IPP
Internet Printing Protocol (IPP) is a network protocol for communication between devices (such as computers and mobile devices) and printers over a network, typically the internet or a local area network (LAN).
|
Field |
Type |
Description |
|---|---|---|
|
services.ipp |
object |
|
|
services.ipp.attribute_cups_version |
text |
The CUPS version, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Generally in the form 'x.y.z'. |
|
services.ipp.attribute_ipp_versions |
text |
Each IPP version, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Always in the form 'x.y'. |
|
services.ipp.attribute_printer_uris |
text |
Each printer URI, if any, specified in the list of attributes returned in a get-printer-attributes response or CUPS-get-printers response. Uses ipp(s) or http(s) scheme, followed by a hostname or IP, and then the path to a particular printer. |
|
services.ipp.attributes |
object |
All IPP attributes included in any contentful responses obtained. Each has a name, list of values (potentially only one), and a tag denoting how the value should be interpreted. |
|
services.ipp.attributes.name |
text |
|
|
services.ipp.attributes.value_tag |
unsigned_long |
|
|
services.ipp.cups_response |
object |
|
|
services.ipp.cups_response.body |
text |
The body of the HTTP response. For hosts without a name, the first 64KB are available. For hosts with a name, only 6KB are available. |
|
services.ipp.cups_response.body_hashes |
text |
A hashing algorithm and the hexadecimal digest produced by applying it to services.http.response.body, separated by a colon (":") character. For example, |
|
services.ipp.cups_response.body_size |
integer |
The length, in bytes, of services.http.response.body; at most, 64KB. |
|
services.ipp.cups_response.favicons |
object |
|
|
services.ipp.cups_response.favicons.hashes |
text |
A hashing algorithm and the hexadecimal digest produced by applying it to favicon, separated by a colon (":") character. For example, |
|
services.ipp.cups_response.favicons.md5_hash |
keyword |
The hexadecimal MD5 digest of the favicon. |
|
services.ipp.cups_response.favicons.name |
text |
The URI used to retrieve the favicon, which most commonly use the http(s) or data schemes. URIs using the data scheme are truncated: the first 48 and last 24 characters are preserved. |
|
services.ipp.cups_response.favicons.shodan_hash |
integer |
A hash expressed as a signed decimal integer, provided for compatability with Shodan search. |
|
services.ipp.cups_response.favicons.size |
integer |
The size of the favicon retrieved, in bytes. |
|
services.ipp.cups_response.headers |
nested |
The key-value header pairs included in the response. |
|
services.ipp.cups_response.headers.key |
text |
|
|
services.ipp.cups_response.headers.value |
object |
|
|
services.ipp.cups_response.headers.value.headers |
text |
The values provided in the corresponding header. |
|
services.ipp.cups_response.html_tags |
text |
A list of the <title> and <meta> tags from services.http.response.body. |
|
services.ipp.cups_response.html_title |
text |
The title of the HTML page: the inner contents of the <title> tag in services.http.response.body, if present. |
|
services.ipp.cups_response.protocol |
text |
The protocol field of the response, which includes the claimed HTTP version number. |
|
services.ipp.cups_response.status_code |
integer |
A 3-digit integer result code indicating the result of the services.http.request. |
|
services.ipp.cups_response.status_reason |
text |
A human-readable phrase describing the status code. |
|
services.ipp.cups_version |
text |
The CUPS version, if any, specified in the Server header of an IPP get-attributes response. |
|
services.ipp.major_version |
unsigned_long |
Major component of IPP version listed in the Server header of a response to an IPP get-printer-attributes request. |
|
services.ipp.minor_version |
unsigned_long |
Minor component of IPP version listed in the Server header of a response to an IPP get-printer-attributes request. |
|
services.ipp.response |
object |
|
|
services.ipp.response.body |
text |
The body of the HTTP response. For hosts without a name, the first 64KB are available. For hosts with a name, only 6KB are available. |
|
services.ipp.response.body_hashes |
text |
A hashing algorithm and the hexadecimal digest produced by applying it to services.http.response.body, separated by a colon (":") character. For example, |
|
services.ipp.response.body_size |
integer |
The length, in bytes, of services.http.response.body; at most, 64KB. |
|
services.ipp.response.favicons |
object |
|
|
services.ipp.response.favicons.hashes |
text |
A hashing algorithm and the hexadecimal digest produced by applying it to favicon, separated by a colon (":") character. For example, |
|
services.ipp.response.favicons.md5_hash |
keyword |
The hexadecimal MD5 digest of the favicon. |
|
services.ipp.response.favicons.name |
text |
The URI used to retrieve the favicon, which most commonly use the http(s) or data schemes. URIs using the data scheme are truncated: the first 48 and last 24 characters are preserved. |
|
services.ipp.response.favicons.shodan_hash |
integer |
A hash expressed as a signed decimal integer, provided for compatability with Shodan search. |
|
services.ipp.response.favicons.size |
integer |
The size of the favicon retrieved, in bytes. |
|
services.ipp.response.headers |
nested |
The key-value header pairs included in the response. |
|
services.ipp.response.headers.key |
text |
|
|
services.ipp.response.headers.value |
object |
|
|
services.ipp.response.headers.value.headers |
text |
The values provided in the corresponding header. |
|
services.ipp.response.html_tags |
text |
A list of the <title> and <meta> tags from services.http.response.body. |
|
services.ipp.response.html_title |
text |
The title of the HTML page: the inner contents of the <title> tag in services.http.response.body, if present. |
|
services.ipp.response.protocol |
text |
The protocol field of the response, which includes the claimed HTTP version number. |
|
services.ipp.response.status_code |
integer |
A 3-digit integer result code indicating the result of the services.http.request. |
|
services.ipp.response.status_reason |
text |
A human-readable phrase describing the status code. |
|
services.ipp.version_string |
text |
The specific IPP version returned in response to an IPP get-printer-attributes request. Always in the form 'IPP/x.y' |