.ssh.endpoint_id.software_version text
services.ssh.kex_init_message.client_to_server_ciphers text A list of ssh cipher algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16 for standard values.
services.ssh.kex_init_message.client_to_server_compression text A list of ssh compression algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-20 for standard values.
services.ssh.kex_init_message.client_to_server_languages text A name-list of language tags in order of preference. As Defined in https://www.ietf.org/rfc/rfc3066.txt.
services.ssh.kex_init_message.client_to_server_macs text A list of ssh MAC algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-18 for standard values.
services.ssh.kex_init_message.first_kex_follows boolean
services.ssh.kex_init_message.host_key_algorithms text Asymmetric key algorithms for the host key supported by the client.
services.ssh.kex_init_message.kex_algorithms text Key exchange algorithms used in the handshake.
services.ssh.kex_init_message.server_to_client_ciphers text A list of ssh cipher algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-16 for standard values.
services.ssh.kex_init_message.server_to_client_compression text A list of ssh compression algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-20 for standard values.
services.ssh.kex_init_message.server_to_client_languages text A name-list of language tags in order of preference. As Defined in https://www.ietf.org/rfc/rfc3066.txt.
services.ssh.kex_init_message.server_to_client_macs text A list of ssh MAC algorithm identifiers, named according to section 6 of https://www.ietf.org/rfc/rfc4251.txt; see https://www.iana.org/assignments/ssh-parameters/ssh-parameters.xhtml#ssh-parameters-18 for standard values.
services.ssh.server_host_key.certkey_public_key text
services.ssh.server_host_key.dsa_public_key.g text
services.ssh.server_host_key.dsa_public_key.p text
services.ssh.server_host_key.dsa_public_key.q text
services.ssh.server_host_key.dsa_public_key.y text
services.ssh.server_host_key.ecdsa_public_key.b text
services.ssh.server_host_key.ecdsa_public_key.curve keyword
services.ssh.server_host_key.ecdsa_public_key.gx text
services.ssh.server_host_key.ecdsa_public_key.gy text
services.ssh.server_host_key.ecdsa_public_key.length unsigned_long
services.ssh.server_host_key.ecdsa_public_key.n text
services.ssh.server_host_key.ecdsa_public_key.p text
services.ssh.server_host_key.ecdsa_public_key.pub text
services.ssh.server_host_key.ecdsa_public_key.x text
services.ssh.server_host_key.ecdsa_public_key.y text
services.ssh.server_host_key.ed25519_public_key.public_bytes text
services.ssh.server_host_key.fingerprint_sha256 text
services.ssh.server_host_key.rsa_public_key.exponent text
services.ssh.server_host_key.rsa_public_key.length unsigned_long
services.ssh.server_host_key.rsa_public_key.modulus text

TEAM_VIEWER

Path Type Docs
services.team_viewer.response text

TELNET

Path Type Docs
services.telnet.banner text
services.telnet.do.key unsigned_long
services.telnet.do.value text
services.telnet.dont.key unsigned_long
services.telnet.dont.value text
services.telnet.will.key unsigned_long
services.telnet.will.value text
services.telnet.wont.key unsigned_long
services.telnet.wont.value text

UPNP

Path Type Docs
services.upnp.devices.device_type text
services.upnp.devices.friendly_name text
services.upnp.devices.id integer
services.upnp.devices.manufacturer text
services.upnp.devices.manufacturer_url text
services.upnp.devices.model_description text
services.upnp.devices.model_name text
services.upnp.devices.model_number text
services.upnp.devices.model_url text
services.upnp.devices.parent_id integer
services.upnp.devices.presentation_url text
services.upnp.devices.serial_number text
services.upnp.devices.service_list.control_url text
services.upnp.devices.service_list.event_sub_url text
services.upnp.devices.service_list.scpd_url text
services.upnp.devices.service_list.service_id text
services.upnp.devices.service_list.service_type text
services.upnp.devices.udn text
services.upnp.devices.upc text
services.upnp.endpoint text
services.upnp.headers.accept_patch text
services.upnp.headers.accept_ranges text
services.upnp.headers.access_control_allow_origin text
services.upnp.headers.age text
services.upnp.headers.allow text
services.upnp.headers.alt_svc text
services.upnp.headers.alternate_protocol text
services.upnp.headers.cache_control text
services.upnp.headers.connection text
services.upnp.headers.content_disposition text
services.upnp.headers.content_encoding text
services.upnp.headers.content_language text
services.upnp.headers.content_length text
services.upnp.headers.content_location text
services.upnp.headers.content_md5 text
services.upnp.headers.content_range text
services.upnp.headers.content_security_policy text
services.upnp.headers.content_type text
services.upnp.headers.date text
services.upnp.headers.etag text
services.upnp.headers.expires text
services.upnp.headers.last_modified text
services.upnp.headers.link text
services.upnp.headers.location text
services.upnp.headers.p3p text
services.upnp.headers.pragma text
services.upnp.headers.proxy_agent text
services.upnp.headers.proxy_authenticate text
services.upnp.headers.public_key_pins text
services.upnp.headers.referer text
services.upnp.headers.refresh text
services.upnp.headers.retry_after text
services.upnp.headers.server text
services.upnp.headers.set_cookie text
services.upnp.headers.status text
services.upnp.headers.strict_transport_security text
services.upnp.headers.trailer text
services.upnp.headers.transfer_encoding text
services.upnp.headers.unknown.name text
services.upnp.headers.unknown.value text
services.upnp.headers.upgrade text
services.upnp.headers.vary text
services.upnp.headers.via text
services.upnp.headers.warning text
services.upnp.headers.www_authenticate text
services.upnp.headers.x_content_duration text
services.upnp.headers.x_content_security_policy text
services.upnp.headers.x_content_type_options text
services.upnp.headers.x_forwarded_for text
services.upnp.headers.x_frame_options text
services.upnp.headers.x_powered_by text
services.upnp.headers.x_real_ip text
services.upnp.headers.x_ua_compatible text
services.upnp.headers.x_webkit_csp text
services.upnp.headers.x_xss_protection text
services.upnp.spec.major text
services.upnp.spec.minor text

VNC

Path Type Docs
services.vnc.connection_failed_reason text If server terminates handshake, the reason offered (if any)
services.vnc.desktop_name text Desktop name provided by the server, capped at 255 bytes
services.vnc.pixel_encoding.name text
services.vnc.pixel_encoding.value integer
services.vnc.screen_info.height unsigned_long
services.vnc.screen_info.name_len unsigned_long
services.vnc.screen_info.pixel_format.big_endian boolean If pixel RGB data are in big-endian
services.vnc.screen_info.pixel_format.bits_per_pixel unsigned_long How many bits in a single full pixel datum. Valid values are: 8, 16, 32
services.vnc.screen_info.pixel_format.blue_max unsigned_long Max value of blue pixel
services.vnc.screen_info.pixel_format.blue_shift unsigned_long How many bits to right shift a pixel datum to get blue bits in lsb
services.vnc.screen_info.pixel_format.depth unsigned_long Color depth
services.vnc.screen_info.pixel_format.green_max unsigned_long Max value of green pixel
services.vnc.screen_info.pixel_format.green_shift unsigned_long How many bits to right shift a pixel datum to get green bits in lsb
services.vnc.screen_info.pixel_format.padding1 unsigned_long
services.vnc.screen_info.pixel_format.padding2 unsigned_long
services.vnc.screen_info.pixel_format.padding3 unsigned_long
services.vnc.screen_info.pixel_format.red_max unsigned_long Max value of red pixel
services.vnc.screen_info.pixel_format.red_shift unsigned_long How many bits to right shift a pixel datum to get red bits in lsb
services.vnc.screen_info.pixel_format.true_color boolean If false, color maps are used
services.vnc.screen_info.width unsigned_long
services.vnc.security_types.name text
services.vnc.security_types.value integer
services.vnc.version text

X11

Path Type Docs
services.x11.refusal_reason text
services.x11.requires_authentication boolean
services.x11.vendor text
services.x11.version text

MISC

Path Type Docs
services.transport_fingerprint.id integer
services.transport_fingerprint.os text
services.transport_fingerprint.raw text