# JJ-CORE Profile
# Stable, commonly-used features for most analysis tasks
# These features have well-defined semantics and are unlikely to change

# === Flow Metadata ===
flow_meta.src_ip
flow_meta.dst_ip
flow_meta.src_port
flow_meta.dst_port
flow_meta.protocol
flow_meta.duration
flow_meta.start_time
flow_meta.end_time
flow_meta.time_first
flow_meta.time_last
flow_meta.total_packets
flow_meta.total_bytes
flow_meta.packets_fwd
flow_meta.packets_bwd
flow_meta.bytes_fwd
flow_meta.bytes_bwd
flow_meta.packets_per_second
flow_meta.bytes_per_second
flow_meta.avg_packet_size
flow_meta.packets_ratio
flow_meta.bytes_ratio
flow_meta.payload_bytes_fwd
flow_meta.payload_bytes_bwd
flow_meta.payload_bytes_total
flow_meta.dst_port_class
flow_meta.dst_port_class_num
flow_meta.flow_stat
flow_meta.hdr_desc
flow_meta.num_hdrs

# === Timing Features ===
timing.iat_min
timing.iat_max
timing.iat_mean
timing.iat_median
timing.iat_std
timing.iat_sum
timing.iat_p25
timing.iat_p75
timing.iat_p90
timing.iat_p99
timing.iat_fwd_min
timing.iat_fwd_max
timing.iat_fwd_mean
timing.iat_fwd_median
timing.iat_fwd_std
timing.iat_bwd_min
timing.iat_bwd_max
timing.iat_bwd_mean
timing.iat_bwd_median
timing.iat_bwd_std
timing.first_response_time
timing.burst_count
timing.idle_count
timing.avg_burst_duration
timing.avg_burst_packets
timing.avg_idle_duration
timing.max_burst_packets
timing.max_idle_duration
timing.burstiness_index
timing.burstiness_index_fwd
timing.burstiness_index_bwd

# === Packet Size Features ===
size.pkt_len_min
size.pkt_len_max
size.pkt_len_mean
size.pkt_len_median
size.pkt_len_std
size.pkt_len_variance
size.pkt_len_p25
size.pkt_len_p75
size.pkt_len_p90
size.pkt_len_fwd_min
size.pkt_len_fwd_max
size.pkt_len_fwd_mean
size.pkt_len_fwd_median
size.pkt_len_fwd_std
size.pkt_len_bwd_min
size.pkt_len_bwd_max
size.pkt_len_bwd_mean
size.pkt_len_bwd_median
size.pkt_len_bwd_std
size.payload_len_min
size.payload_len_max
size.payload_len_mean
size.payload_len_std
size.payload_len_fwd_mean
size.payload_len_fwd_std
size.payload_len_bwd_mean
size.payload_len_bwd_std
size.l7_bytes_total
size.l7_bytes_fwd
size.l7_bytes_bwd
size.l7_pkt_max_fwd
size.l7_pkt_min_fwd
size.l7_pkt_max_bwd
size.l7_pkt_min_bwd
size.packets_with_payload
size.packets_with_payload_fwd
size.packets_with_payload_bwd
size.byte_asymmetry
size.pkt_asymmetry
size.header_only_ratio
size.dominant_pkt_size
size.dominant_pkt_ratio

# === TCP Features ===
tcp.tcp_is_tcp
tcp.tcp_fstat
tcp.tcp_syn_count
tcp.tcp_synack_count
tcp.tcp_ack_count
tcp.tcp_fin_count
tcp.tcp_rst_count
tcp.tcp_psh_count
tcp.tcp_urg_count
tcp.tcp_ece_count
tcp.tcp_cwr_count
tcp.tcp_syn_ratio
tcp.tcp_fin_ratio
tcp.tcp_rst_ratio
tcp.tcp_psh_ratio
tcp.tcp_initiator_syn
tcp.tcp_responder_synack
tcp.tcp_complete_handshake
tcp.tcp_graceful_close
tcp.tcp_reset_close
tcp.tcp_flags_fwd
tcp.tcp_flags_bwd
tcp.tcp_flags_agg
tcp.tcp_flags_anomaly
tcp.tcp_data_packets
tcp.tcp_ack_only_packets

# === TLS Features ===
tls.tls_detected
tls.tls_version
tls.tls_version_str
tls.tls_sni
tls.tls_cipher_suite
tls.tls_cipher_count
tls.tls_extension_count
tls.tls_handshake_packets
tls.tls_session_id_len
tls.tls_session_resumed
tls.tls_cert_count
tls.tls_cert_chain_length
tls.tls_cert_first_length
tls.tls_cert_total_length
tls.tls_alpn
tls.tls_key_exchange_group
tls.tls_key_exchange_group_name
tls.tls_key_exchange_length
tls.tls_session_ticket_ext
tls.tls_early_data_ext
tls.tls_psk_ext
tls.ja3_hash
tls.ja3s_hash
