Stream Helios honeypot TLS ClientHello captures in real time

Real-time NDJSON stream of TLS ClientHello captures from Helios honeypot sensors. details is the parsed ClientHello as a JSON object (cipher suites, extensions, supported groups, ALPN), or null when the sensor could not parse it; raw is always null.

Required scope: HONEYPOT_HTTPS_STREAM. Schema: see HoneypotHTTPSStreamEntry under Components.

Sample event:

{"timestamp":1714780800123,"tunnel_id":42,"domain":"example.com","port":443,"protocol":"https","meta":{"proxy_ip":"203.0.113.10","server":"hp-eu-1","pool_id":"prod","provider":"luminati"},"details":{"handshake_version":"TLS 1.2","sni":"example.com","cipher_suites":[{"code":4865,"name":"TLS_AES_128_GCM_SHA256"}],"alpn":["h2","http/1.1"]},"raw":null}