GreyNoise Intelligence · JSON Structure

Greynoise Time Series Tcp Data Structure

TCP-related data

Type: object Properties: 2
SecurityThreat IntelligenceCybersecurityIP ReputationVulnerability ManagementNetwork TelemetrySOC AutomationPublic APIs

TimeSeriesTCPData is a JSON Structure definition published by GreyNoise Intelligence, describing 2 properties. It conforms to the https://json-structure.org/meta/core/v0/# meta-schema.

Properties

ja4t ja4l

Meta-schema: https://json-structure.org/meta/core/v0/#

JSON Structure

Raw ↑
{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://api-evangelist.github.io/greynoise/json-structure/greynoise-time-series-tcp-data-structure.json",
  "name": "TimeSeriesTCPData",
  "type": "object",
  "description": "TCP-related data",
  "properties": {
    "ja4t": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "List of JA4T TCP fingerprints observed in network traffic from the IP.\nJA4T captures TCP connection characteristics such as window size,\noptions, and MSS, useful for OS fingerprinting and identifying\nnetwork stacks.\n",
      "example": [
        "64240_2-1-3-1-1-4_1460_8"
      ]
    },
    "ja4l": {
      "type": "string",
      "description": "JA4L light distance/latency fingerprint observed in network traffic\nfrom the IP. Captures TCP TTL and window size characteristics, useful\nfor estimating client-server distance and identifying proxied\nconnections.\n",
      "example": "1460_64"
    }
  }
}