Protocols G–L

Protocol-specific service search fields in Protocols G–L. Dataset: services

object

Show Fields

uint32

Protocol version marker (first response byte). Operators: : = != < <= > >=.

uint32

Service request code from response header. Operators: : = != < <= > >=.

object

Show Fields

string

Meta field from the Gemini response header. Operators: : = != =~ :~.

uint32

Two-digit Gemini status code. Operators: : = != < <= > >=.

object

Show Fields

string

RSA exponent carried in the banner’s XML public key. Operators: : = != =~ :~.

string

RSA modulus carried in the banner’s XML public key. Operators: : = != =~ :~.

string

Hex-encoded bytes that preceded the RSAKeyValue XML payload. Operators: : = != =~ :~.

bool

True when the XML payload was encoded with interleaved NUL bytes. Operators: : = !=.

object

Show Fields

uint32

Driver protocol version reported by the banner. Operators: : = != < <= > >=.

uint32

Parsed H2 error code when present (for example 90047). Operators: : = != < <= > >=.

string

Parsed version-mismatch message body. Operators: : = != =~ :~.

string

Exception class embedded in the response, when present. Operators: : = != =~ :~.

uint32

Server protocol version reported by the banner. Operators: : = != < <= > >=.

bool

True when the response matched the short exact H2 signature. Operators: : = !=.

bool

True when the response is the H2 protocol version mismatch error path. Operators: : = !=.

object

Show Fields

uint32

Command 0 response status code. Operators: : = != < <= > >=.

uint32

HART-IP protocol version from session response. Operators: : = != < <= > >=.

uint32

Session response status code. Operators: : = != < <= > >=.

uint32

Session sequence number. Operators: : = != < <= > >=.

object

Show Fields

uint32

Device revision. Operators: : = != < <= > >=.

uint32

Expanded device type code. Operators: : = != < <= > >=.

uint32

HART protocol major revision. Operators: : = != < <= > >=.

uint32

Manufacturer ID. Operators: : = != < <= > >=.

uint32

Private label distributor ID. Operators: : = != < <= > >=.

uint32

Software revision. Operators: : = != < <= > >=.

object

Show Fields

string

Listener error message id, for example EZY1315E. Operators: : = != =~ :~.

string

Transaction id value from INVALID TRANID= when present. Operators: : = != =~ :~.

string

Normalized banner text. Operators: : = != =~ :~.

string

Partner internet address from the listener error output. Operators: : = != =~ :~.

uint32

Partner port from the listener error output when parsed. Operators: : = != < <= > >=.

string

Product string when the banner includes an IBM z/OS communications identifier. Operators: : = != =~ :~.

object

Show Fields

bool

Whether the service advertises ICAP 204 support. Operators: : = !=.

string

Instance tag for cache invalidation when exposed. Operators: : = != =~ :~.

repeated string

Supported adaptation methods returned by OPTIONS. Operators: : = != =~ :~.

uint32

OPTIONS cache lifetime in seconds. Operators: : = != < <= > >=.

uint32

Preview byte count requested by the service. Operators: : = != < <= > >=.

string

Server product hint when exposed. Operators: : = != =~ :~.

string

Service description when exposed. Operators: : = != =~ :~.

uint32

ICAP status code from the response status line. Operators: : = != < <= > >=.

string

ICAP protocol version from the response status line. Operators: : = != =~ :~.

object

Show Fields

string

Character set token from a USERID response. Operators: : = != =~ :~.

string

Error token from an ERROR response. Operators: : = != =~ :~.

ResponseType

Whether the IDENT server returned a USERID or ERROR response. Operators: : = != =~ :~.

string

Operating system token from a USERID response. Operators: : = != =~ :~.

string

User identifier from a USERID response. Operators: : = != =~ :~.

object

Show Fields

int32

ASDU address. Operators: : = != < <= > >=.

object

Show Fields

uint32

Negotiated maximum MMS PDU size from the initiate response. Operators: : = != < <= > >=.

string

Model name returned by the MMS Identify service. Operators: : = != =~ :~.

string

Revision returned by the MMS Identify service. Operators: : = != =~ :~.

string

Vendor name returned by the MMS Identify service. Operators: : = != =~ :~.

object

Show Fields

uint32

Exchange type ID. Operators: : = != < <= > >=.

string

Exchange type label. Operators: : = != =~ :~.

uint32

Message ID. Operators: : = != < <= > >=.

uint32

Message length. Operators: : = != < <= > >=.

bool

Whether NAT-T non-ESP marker was seen. Operators: : = !=.

string

IKE version string. Operators: : = != =~ :~.

object

Show Fields

bool

IKEv1 authentication flag. Operators: : = !=.

bool

IKEv1 commit flag. Operators: : = !=.

bool

IKEv1 encryption flag. Operators: : = !=.

bool

IKEv2 initiator flag. Operators: : = !=.

bool

IKEv2 response flag. Operators: : = !=.

bool

IKEv2 version flag. Operators: : = !=.

object

Show Fields

string

Notification label. Operators: : = != =~ :~.

uint32

Notification type. Operators: : = != < <= > >=.

object

Show Fields

repeated string

List of auth mechanisms. Operators: : = != =~ :~.

repeated string

List of capabilities. Operators: : = != =~ :~.

string

Greeting. Operators: : = != =~ :~.

string

Greeting code. Operators: : = != =~ :~.

bool

Whether preauthenticated. Operators: : = !=.

bool

Whether starttls accepted. Operators: : = !=.

string

Whether starttls reply. Operators: : = != =~ :~.

bool

Whether used implicit TLS. Operators: : = !=.

object

Show Fields

uint32

Greeting status code. Operators: : = != < <= > >=.

string

Product token from the greeting line. Operators: : = != =~ :~.

string

Version token from the greeting line. Operators: : = != =~ :~.

object

Show Fields

string

Optional trailing metadata from the service line. Operators: : = != =~ :~.

string

Service label from the broker banner. Operators: : = != =~ :~.

uint32

Advertised port number. Operators: : = != < <= > >=.

string

Service/protocol label, for example PORTMAPPER or JMX. Operators: : = != =~ :~.

string

Transport label, for example tcp or rmi. Operators: : = != =~ :~.

object

Show Fields

uint32

Bootcode build number. Operators: : = != < <= > >=.

string

Secondary device identifier line, e.g. “IP6010-29-06-24”. Operators: : = != =~ :~.

string

Device model family, e.g. “IP6010” or “IPVA”. Operators: : = != =~ :~.

string

Firmware version inside square brackets. Operators: : = != =~ :~.

uint32

Hardware identifier from the banner. Operators: : = != < <= > >=.

string

Device local time line when present. Operators: : = != =~ :~.

string

innovaphone release train, e.g. “13r3” or “10.00”. Operators: : = != =~ :~.

string

Reset source line when present. Operators: : = != =~ :~.

string

Service release token, e.g. “sr2”. Operators: : = != =~ :~.

uint32

Encapsulated inner UDP port for the trace packet when detected. Operators: : = != < <= > >=.

object

Show Fields

repeated IpmiLevel

Supported IPMI protocol levels. Operators: : = != =~ :~.

uint32

IANA enterprise number for OEM authentication type, if present. Operators: : = != < <= > >=.

repeated UserAuthType

IPMI v1.5 authentication types supported for this channel. Operators: : = != =~ :~.

object

Show Fields

bool

Whether server reported password/authentication is required. Operators: : = !=.

string

IRC daemon/version hint from RPL_MYINFO. Operators: : = != =~ :~.

repeated string

RPL_ISUPPORT feature tokens. Operators: : = != =~ :~.

string

Network name inferred from welcome text. Operators: : = != =~ :~.

bool

Whether server reported registration is required. Operators: : = !=.

string

Server name reported by numeric replies. Operators: : = != =~ :~.

object

Show Fields

string

iRODS API version token. Operators: : = != =~ :~.

string

Message type reported in MsgHeader_PI. Operators: : = != =~ :~.

uint32

Reconnect port advertised by the server. Operators: : = != < <= > >=.

string

iRODS release version, e.g. rods4.2.8. Operators: : = != =~ :~.

int32

RODS status code. Operators: : = != < <= > >=.

object

Show Fields

repeated string

AuthMethod values advertised by the target. Operators: : = != =~ :~.

uint32

repeated string

TargetAddress values, when advertised. Operators: : = != =~ :~.

string

TargetAlias key, when advertised. Operators: : = != =~ :~.

string

TargetName key, when advertised. Operators: : = != =~ :~.

uint32

TargetPortalGroupTag value, when advertised. Operators: : = != < <= > >=.

repeated string

Normalized key=value login/text parameters observed in the response. Operators: : = != =~ :~.

uint32

Active iSCSI protocol version selected by the target. Operators: : = != < <= > >=.

uint32

Highest iSCSI protocol version reported by the target. Operators: : = != < <= > >=.

object

Show Fields

string

Desktop Manager version string embedded in the banner. Operators: : = != =~ :~.

repeated string

Protocol markers observed in the binary-framed banner. Operators: : = != =~ :~.

string

Product name extracted from the remote control banner. Operators: : = != =~ :~.

object

Show Fields

string

Server-advertised endpoint hostname or IP. Operators: : = != =~ :~.

uint32

Server-advertised endpoint port. Operators: : = != < <= > >=.

object

Show Fields

string

Codebase URL embedded in the marshalled object, when present. Operators: : = != =~ :~.

bool

Whether the response contained a java.rmi.MarshalledObject wrapper. Operators: : = !=.

string

Serialized stub class name. Operators: : = != =~ :~.

object

Show Fields

uint32

JDWP protocol major version returned by VirtualMachine/Version. Operators: : = != < <= > >=.

uint32

JDWP protocol minor version returned by VirtualMachine/Version. Operators: : = != < <= > >=.

string

VM description string returned by VirtualMachine/Version. Operators: : = != =~ :~.

string

JVM name string returned by VirtualMachine/Version. Operators: : = != =~ :~.

string

JVM version string returned by VirtualMachine/Version. Operators: : = != =~ :~.

object

Show Fields

string

Human-readable error text from the server. Operators: : = != =~ :~.

string

Exception class from the server error response. Operators: : = != =~ :~.

bool

True when the service reported an invalid binary preamble. Operators: : = !=.

string

Binary preamble marker when present, e.g. “JNB50”. Operators: : = != =~ :~.

object

Show Fields

repeated string

Topic names visible to the request context. Operators: : = != =~ :~.

object

Show Fields

int32

Broker ID. Operators: : = != < <= > >=.

string

Rack label when reported. Operators: : = != =~ :~.

object

Show Fields

string

Hostname or IP address. Operators: : = != =~ :~.

uint32

TCP/UDP port number. Operators: : = != < <= > >=.

object

Show Fields

string

Hostname or IP address. Operators: : = != =~ :~.

uint32

TCP/UDP port number. Operators: : = != < <= > >=.

object

Show Fields

string

Error string returned by the API, when present. Operators: : = != =~ :~.

bool

True when the speaker should keep the playback session active. Operators: : = !=.

uint64

Play/session timestamp when present. Operators: : = != < <= > >=.

int32

RTP jitter value from the robustness object, when present. Operators: : = != < <= > >=.

string

Current player state. Operators: : = != =~ :~.

string

Speaker cluster or member identifier. Operators: : = != =~ :~.

int32

Reported player volume when present. Operators: : = != < <= > >=.

object

Show Fields

uint32

KRB-ERROR code when applicable. Operators: : = != < <= > >=.

string

Human-readable KRB-ERROR label. Operators: : = != =~ :~.

uint32

Kerberos message type (AS-REP=11, KRB-ERROR=30). Operators: : = != < <= > >=.

bool

Whether pre-authentication is explicitly required. Operators: : = !=.

uint32

Protocol version reported by KDC message. Operators: : = != < <= > >=.

string

Realm reported by the KDC. Operators: : = != =~ :~.

string

Server principal reported by the KDC. Operators: : = != =~ :~.

string

KDC server time in RFC3339 format when present. Operators: : = != =~ :~.

uint32

KDC server microsecond component. Operators: : = != < <= > >=.

repeated int32

Encryption type IDs advertised via method-data. Operators: : = != < <= > >=.

object

Show Fields

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

object

Show Fields

uint32

Operators: : = != < <= > >=.

bool

Operators: : = !=.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

object

Show Fields

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

object

Show Fields

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

bool

Operators: : = !=.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

bool

Operators: : = !=.

object

Show Fields

bool

Operators: : = !=.

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

uint32

Operators: : = != < <= > >=.

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

object

Show Fields

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

object

Show Fields

uint32

Tunnel/session assignment hints. Operators: : = != < <= > >=.

repeated string

List of bearer capabilities. Operators: : = != =~ :~.

bool

Header capability bits. Operators: : = !=.

uint32

Error code. Operators: : = != < <= > >=.

string

Error message. Operators: : = != =~ :~.

uint32

Firmware revision. Operators: : = != < <= > >=.

repeated string

List of framing capabilities. Operators: : = != =~ :~.

bool

Whether has length. Operators: : = !=.

bool

Whether has offset. Operators: : = !=.

bool

Whether has priority. Operators: : = !=.

bool

Whether has sequence. Operators: : = !=.

uint32

Raw flags+version word from the response header. Operators: : = != < <= > >=.

uint32

Parsed protocol version from the low nibble of header_flags_version. Operators: : = != < <= > >=.

string

Peer identity and platform hints. Operators: : = != =~ :~.

uint32

Control message metadata from AVPs. Operators: : = != < <= > >=.

string

Message type label. Operators: : = != =~ :~.

uint32

Nr. Operators: : = != < <= > >=.

uint32

Ns. Operators: : = != < <= > >=.

uint32

Parsed control header metadata. Operators: : = != < <= > >=.

string

Protocol version. Operators: : = != =~ :~.

uint32

Receive window size. Operators: : = != < <= > >=.

int64

Probe latency to first response packet. Operators: : = != < <= > >=.

uint32

Result/Error AVP. Operators: : = != < <= > >=.

uint32

Tunnel ID. Operators: : = != < <= > >=.

string

Vendor. Operators: : = != =~ :~.

object

Show Fields

uint32

AVP type identifier. Operators: : = != < <= > >=.

bool

Whether the hidden bit was set. Operators: : = !=.

bool

Whether the mandatory bit was set. Operators: : = !=.

uint32

AVP vendor namespace. Operators: : = != < <= > >=.

object

Show Fields

bool

Whether implicit TLS was used for the LDAP connection. Operators: : = !=.

object

Show Fields

repeated string

Supported LDAP capabilities (OID). Operators: : = != =~ :~.

repeated string

Supported LDAP controls (OID). Operators: : = != =~ :~.

repeated string

Supported LDAP extensions (OID). Operators: : = != =~ :~.

repeated uint32

Supported LDAP protocol versions. Operators: : = != < <= > >=.

repeated string

Supported SASL mechanisms. Operators: : = != =~ :~.

bool

Whether STARTTLS is advertised in supportedExtension. Operators: : = !=.

object

Show Fields

string

Configuration naming context. Operators: : = != =~ :~.

string

Default naming context. Operators: : = != =~ :~.

repeated string

All naming contexts. Operators: : = != =~ :~.

string

Root domain naming context. Operators: : = != =~ :~.

string

Schema naming context. Operators: : = != =~ :~.

object

Show Fields

string

DNS hostname reported by the server. Operators: : = != =~ :~.

uint32

AD domain functionality level. Operators: : = != < <= > >=.

string

DS service name. Operators: : = != =~ :~.

uint32

AD forest functionality level. Operators: : = != < <= > >=.

bool

Whether global catalog is ready. Operators: : = !=.

string

LDAP service principal name. Operators: : = != =~ :~.

string

Server distinguished name. Operators: : = != =~ :~.

bool

Whether directory is synchronized. Operators: : = !=.

object

Show Fields

bool

Whether the response indicates authentication is required. Operators: : = !=.

object

Show Fields

uint32

Numeric protocol-specific error code. Operators: : = != < <= > >=.

string

Human-readable error message. Operators: : = != =~ :~.

string

Short error label. Operators: : = != =~ :~.

object

Show Fields

string

Stable name label. Operators: : = != =~ :~.

string

Reported version string. Operators: : = != =~ :~.

object

Show Fields

string

Key type of the Noise signature public key. Operators: : = != =~ :~.

string

Accepted secure channel protocol: noise, tls, secio, or plaintext. Operators: : = != =~ :~.

string

Initial multistream-select banner when observed. Operators: : = != =~ :~.

string

Accepted stream multiplexer protocol ID. Operators: : = != =~ :~.

repeated string

Bounded list of protocols advertised by identify. Operators: : = != =~ :~.

object

Show Fields

bool

Whether the device acknowledged receipt. Operators: : = !=.

string

Device name reported by the instrument. Operators: : = != =~ :~.

string

Device model/family reported by the instrument, e.g. LI-7500 or LI-7700. Operators: : = != =~ :~.

string

Firmware or software version reported by the instrument. Operators: : = != =~ :~.

uint32

Number of parsed samples captured in the response. Operators: : = != < <= > >=.

repeated uint32

Preview of the first parsed waveform samples. Operators: : = != < <= > >=.

string

Serial number reported by the instrument. Operators: : = != =~ :~.

string

Stream type reported by the instrument, e.g. WaveData. Operators: : = != =~ :~.

object

Show Fields

string

Network identifier derived from transport magic bytes. Operators: : = != =~ :~.

uint32

Reported Litecoin protocol version. Operators: : = != < <= > >=.

string

Reported remote node time in RFC3339 format. Operators: : = != =~ :~.

string

Reported node user agent string. Operators: : = != =~ :~.

object

Show Fields

string

Game driver family, for example LDmud. Operators: : = != =~ :~.

string

Game driver version string. Operators: : = != =~ :~.

string

Mudlib or world name. Operators: : = != =~ :~.

string

Mudlib version string. Operators: : = != =~ :~.

Overview

Data products

External Surface Intelligence

Fingerprinting

Rules

Projects

Data Dictionary

Scanning policy