# JJ-EXTENDED Profile
# Additional analysis features for advanced use cases
# These features are stable but require specific protocol support

# === DNS Features ===
dns.dns_detected
dns.dns_is_query
dns.dns_is_response
dns.dns_query_name
dns.dns_query_type
dns.dns_query_type_str
dns.dns_response_code
dns.dns_response_code_str
dns.dns_answer_count
dns.dns_authority_count
dns.dns_additional_count
dns.dns_recursion_desired
dns.dns_recursion_available
dns.dns_truncated
dns.dns_min_ttl
dns.dns_max_ttl

# === SSH Features ===
ssh.ssh_detected
ssh.ssh_version
ssh.ssh_client_software
ssh.ssh_client_version
ssh.ssh_server_software
ssh.ssh_server_version
ssh.ssh_hassh
ssh.ssh_hassh_server
ssh.ssh_kex_packets
ssh.ssh_encrypted_packets

# === QUIC Features ===
quic.quic_detected
quic.quic_version
quic.quic_version_str
quic.quic_sni
quic.quic_alpn
quic.quic_dcid_len
quic.quic_scid_len
quic.quic_initial_packets
quic.quic_0rtt_detected
quic.quic_retry_detected
quic.quic_spin_bit
quic.quic_pn_length

# === HTTP/2 Features ===
http2.http2_detected
http2.http3_detected
http2.http_version
http2.http2_preface_seen
http2.http2_frame_count
http2.http2_data_frames
http2.http2_headers_frames
http2.http2_settings_frames
http2.http2_push_promise_frames
http2.http2_goaway_frames
http2.http2_window_update_frames
http2.http2_streams_estimate
http2.http2_server_push
http2.http2_multiplexed

# === Entropy Features ===
entropy.entropy_payload
entropy.entropy_initiator
entropy.entropy_responder
entropy.entropy_ratio
entropy.byte_distribution_uniformity
entropy.high_byte_ratio
entropy.printable_ratio
entropy.null_ratio
entropy.payload_bytes_sampled

# === TCP RTT Features ===
tcp_rtt.tcp_rtt_handshake
tcp_rtt.tcp_rtt_min
tcp_rtt.tcp_rtt_max
tcp_rtt.tcp_rtt_mean
tcp_rtt.tcp_rtt_std
tcp_rtt.tcp_rtt_samples
tcp_rtt.tcp_rtt_jitter_avg
tcp_rtt.tcp_rtt_ack_min
tcp_rtt.tcp_rtt_ack_max
tcp_rtt.tcp_rtt_ack_mean

# === TCP Options Features ===
tcp_options.tcp_mss_fwd
tcp_options.tcp_mss_bwd
tcp_options.tcp_ws_fwd
tcp_options.tcp_ws_bwd
tcp_options.tcp_sack_permitted_fwd
tcp_options.tcp_sack_permitted_bwd
tcp_options.tcp_sack_blocks_total
tcp_options.tcp_ts_fwd_present
tcp_options.tcp_ts_bwd_present
tcp_options.tcp_ts_fwd_first
tcp_options.tcp_ts_fwd_last
tcp_options.tcp_ts_fwd_diff
tcp_options.tcp_ts_bwd_first
tcp_options.tcp_ts_bwd_last
tcp_options.tcp_ts_bwd_diff
tcp_options.tcp_ts_ecr_fwd_first
tcp_options.tcp_ts_ecr_bwd_first
tcp_options.tcp_options_bitmap
tcp_options.tcp_options_pkt_count

# === TCP Sequence Features ===
tcp_sequence.tcp_isn_fwd
tcp_sequence.tcp_isn_bwd
tcp_sequence.tcp_seq_fwd_bytes_sent
tcp_sequence.tcp_seq_bwd_bytes_sent
tcp_sequence.tcp_seq_fwd_retrans
tcp_sequence.tcp_seq_bwd_retrans
tcp_sequence.tcp_total_retrans
tcp_sequence.tcp_retrans_ratio
tcp_sequence.tcp_seq_fwd_ooo
tcp_sequence.tcp_seq_bwd_ooo
tcp_sequence.tcp_total_ooo
tcp_sequence.tcp_seq_fwd_gaps
tcp_sequence.tcp_seq_bwd_gaps
tcp_sequence.tcp_ack_fwd_count
tcp_sequence.tcp_ack_bwd_count
tcp_sequence.tcp_ack_fwd_dup
tcp_sequence.tcp_ack_bwd_dup
tcp_sequence.tcp_total_dup_acks

# === TCP Window Features ===
tcp_window.tcp_init_win_fwd
tcp_window.tcp_init_win_bwd
tcp_window.tcp_win_scale_fwd
tcp_window.tcp_win_scale_bwd
tcp_window.tcp_win_fwd_min
tcp_window.tcp_win_fwd_max
tcp_window.tcp_win_fwd_mean
tcp_window.tcp_win_bwd_min
tcp_window.tcp_win_bwd_max
tcp_window.tcp_win_bwd_mean
tcp_window.tcp_scaled_win_fwd_max
tcp_window.tcp_scaled_win_bwd_max
tcp_window.tcp_win_fwd_zero_count
tcp_window.tcp_win_bwd_zero_count
tcp_window.tcp_zero_win_ratio
tcp_window.tcp_win_fwd_change_count
tcp_window.tcp_win_bwd_change_count
tcp_window.tcp_win_fwd_up_count
tcp_window.tcp_win_fwd_down_count
tcp_window.tcp_win_bwd_up_count
tcp_window.tcp_win_bwd_down_count

# === IP Extended Features ===
ip_extended.ip_version
ip_extended.ip_ttl_fwd_min
ip_extended.ip_ttl_fwd_max
ip_extended.ip_ttl_fwd_mean
ip_extended.ip_ttl_fwd_initial_est
ip_extended.ip_ttl_fwd_hops_est
ip_extended.ip_ttl_fwd_changes
ip_extended.ip_ttl_bwd_min
ip_extended.ip_ttl_bwd_max
ip_extended.ip_ttl_bwd_mean
ip_extended.ip_ttl_bwd_changes
ip_extended.ip_tos_value
ip_extended.ip_tos_unique_count
ip_extended.ip_dscp
ip_extended.ip_ecn
ip_extended.ip_flags
ip_extended.ip_df_count
ip_extended.ip_df_ratio
ip_extended.ip_id_gaps
