Property
tcp
Network stack fingerprint of the IP, collected from the SYN/ACK that the IP sent in response to the crawler's TCP SYN. The same SYN is sent to every IP, so the differences between the responses come from the operating system's network stack.
| Property Name | Type | Description | Required |
|---|---|---|---|
| fp | string | Versioned, human-readable fingerprint key built from the "raw" headers in the format "t1_<initial TTL>_<window>_<window scale>_<options layout>_<quirks>". IPs with the same network stack share the same key. The property is missing if the headers couldn't be parsed. Ex: t1_64_t45_10_MSTNW_df,id0 | |
| raw | string | Hex-encoded IP and TCP headers of the SYN/ACK, without the IP addresses, ports, sequence and acknowledgement numbers. Contains the IP header fields up to the source address followed by the TCP header starting at the data offset, including the TCP options. Ex: 4500003c0000400040061e5fa012fe881c8c0000020405b40402080ab339356e2ec4a2820103030a | Yes |
↑ TopExample
{
"raw": "4500003c0000400040061e5fa012fe881c8c0000020405b40402080ab339356e2ec4a2820103030a",
"fp": "t1_64_t45_10_MSTNW_df,id0"
}