Network
as of v1.44.0Addresses, ports, transports and TLS — the connection every client and server span sits on.
tls 29network 17net 15geo 7client 2destination 2dns 2server 2source 2peer 1
- attributes
- 79
- metrics
- 1
- signals
- 0
- stable
- 12
- deprecated
- 17
Metrics 1
- dns.lookup.durationDevelopmenthistogram · sMeasures the time taken to perform a DNS lookup.
Specification
- Metricsare bound by the metrics specification — 548 requirements across 8 documents, 279 of them MUST or SHALL.
The specification prose never names this domain. That is not an omission: the specification defines signals, not subject matter — what binds tls telemetry is the general rules above, and the conventions themselves carry the rest.
On the wire, this lands in metrics/v1/metrics. Field-by-field definitions are under OTLP.
Attributes 79
tls29 attributes
- tls.cipherDevelopmentString indicating the cipher used during the current connection.
- tls.client.certificateDevelopmentPEM-encoded stand-alone certificate offered by the client. This is usually mutually-exclusive of client.certificate_chain since this value also exists in that l
- tls.client.certificate_chainDevelopmentArray of PEM-encoded certificates that make up the certificate chain offered by the client. This is usually mutually-exclusive of client.certificate since that
- tls.client.hash.md5DevelopmentCertificate fingerprint using the MD5 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value sho
- tls.client.hash.sha1DevelopmentCertificate fingerprint using the SHA1 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value sh
- tls.client.hash.sha256DevelopmentCertificate fingerprint using the SHA256 digest of DER-encoded version of certificate offered by the client. For consistency with other hash values, this value
- tls.client.issuerDevelopmentDistinguished name of subject of the issuer of the x.509 certificate presented by the client.
- tls.client.ja3DevelopmentA hash that identifies clients based on how they perform an SSL/TLS handshake.
- tls.client.not_afterDevelopmentDate/Time indicating when client certificate is no longer considered valid.
- tls.client.not_beforeDevelopmentDate/Time indicating when client certificate is first considered valid.
- tls.client.server_name
- tls.client.subjectDevelopmentDistinguished name of subject of the x.509 certificate presented by the client.
- tls.client.supported_ciphersDevelopmentArray of ciphers offered by the client during the client hello.
- tls.curveDevelopmentString indicating the curve used for the given cipher, when applicable
- tls.establishedDevelopmentBoolean flag indicating if the TLS negotiation was successful and transitioned to an encrypted tunnel.
- tls.next_protocolDevelopmentString indicating the protocol being tunneled. Per the values in the IANA registry, this string should be lower case.
- tls.protocol.nameDevelopmentNormalized lowercase protocol name parsed from original string of the negotiated SSL/TLS protocol version
- tls.protocol.versionDevelopmentNumeric part of the version parsed from the original string of the negotiated SSL/TLS protocol version
- tls.resumedDevelopmentBoolean flag indicating if this TLS connection was resumed from an existing TLS negotiation.
- tls.server.certificateDevelopmentPEM-encoded stand-alone certificate offered by the server. This is usually mutually-exclusive of server.certificate_chain since this value also exists in that l
- tls.server.certificate_chainDevelopmentArray of PEM-encoded certificates that make up the certificate chain offered by the server. This is usually mutually-exclusive of server.certificate since that
- tls.server.hash.md5DevelopmentCertificate fingerprint using the MD5 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value sho
- tls.server.hash.sha1DevelopmentCertificate fingerprint using the SHA1 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value sh
- tls.server.hash.sha256DevelopmentCertificate fingerprint using the SHA256 digest of DER-encoded version of certificate offered by the server. For consistency with other hash values, this value
- tls.server.issuerDevelopmentDistinguished name of subject of the issuer of the x.509 certificate presented by the client.
- tls.server.ja3sDevelopmentA hash that identifies servers based on how they perform an SSL/TLS handshake.
- tls.server.not_afterDevelopmentDate/Time indicating when server certificate is no longer considered valid.
- tls.server.not_beforeDevelopmentDate/Time indicating when server certificate is first considered valid.
- tls.server.subjectDevelopmentDistinguished name of subject of the x.509 certificate presented by the server.
network17 attributes
- network.carrier.iccDevelopmentThe ISO 3166-1 alpha-2 2-character country code associated with the mobile carrier network.
- network.carrier.mccDevelopmentThe mobile carrier country code.
- network.carrier.mncDevelopmentThe mobile carrier network code.
- network.carrier.nameDevelopmentThe name of the mobile carrier.
- network.connection.stateDevelopmentThe state of network connection
- network.connection.subtypeDevelopmentThis describes more details regarding the connection.type. It may be the type of cell technology connection, but it could be used for describing details about a
- network.connection.typeDevelopmentThe internet connection type.
- network.interface.nameRelease candidateThe network interface name.
- network.io.directionRelease candidateThe direction of traffic from the perspective of the observing host's physical or virtual network interface. It should not be used to represent the logical dire
- network.local.addressStableLocal address of the network connection - IP address or UNIX domain socket name.
- network.local.portStableLocal port number of the network connection.
- network.peer.addressStablePeer address of the network connection - IP address or UNIX domain socket name.
- network.peer.portStablePeer port number of the network connection.
- network.protocol.nameStableOSI application layer or non-OSI equivalent.
- network.protocol.versionStableThe actual version of the protocol used for network communication.
- network.transportStableOSI transport layer or inter-process communication method.
- network.typeStableOSI network layer or non-OSI equivalent.
net15 attributes
- net.host.ip
- net.host.name
- net.host.port
- net.peer.ip
- net.peer.nameDeprecatedDeprecated, use server.address on client spans and client.address on server spans.
- net.peer.portDeprecatedDeprecated, use server.port on client spans and client.port on server spans.
- net.protocol.name
- net.protocol.version
- net.sock.familyDeprecatedDeprecated, use network.transport and network.type.
- net.sock.host.addr
- net.sock.host.port
- net.sock.peer.addr
- net.sock.peer.nameDeprecatedDeprecated, no replacement at this time.
- net.sock.peer.port
- net.transport
geo7 attributes
- geo.continent.codeDevelopmentTwo-letter code representing continent’s name.
- geo.country.iso_codeDevelopmentTwo-letter ISO Country Code (ISO 3166-1 alpha2).
- geo.locality.nameDevelopmentLocality name. Represents the name of a city, town, village, or similar populated place.
- geo.location.latDevelopmentLatitude of the geo location in WGS84.
- geo.location.lonDevelopmentLongitude of the geo location in WGS84.
- geo.postal_codeDevelopmentPostal code associated with the location. Values appropriate for this field may also be known as a postcode or ZIP code and will vary widely from country to cou
- geo.region.iso_codeDevelopmentRegion ISO code (ISO 3166-2).
client2 attributes
- client.addressStableClient address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
- client.portStableClient port number.
destination2 attributes
- destination.addressDevelopmentDestination address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
- destination.portDevelopmentDestination port number
dns2 attributes
- dns.answersDevelopmentThe list of IPv4 or IPv6 addresses resolved during DNS lookup.
- dns.question.nameDevelopmentThe name being queried.
server2 attributes
- server.addressStableServer domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
- server.portStableServer port number.
source2 attributes
- source.addressDevelopmentSource address - domain name if available without reverse DNS lookup; otherwise, IP address or UNIX domain socket name.
- source.portDevelopmentSource port number
peer1 attributes
- peer.serviceDeprecated→ service.peer.nameThe service.name of the remote service. SHOULD be equal to the actual service.name resource attribute of the remote service if any.
Recent changes
Breaking and notable changes to this domain across the last 6 semantic-conventions releases.
- stabilityattributenetwork.interface.namePromoted to release_candidate.
- stabilityattributenetwork.io.directionPromoted to release_candidate.
Topics are this site's grouping of upstream namespaces, not a structure the OpenTelemetry project publishes. JSON · All domains