Protocols M–R

Protocol-specific service search fields in Protocols M–R. Dataset: services

object

Show Fields

repeated string

Normalized capability names advertised by the server. Operators: : = != =~ :~.

string

Implementation string, when advertised. Operators: : = != =~ :~.

repeated string

Supported SASL mechanisms from the SASL capability. Operators: : = != =~ :~.

repeated string

Supported Sieve extensions from the SIEVE capability. Operators: : = != =~ :~.

bool

Whether STARTTLS is advertised. Operators: : = !=.

string

ManageSieve protocol version string. Operators: : = != =~ :~.

object

Show Fields

McpBinding

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

bool

Operators: : = !=.

uint32

Operators: : = != < <= > >=.

uint32

Operators: : = != < <= > >=.

uint32

Operators: : = != < <= > >=.

repeated string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

repeated string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

object

Show Fields

McpFunctionalityCategory

Operators: : = != =~ :~.

McpFunctionalitySubcategory

Operators: : = != =~ :~.

object

Show Fields

repeated string

Service types advertised by the responder. Operators: : = != =~ :~.

object

Show Fields

string

Service instance label. Operators: : = != =~ :~.

string

Service type label. Operators: : = != =~ :~.

repeated string

TXT record entries associated with the instance. Operators: : = != =~ :~.

object

Show Fields

string

Hostname or IP address. Operators: : = != =~ :~.

uint32

TCP/UDP port number. Operators: : = != < <= > >=.

object

Show Fields

string

PLC CPU model identifier. Operators: : = != =~ :~.

object

Show Fields

string

Packet label returned by the responder when configured. Operators: : = != =~ :~.

object

Show Fields

uint32

First-line MGCP response code. Operators: : = != < <= > >=.

object

Show Fields

string

Classified response kind (for example: ack_v1, text_banner, length_prefixed_banner). Operators: : = != =~ :~.

object

Show Fields

string

Product display name. Operators: : = != =~ :~.

string

Vendor display name. Operators: : = != =~ :~.

object

Show Fields

string

Classified response kind. Operators: : = != =~ :~.

object

Show Fields

bool

Whether index catalog data was observed. Operators: : = !=.

bool

Whether list catalog data was observed. Operators: : = !=.

object

Show Fields

string

Product display name. Operators: : = != =~ :~.

string

Vendor display name. Operators: : = != =~ :~.

object

Show Fields

string

Source catalog (index or list). Operators: : = != =~ :~.

string

Package/module name. Operators: : = != =~ :~.

string

Package/module version. Operators: : = != =~ :~.

object

Show Fields

repeated string

Distinct observed package versions. Operators: : = != =~ :~.

string

Derived RouterOS version hint. Operators: : = != =~ :~.

object

Show Fields

bool

Whether chat preview enabled. Operators: : = !=.

string

Flattened status text/MOTD. Friendly label: MOTD. Included in overview projections. Operators: : = != =~ :~.

int64

Ping latency ms in milliseconds. Operators: : = != < <= > >=.

bool

Whether secure chat required. Operators: : = !=.

bool

True when modern status failed and legacy ping parser produced data. Operators: : = !=.

object

Show Fields

uint32

Max. Operators: : = != < <= > >=.

uint32

Online. Operators: : = != < <= > >=.

object

Show Fields

string

Nickname. Operators: : = != =~ :~.

string

UUID. Operators: : = != =~ :~.

object

Show Fields

string

Name. Operators: : = != =~ :~.

int32

Protocol. Operators: : = != < <= > >=.

object

Show Fields

object

Show Fields

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

object

Show Fields

string

Edition token from Bedrock status (typically MCPE). Operators: : = != =~ :~.

string

Reported game mode. Operators: : = != =~ :~.

string

Reported Bedrock game version string. Operators: : = != =~ :~.

uint32

Maximum player capacity. Operators: : = != < <= > >=.

string

Primary message-of-the-day. Friendly label: MOTD. Operators: : = != =~ :~.

uint32

Current online player count. Operators: : = != < <= > >=.

uint32

Reported Bedrock protocol version number. Operators: : = != < <= > >=.

uint64

RakNet server GUID from pong header. Operators: : = != < <= > >=.

string

Secondary message-of-the-day. Friendly label: Sub MOTD. Operators: : = != =~ :~.

object

Show Fields

bool

True when the banner indicates a chrooted instance. Operators: : = !=.

string

Optional instance or owner name from the banner. Operators: : = != =~ :~.

string

Core version from the welcome banner, when present. Operators: : = != =~ :~.

object

Show Fields

string

Levin error code label when the response return code is negative. Operators: : = != =~ :~.

uint64

Remote node peer identifier. Operators: : = != < <= > >=.

string

Monero ping status string (typically OK). Operators: : = != =~ :~.

object

Show Fields

string

Auth error. Operators: : = != =~ :~.

bool

Whether auth required. Operators: : = !=.

bool

Whether used op msg. Operators: : = !=.

object

Show Fields

string

Allocator. Operators: : = != =~ :~.

bool

Whether debug build. Operators: : = !=.

string

Git revision. Operators: : = != =~ :~.

string

Javascript engine. Operators: : = != =~ :~.

repeated string

List of modules. Operators: : = != =~ :~.

string

Openssl compiled version. Operators: : = != =~ :~.

string

Openssl running version. Operators: : = != =~ :~.

repeated string

List of storage engines. Operators: : = != =~ :~.

string

Version. Operators: : = != =~ :~.

uint32

Word bits. Operators: : = != < <= > >=.

object

Show Fields

string

C compiler. Operators: : = != =~ :~.

string

C flags. Operators: : = != =~ :~.

string

Cxx compiler. Operators: : = != =~ :~.

string

Cxx flags. Operators: : = != =~ :~.

string

Distribution. Operators: : = != =~ :~.

string

Distribution arch. Operators: : = != =~ :~.

string

Linker flags. Operators: : = != =~ :~.

string

Target arch. Operators: : = != =~ :~.

string

Target os. Operators: : = != =~ :~.

object

Show Fields

bool

Whether hello ok. Operators: : = !=.

uint32

Max bson object bytes in bytes. Operators: : = != < <= > >=.

uint32

Max message bytes in bytes. Operators: : = != < <= > >=.

uint32

Max write batch items. Operators: : = != < <= > >=.

bool

Whether mongos router. Operators: : = !=.

bool

Whether primary. Operators: : = !=.

bool

Whether read only. Operators: : = !=.

repeated string

List of replica arbiter members. Operators: : = != =~ :~.

repeated string

List of replica members. Operators: : = != =~ :~.

repeated string

List of replica passive members. Operators: : = != =~ :~.

string

Replica set name. Operators: : = != =~ :~.

string

Self member. Operators: : = != =~ :~.

repeated string

List of supported compressors. Operators: : = != =~ :~.

uint32

Wire version max. Operators: : = != < <= > >=.

uint32

Wire version min. Operators: : = != < <= > >=.

object

Show Fields

uint32

ACK command list index from the terminal response, when present. Operators: : = != < <= > >=.

string

ACK current command token from the terminal response. Operators: : = != =~ :~.

uint32

ACK error code from the terminal response, when present. Operators: : = != < <= > >=.

string

ACK message text from the terminal response. Operators: : = != =~ :~.

repeated string

Commands returned by the “commands” command. Operators: : = != =~ :~.

string

Version from the initial “OK MPD …” greeting. Operators: : = != =~ :~.

object

Show Fields

bool

Operators: : = !=.

bool

Whether authentication required. Operators: : = !=.

uint32

Connection code. Operators: : = != < <= > >=.

string

Operators: : = != =~ :~.

Operators: : = !=.

repeated string

List of topics. Operators: : = != =~ :~.

object

Show Fields

bool

Whether the gateway accepted the connection. Operators: : = !=.

uint32

MQTT-SN CONNACK return code. Operators: : = != < <= > >=.

object

Show Fields

uint32

Encryption mode. Operators: : = != < <= > >=.

string

Encryption mode label. Operators: : = != =~ :~.

bool

Whether federated auth required. Operators: : = !=.

string

Instance name. Operators: : = != =~ :~.

bool

Whether mars enabled. Operators: : = !=.

uint32

Server thread ID. Operators: : = != < <= > >=.

bool

Whether TLS negotiated. Operators: : = !=.

bool

Whether TLS supported. Operators: : = !=.

object

Show Fields

uint32

Build. Operators: : = != < <= > >=.

uint32

Major. Operators: : = != < <= > >=.

uint32

Minor. Operators: : = != < <= > >=.

uint32

Sub build. Operators: : = != < <= > >=.

string

Value. Operators: : = != =~ :~.

object

Show Fields

uint32

Advertised max bandwidth per user when the server syncs successfully. Operators: : = != < <= > >=.

uint32

Maximum allowed user count when available. Operators: : = != < <= > >=.

string

Reported operating system name when available. Operators: : = != =~ :~.

string

Reported operating system version when available. Operators: : = != =~ :~.

string

Human-readable rejection reason when provided. Operators: : = != =~ :~.

string

Rejection type when the server denies the probe. Operators: : = != =~ :~.

string

Server release name when available. Operators: : = != =~ :~.

MurmurResponseType

Murmur control response classification. Operators: : = != =~ :~.

string

Server version string when available. Operators: : = != =~ :~.

uint32

Current connected user count when available. Operators: : = != < <= > >=.

string

Welcome text when the server syncs successfully. Operators: : = != =~ :~.

object

Show Fields

string

Auth plugin. Operators: : = != =~ :~.

uint32

Capability bitmask. Operators: : = != < <= > >=.

uint32

Server collation ID. Operators: : = != < <= > >=.

uint32

Server connection ID. Operators: : = != < <= > >=.

uint32

Server error code. Operators: : = != < <= > >=.

string

Server error message. Operators: : = != =~ :~.

string

Server error name. Operators: : = != =~ :~.

string

Server flavor. Included in overview projections. Operators: : = != =~ :~.

string

Server release. Included in overview projections. Operators: : = != =~ :~.

bool

Whether short greeting. Operators: : = !=.

uint32

Status bitmask. Operators: : = != < <= > >=.

bool

Whether supports TLS upgrade. Included in overview projections. Operators: : = !=.

uint32

Wire protocol version. Operators: : = != < <= > >=.

object

Show Fields

repeated string

Authentication mechanisms advertised by the server. Operators: : = != =~ :~.

repeated string

Compression methods advertised by the server. Operators: : = != =~ :~.

repeated string

Document encodings advertised by the server. Operators: : = != =~ :~.

bool

Whether the server advertises interactive-client timeout handling. Operators: : = !=.

string

Node kind advertised by the X Plugin, e.g. mysql or router. Operators: : = != =~ :~.

uint32

X Protocol error code returned by the server when probing fails. Operators: : = != < <= > >=.

string

Human-readable X Protocol error text returned by the server. Operators: : = != =~ :~.

bool

Whether a global SERVER_HELLO notice was observed on the connection. Operators: : = !=.

string

X Plugin version string when the server exposes it. Operators: : = != =~ :~.

object

Show Fields

string

Advertised host. Operators: : = != =~ :~.

uint32

Advertised port. Operators: : = != < <= > >=.

bool

Whether auth required. Operators: : = !=.

string

Cluster. Operators: : = != =~ :~.

repeated string

List of connect URLs. Operators: : = != =~ :~.

string

Domain. Operators: : = != =~ :~.

string

Git commit. Operators: : = != =~ :~.

string

Go version. Operators: : = != =~ :~.

bool

Whether headers supported. Operators: : = !=.

bool

Whether jetstream enabled. Operators: : = !=.

bool

Whether lame duck mode. Operators: : = !=.

uint32

Protocol. Operators: : = != < <= > >=.

string

Server ID. Operators: : = != =~ :~.

string

Server name. Operators: : = != =~ :~.

bool

Whether TLS available. Operators: : = !=.

bool

Whether TLS required. Operators: : = !=.

bool

Whether TLS verify. Operators: : = !=.

string

Version. Operators: : = != =~ :~.

repeated string

List of ws connect URLs. Operators: : = != =~ :~.

object

Show Fields

string

Server identifier from the greeting. Operators: : = != =~ :~.

string

Call manager service version. Operators: : = != =~ :~.

object

Show Fields

repeated string

Supported authentication types. Operators: : = != =~ :~.

string

Text name of the connection status reason. Operators: : = != =~ :~.

uint32

NDMP connection status reason from the initial server post. Operators: : = != < <= > >=.

uint32

Command-level error from CONFIG_GET_HOST_INFO. Operators: : = != < <= > >=.

string

Text name of the CONFIG_GET_HOST_INFO error. Operators: : = != =~ :~.

string

Hostname returned by the NDMP server. Operators: : = != =~ :~.

string

Remote operating system type. Operators: : = != =~ :~.

string

Remote operating system version. Operators: : = != =~ :~.

string

Server product name. Operators: : = != =~ :~.

uint32

Highest protocol version advertised by the server. Operators: : = != < <= > >=.

string

Server revision/build string. Operators: : = != =~ :~.

uint32

Command-level error from CONFIG_GET_SERVER_INFO. Operators: : = != < <= > >=.

string

Text name of the CONFIG_GET_SERVER_INFO error. Operators: : = != =~ :~.

string

Optional textual reason from the initial connection-status post. Operators: : = != =~ :~.

string

Server vendor name. Operators: : = != =~ :~.

object

Show Fields

bool

Whether authentication appears to be required. Operators: : = !=.

string

Connection identifier reported by HELLO/INIT. Operators: : = != =~ :~.

string

Error code reported by server-side FAILURE summary. Operators: : = != =~ :~.

string

Error message reported by server-side FAILURE summary. Operators: : = != =~ :~.

string

Negotiated Bolt protocol version. Operators: : = != =~ :~.

string

Server agent string reported by HELLO/INIT. Operators: : = != =~ :~.

object

Show Fields

repeated string

List of ipv4 addresses. Operators: : = != =~ :~.

string

Service. Operators: : = != =~ :~.

string

Status. Operators: : = != =~ :~.

string

Unit ID. Operators: : = != =~ :~.

object

Show Fields

string

Name. Operators: : = != =~ :~.

string

Suffix label. Operators: : = != =~ :~.

object

Show Fields

uint32

Channel number when present. Operators: : = != < <= > >=.

string

Decoder chip identifier extracted from the banner. Operators: : = != =~ :~.

repeated string

Unique event lines normalized from the leaked debug output. Operators: : = != =~ :~.

string

Driver or function name, for example nvp6158_ch_sw_Reset. Operators: : = != =~ :~.

uint32

Source line number when present. Operators: : = != < <= > >=.

object

Show Fields

uint32

Number of accepted successful RPC replies observed. Operators: : = != < <= > >=.

uint32

ONC/RPC protocol version used by probes. Operators: : = != < <= > >=.

repeated uint32

NFS protocol versions that replied successfully. Operators: : = != < <= > >=.

object

Show Fields

repeated string

Distinct three-character sentence types seen in valid sentences, e.g. ZDA or GLL. Operators: : = != =~ :~.

repeated string

Distinct two-character talker IDs seen in valid sentences, e.g. YD or GP. Operators: : = != =~ :~.

uint32

Count of valid checksum-bearing NMEA sentences parsed from the banner. Operators: : = != < <= > >=.

object

Show Fields

repeated string

CAPABILITIES lines returned by the server. Operators: : = != =~ :~.

uint32

NNTP greeting status code. Operators: : = != < <= > >=.

string

Human-readable greeting text. Operators: : = != =~ :~.

string

Reported implementation string when advertised. Operators: : = != =~ :~.

bool

Whether posting is allowed according to the greeting. Operators: : = !=.

object

Show Fields

string

NRPE version string if present in the response. Operators: : = != =~ :~.

object

Show Fields

double

Best-effort clock offset estimate in milliseconds. Operators: : = != < <= > >=.

string

Kiss-of-Death code for stratum 0 responses. Operators: : = != =~ :~.

uint32

Leap indicator from the response header. Operators: : = != < <= > >=.

uint32

NTP mode from the response packet. Operators: : = != < <= > >=.

uint32

Number of MONLIST items when monitoring is exposed. Operators: : = != < <= > >=.

string

CPU architecture hint from mode-6 READVAR (e.g. processor). Operators: : = != =~ :~.

string

OS name hint from mode-6 READVAR (e.g. system). Operators: : = != =~ :~.

int32

Poll interval exponent (2^poll seconds). Operators: : = != < <= > >=.

int32

Clock precision exponent (2^precision seconds). Operators: : = != < <= > >=.

uint32

NTP protocol version from the response packet. Operators: : = != < <= > >=.

uint32

Raw 32-bit reference identifier from bytes 12..15. Operators: : = != < <= > >=.

string

Reference identifier formatted for analyst readability. Operators: : = != =~ :~.

uint32

Raw 32-bit root delay from bytes 4..7. Operators: : = != < <= > >=.

uint32

Raw 32-bit root dispersion from bytes 8..11. Operators: : = != < <= > >=.

uint32

NTP stratum from the response packet. Operators: : = != < <= > >=.

object

Show Fields

uint32

Number of CAS records seen in the sourcetable. Operators: : = != < <= > >=.

repeated string

Optional Ntrip-Flags response header values. Operators: : = != =~ :~.

repeated string

Bounded list of advertised mountpoints. Operators: : = != =~ :~.

uint32

Number of NET records seen in the sourcetable. Operators: : = != < <= > >=.

string

Reported NTRIP version from Ntrip-Version or Server headers. Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

repeated string

Operators: : = != =~ :~.

string

Raw Server header value from the sourcetable response. Operators: : = != =~ :~.

uint32

Number of STR records seen in the sourcetable. Operators: : = != < <= > >=.

string

Operators: : = != =~ :~.

object

Show Fields

repeated string

Supported commands advertised by the server banner. Operators: : = != =~ :~.

bool

Whether STARTTLS is advertised. Operators: : = !=.

bool

Whether forced shutdown is advertised. Operators: : = !=.

bool

Whether MASTER is advertised. Operators: : = !=.

object

Show Fields

bool

True when the response indicates the device service requires authorization. Operators: : = !=.

string

SOAP fault reason when present. Operators: : = != =~ :~.

string

SOAP fault subcode when present. Operators: : = != =~ :~.

string

Firmware version from GetDeviceInformation. Operators: : = != =~ :~.

string

Hardware ID from GetDeviceInformation. Operators: : = != =~ :~.

string

Device manufacturer from GetDeviceInformation. Operators: : = != =~ :~.

string

Device model from GetDeviceInformation. Operators: : = != =~ :~.

string

Serial number from GetDeviceInformation. Operators: : = != =~ :~.

bool

True when the probe completed with a SOAP fault instead of a device information response. Operators: : = !=.

object

Show Fields

uint32

OpenFlow error code when the first server reply is an ERROR. Operators: : = != < <= > >=.

uint32

OpenFlow error type when the first server reply is an ERROR. Operators: : = != < <= > >=.

OpenflowServerMessageType

Classification of the first server reply after our HELLO. Operators: : = != =~ :~.

repeated uint32

Versions listed in the HELLO versionbitmap element when present. Operators: : = != < <= > >=.

uint32

Wire protocol version byte from the first server reply. Operators: : = != < <= > >=.

object

Show Fields

bool

High-level compatibility flags. Operators: : = !=.

bool

Whether accepts v2. Operators: : = !=.

bool

Whether accepts v3. Operators: : = !=.

uint32

Opcode. Operators: : = != < <= > >=.

uint32

Packet ID. Operators: : = != < <= > >=.

string

Best-effort server metadata. Operators: : = != =~ :~.

int64

Response time ms in milliseconds. Operators: : = != < <= > >=.

bool

Capability flags requested by product requirements. Operators: : = !=.

bool

Whether supports reset v2. Operators: : = !=.

bool

Whether TLS auth detected. Operators: : = !=.

bool

Whether TLS crypt detected. Operators: : = !=.

string

Version. Operators: : = != =~ :~.

object

Show Fields

uint32

Reliability-layer metadata from response. Operators: : = != < <= > >=.

repeated uint32

List of ack packet IDs. Operators: : = != < <= > >=.

bool

Whether a syntactically valid OpenVPN control packet was parsed. Operators: : = !=.

bool

Whether has TLS certificate. Operators: : = !=.

bool

Best-effort parse hints. Operators: : = !=.

string

Scanner-side processing error for this probe, if any. Operators: : = != =~ :~.

uint32

Opcode used in the outbound probe packet. Operators: : = != < <= > >=.

uint32

Response key ID. Operators: : = != < <= > >=.

uint32

Parsed opcode from server response. Operators: : = != < <= > >=.

string

Response opcode label. Operators: : = != =~ :~.

uint32

Response packet ID. Operators: : = != < <= > >=.

uint32

TLS record version. Operators: : = != < <= > >=.

object

Show Fields

uint32

Reliability-layer metadata from response. Operators: : = != < <= > >=.

repeated uint32

List of ack packet IDs. Operators: : = != < <= > >=.

bool

Whether a syntactically valid OpenVPN control packet was parsed. Operators: : = !=.

bool

Whether has TLS certificate. Operators: : = !=.

bool

Best-effort parse hints. Operators: : = !=.

string

Scanner-side processing error for this probe, if any. Operators: : = != =~ :~.

uint32

Opcode used in the outbound probe packet. Operators: : = != < <= > >=.

uint32

Response key ID. Operators: : = != < <= > >=.

uint32

Parsed opcode from server response. Operators: : = != < <= > >=.

string

Response opcode label. Operators: : = != =~ :~.

uint32

Response packet ID. Operators: : = != < <= > >=.

uint32

TLS record version. Operators: : = != < <= > >=.

object

Show Fields

uint32

Reliability-layer metadata from response. Operators: : = != < <= > >=.

repeated uint32

List of ack packet IDs. Operators: : = != < <= > >=.

bool

Whether a syntactically valid OpenVPN control packet was parsed. Operators: : = !=.

bool

Whether has TLS certificate. Operators: : = !=.

bool

Best-effort parse hints. Operators: : = !=.

string

Scanner-side processing error for this probe, if any. Operators: : = != =~ :~.

uint32

Opcode used in the outbound probe packet. Operators: : = != < <= > >=.

uint32

Response key ID. Operators: : = != < <= > >=.

uint32

Parsed opcode from server response. Operators: : = != < <= > >=.

string

Response opcode label. Operators: : = != =~ :~.

uint32

Response packet ID. Operators: : = != < <= > >=.

uint32

TLS record version. Operators: : = != < <= > >=.

object

Show Fields

string

Build date carried in the PRLT banner. Operators: : = != =~ :~.

string

Dispatcher service version string. Operators: : = != =~ :~.

object

Show Fields

string

Reported PC-Duo server name. Operators: : = != =~ :~.

object

Show Fields

string

pcAnywhere device family marker from UDP discovery responses. Operators: : = != =~ :~.

string

Host or device name advertised by the remote pcAnywhere service. Operators: : = != =~ :~.

string

Service prompt observed from the TCP data service when available. Operators: : = != =~ :~.

object

Show Fields

string

SQLSTATE returned for the rejected startup packet. Operators: : = != =~ :~.

string

Error text returned for the rejected startup packet. Operators: : = != =~ :~.

string

Error severity returned for the rejected startup packet. Operators: : = != =~ :~.

object

Show Fields

string

Device identity string returned by INFO ID. Operators: : = != =~ :~.

string

Human-readable front-panel status text when reported. Operators: : = != =~ :~.

PjlOnlineState

Online/offline state from INFO STATUS when reported. Operators: : = != =~ :~.

repeated string

Supported printer personalities advertised by INFO CONFIG. Operators: : = != =~ :~.

uint32

Numeric status code from INFO STATUS when reported. Operators: : = != < <= > >=.

object

Show Fields

repeated string

CAPA capability lines (excluding terminator and status line). Operators: : = != =~ :~.

bool

True when STLS is listed in CAPA. Operators: : = !=.

string

CAPA command status line. Operators: : = != =~ :~.

string

Server greeting line as received (CRLF preserved when present). Operators: : = != =~ :~.

bool

True when greeting starts with +OK. Operators: : = !=.

bool

True when STLS reply starts with +OK. Operators: : = !=.

string

STLS command reply line. Operators: : = != =~ :~.

bool

True when scan connected with implicit TLS (usually port 995). Operators: : = !=.

object

Show Fields

uint32

Portmap program version queried. Operators: : = != < <= > >=.

uint32

ONC/RPC protocol version used by the probe. Operators: : = != < <= > >=.

object

Show Fields

uint32

Advertised service port for the mapping. Operators: : = != < <= > >=.

uint32

RPC program number. Operators: : = != < <= > >=.

uint32

IP protocol number (6=tcp, 17=udp). Operators: : = != < <= > >=.

TransportProtocol

Normalized transport protocol label. Operators: : = != =~ :~.

uint32

RPC program version number. Operators: : = != < <= > >=.

object

Show Fields

bool

Whether auth required. Operators: : = !=.

uint32

Auth type. Operators: : = != < <= > >=.

string

Auth type label. Operators: : = != =~ :~.

string

Error code. Operators: : = != =~ :~.

string

Error message. Operators: : = != =~ :~.

string

Error severity. Operators: : = != =~ :~.

bool

Whether integer datetimes. Operators: : = !=.

bool

Whether ready for query. Operators: : = !=.

repeated string

List of sasl mechanisms. Operators: : = != =~ :~.

string

Server encoding. Operators: : = != =~ :~.

string

Server version. Operators: : = != =~ :~.

uint32

Server version num. Operators: : = != < <= > >=.

bool

Whether SSL supported. Operators: : = !=.

string

Timezone. Operators: : = != =~ :~.

string

Transaction status. Operators: : = != =~ :~.

object

Show Fields

repeated string

List of bearer capabilities. Operators: : = != =~ :~.

uint32

Control message type. Operators: : = != < <= > >=.

uint32

Echo error code. Operators: : = != < <= > >=.

uint32

Echo identifier. Operators: : = != < <= > >=.

bool

Optional Echo probe fields. Operators: : = !=.

uint32

Echo result code. Operators: : = != < <= > >=.

uint32

Error code. Operators: : = != < <= > >=.

uint32

Firmware revision. Operators: : = != < <= > >=.

repeated string

List of framing capabilities. Operators: : = != =~ :~.

string

Host name. Operators: : = != =~ :~.

uint32

Max channels. Operators: : = != < <= > >=.

uint32

Parsed control header. Operators: : = != < <= > >=.

uint32

Packet message type. Operators: : = != < <= > >=.

string

Protocol version. Operators: : = != =~ :~.

uint32

Result code. Operators: : = != < <= > >=.

string

Vendor. Operators: : = != =~ :~.

object

Show Fields

string

Boot project name. Operators: : = != =~ :~.

string

PLC type. Operators: : = != =~ :~.

string

Project name. Operators: : = != =~ :~.

string

Ladder runtime string. Operators: : = != =~ :~.

string

Runtime version. Operators: : = != =~ :~.

string

Source code descriptor. Operators: : = != =~ :~.

bool

Whether source code appears available. Operators: : = !=.

object

Show Fields

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

object

Show Fields

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

object

Show Fields

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

object

Show Fields

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

object

Show Fields

uint64

Operators: : = != < <= > >=.

string

Operators: : = != =~ :~.

uint32

Operators: : = != < <= > >=.

uint32

Operators: : = != < <= > >=.

string

Operators: : = != =~ :~.

bool

Operators: : = !=.

string

Operators: : = != =~ :~.

string

Operators: : = != =~ :~.

uint64

Operators: : = != < <= > >=.

object

Show Fields

uint32

Operators: : = != < <= > >=.

uint32

Operators: : = != < <= > >=.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

repeated string

Operators: : = != =~ :~.

bool

Operators: : = !=.

bool

Operators: : = !=.

uint32

Operators: : = != < <= > >=.

object

Show Fields

string

Sanitized quote text returned by the service. Operators: : = != =~ :~.

object

Show Fields

uint32

Count of RADIUS attributes in the response. Operators: : = != < <= > >=.

uint32

RADIUS response code. Operators: : = != < <= > >=.

string

Human-readable response code label. Operators: : = != =~ :~.

bool

True when EAP-Message attribute is present. Operators: : = !=.

uint32

Response identifier. Operators: : = != < <= > >=.

bool

True when Message-Authenticator attribute is present. Operators: : = !=.

string

Reply-Message attribute value when present. Operators: : = != =~ :~.

bool

True when State attribute is present. Operators: : = !=.

repeated uint32

Distinct vendor IDs extracted from Vendor-Specific attributes. Operators: : = != < <= > >=.

uint32

Number of Vendor-Specific attributes observed. Operators: : = != < <= > >=.

object

Show Fields

string

Optional host hint if the server exposes one via early negotiation. Operators: : = != =~ :~.

string

Desktop hint origin. Operators: : = != =~ :~.

uint32

X224 destination reference. Operators: : = != < <= > >=.

uint32

X224 source reference. Operators: : = != < <= > >=.

object

Show Fields

bool

Whether sets reserved neg flag. Operators: : = !=.

bool

Whether supports dynvc graphics. Operators: : = !=.

bool

Whether supports extended client data. Operators: : = !=.

bool

Whether supports redirected auth. Operators: : = !=.

bool

Whether supports restricted admin. Operators: : = !=.

object

Show Fields

string

DNS domain. Included in overview projections. Operators: : = != =~ :~.

string

DNS fqdn. Operators: : = != =~ :~.

string

DNS host. Operators: : = != =~ :~.

string

DNS forest/tree name. Operators: : = != =~ :~.

uint32

Negotiate flags. Operators: : = != < <= > >=.

string

Netbios domain. Friendly label: NetBIOS Domain. Operators: : = != =~ :~.

string

Netbios host. Friendly label: NetBIOS Host. Included in overview projections. Operators: : = != =~ :~.

uint32

Os build. Operators: : = != < <= > >=.

uint32

Os major. Operators: : = != < <= > >=.

uint32

Os minor. Operators: : = != < <= > >=.

string

Friendly platform label inferred from NTLM version numbers. Friendly label: Platform. Included in overview projections. Operators: : = != =~ :~.

string

Service target. Operators: : = != =~ :~.

timestamp

NTLM server system time when the challenge exposes it. Operators: : = != < <= > >=.

object

Show Fields

bool

Whether chose credssp. Operators: : = !=.

bool

Whether chose credssp early. Operators: : = !=.

bool

Whether chose rdstls. Operators: : = !=.

bool

Whether chose standard RDP. Operators: : = !=.

bool

Whether chose TLS. Operators: : = !=.

bool

Whether forbids SSL. Operators: : = !=.

bool

Whether has flag mismatch. Operators: : = !=.

bool

Whether missing server cert. Operators: : = !=.

bool

Whether needs SSL. Operators: : = !=.

bool

Whether negotiation error. Operators: : = !=.

bool

Whether requires credssp. Operators: : = !=.

bool

Whether requires SSL with user auth. Operators: : = !=.

bool

Whether unknown error code. Operators: : = !=.

object

Show Fields

uint32

Architecture bits. Operators: : = != < <= > >=.

string

Auth. Operators: : = != =~ :~.

bool

Whether authentication required. Operators: : = !=.

string

Build ID. Operators: : = != =~ :~.

string

Deployment mode. Operators: : = != =~ :~.

string

Git sha. Operators: : = != =~ :~.

string

Memory allocator. Operators: : = != =~ :~.

string

Operating system. Operators: : = != =~ :~.

string

Ping. Operators: : = != =~ :~.

uint64

Total commands. Operators: : = != < <= > >=.

uint64

Total connections. Operators: : = != < <= > >=.

uint64

Uptime seconds in seconds. Operators: : = != < <= > >=.

uint64

Whether used memory bytes. Operators: : = != < <= > >=.

string

Version. Operators: : = != =~ :~.

uint32

Version major. Operators: : = != < <= > >=.

uint32

Version minor. Operators: : = != < <= > >=.

uint32

Version patch. Operators: : = != < <= > >=.

object

Show Fields

string

Cluster architecture bitsize from the modern intracluster handshake. Operators: : = != =~ :~.

string

Response shape identified on the socket. Operators: : = != =~ :~.

string

Cluster build mode from the modern intracluster handshake. Operators: : = != =~ :~.

string

Human-readable error or banner line when the response is textual. Operators: : = != =~ :~.

string

Cluster version from the modern intracluster handshake, when present. Operators: : = != =~ :~.

object

Show Fields

uint32

MD5 authentication sequence. Operators: : = != < <= > >=.

string

Authentication mode (none, simple, md5, unknown). Operators: : = != =~ :~.

uint32

RIP command. Operators: : = != < <= > >=.

bool

Whether a default route is present. Operators: : = !=.

bool

Whether authentication is present. Operators: : = !=.

bool

Whether any next hop is present. Operators: : = !=.

uint32

Count of poisoned routes (metric=16). Operators: : = != < <= > >=.

uint32

Count of private routes. Operators: : = != < <= > >=.

uint32

Count of public routes. Operators: : = != < <= > >=.

uint32

Route count returned in the result. Operators: : = != < <= > >=.

uint32

Total route count in the response. Operators: : = != < <= > >=.

bool

Whether any route tag is present. Operators: : = !=.

uint32

RIP version. Operators: : = != < <= > >=.

object

Show Fields

string

Address family. Operators: : = != =~ :~.

uint32

Route metric. Operators: : = != < <= > >=.

string

Route network. Operators: : = != =~ :~.

string

Route next hop. Operators: : = != =~ :~.

uint32

Route prefix length. Operators: : = != < <= > >=.

uint32

Route tag. Operators: : = != < <= > >=.

string

Route subnet mask. Operators: : = != =~ :~.

object

Show Fields

string

Optional policy message when listing is restricted. Operators: : = != =~ :~.

repeated string

Checksum algorithms advertised in protocol banner. Operators: : = != =~ :~.

bool

True when #list returned one or more modules. Operators: : = !=.

string

Protocol version announced by the server. Operators: : = != =~ :~.

object

Show Fields

string

Optional module description text. Operators: : = != =~ :~.

string

Exported rsync module name. Operators: : = != =~ :~.

object

Show Fields

string

Optional content base URI from Content-Base. Operators: : = != =~ :~.

repeated string

Supported RTSP methods from Public/Allow. Operators: : = != =~ :~.

string

Optional software hint from the Server header. Operators: : = != =~ :~.

uint32

RTSP response status code. Operators: : = != < <= > >=.

string

RTSP response status line. Operators: : = != =~ :~.

string

RTSP protocol version from the status line. Operators: : = != =~ :~.

object

Show Fields

string

Authentication realm, when provided. Operators: : = != =~ :~.

bool

Whether authentication is required. Operators: : = !=.

repeated string

Advertised authentication schemes. Operators: : = != =~ :~.

object

Show Fields

object

Show Fields

bool

Whether authentication appears required. Operators: : = !=.

bool

Whether SASL authentication appears enabled. Operators: : = !=.

object

Show Fields

uint32

Reported TCP listen port. Operators: : = != < <= > >=.

bool

Whether UDP appears enabled. Operators: : = !=.

uint32

Reported UDP listen port. Operators: : = != < <= > >=.

object

Show Fields

string

Stat value. Operators: : = != =~ :~.

object

Show Fields

bool

Whether ASCII protocol appears enabled. Operators: : = !=.

bool

Whether binary protocol appears enabled. Operators: : = !=.

string

Binding mode (ascii, binary, auto-negotiate, unknown). Operators: : = != =~ :~.

object

Show Fields

uint64

Total bytes read. Operators: : = != < <= > >=.

uint64

Current memory used in bytes. Operators: : = != < <= > >=.

uint64

Total bytes written. Operators: : = != < <= > >=.

uint64

Current connection count. Operators: : = != < <= > >=.

uint64

Current item count. Operators: : = != < <= > >=.

uint64

Eviction count. Operators: : = != < <= > >=.

uint64

Total connection count since start. Operators: : = != < <= > >=.

uint64

Total item count since start. Operators: : = != < <= > >=.

uint64

Uptime in seconds. Operators: : = != < <= > >=.

object

Show Fields

uint64

Maximum memory bytes. Operators: : = != < <= > >=.

uint32

Process id. Operators: : = != < <= > >=.

uint32

Pointer size in bits. Operators: : = != < <= > >=.

uint32

Worker thread count. Operators: : = != < <= > >=.

string

Server version string. Operators: : = != =~ :~.

object

Show Fields

object

Show Fields

string

Product code from Read Device Identification object 1. Operators: : = != =~ :~.

string

Revision from Read Device Identification object 2. Operators: : = != =~ :~.

uint32

Unit identifier queried on the target. Operators: : = != < <= > >=.

string

Vendor name from Read Device Identification object 0. Operators: : = != =~ :~.

object

Show Fields

object

Show Fields

uint32

Maximum number of chunks accepted in a message. Operators: : = != < <= > >=.

uint32

Maximum unencrypted OPC UA message size accepted by the server. Operators: : = != < <= > >=.

uint32

Maximum chunk size the server can receive. Operators: : = != < <= > >=.

uint32

Maximum chunk size the server will send. Operators: : = != < <= > >=.

object

Show Fields

string

Endpoint URL advertised by the server. Operators: : = != =~ :~.

uint32

Relative security level advertised for the endpoint. Operators: : = != < <= > >=.

string

Security mode label for the endpoint. Operators: : = != =~ :~.

string

Security policy URI for the endpoint. Operators: : = != =~ :~.

bool

Whether the endpoint advertises a server certificate. Operators: : = !=.

string

Transport profile URI for the endpoint. Operators: : = != =~ :~.

object

Show Fields

string

Human-readable application name. Operators: : = != =~ :~.

string

Application type label. Operators: : = != =~ :~.

string

Application URI from the advertised server description. Operators: : = != =~ :~.

string

Discovery profile URI when present. Operators: : = != =~ :~.

repeated string

Discovery URLs advertised by the server. Operators: : = != =~ :~.

string

Gateway server URI when present. Operators: : = != =~ :~.

string

Product URI from the advertised server description. Operators: : = != =~ :~.

object

Show Fields

object

Show Fields

string

Hardware model number. Operators: : = != =~ :~.

string

PLC family/type. Operators: : = != =~ :~.

string

Vendor name. Operators: : = != =~ :~.

object

Show Fields

string

Firmware build date string. Operators: : = != =~ :~.

string

Firmware build time string. Operators: : = != =~ :~.

string

Firmware version string. Operators: : = != =~ :~.

object

Show Fields

object

Show Fields

bool

Whether open relay. Operators: : = !=.

string

Probe error. Operators: : = != =~ :~.

string

Relay UUID. Operators: : = != =~ :~.

object

Show Fields

string

Parsed RustDesk rendezvous message type. Operators: : = != =~ :~.

string

Probe error. Operators: : = != =~ :~.

object

Show Fields

uint32

Port. Operators: : = != < <= > >=.

Overview

Data products

External Surface Intelligence

Fingerprinting

Rules

Projects

Data Dictionary

Scanning policy