QUIC: add basic support for fragmented Client Hello (#1216)

Only in-order and non overlapping fragments are handled
See #1195

7 files changed, 325 insertions, 52 deletions

diff --git a/src/include/ndpi_typedefs.h b/src/include/ndpi_typedefs.h
index 375739573..4b11a8078 100644
--- a/src/include/ndpi_typedefs.h
+++ b/src/include/ndpi_typedefs.h
@@ -841,6 +841,10 @@ struct ndpi_flow_udp_struct {
   /* NDPI_PROTOCOL_WIREGUARD */
   u_int8_t wireguard_stage;
   u_int32_t wireguard_peer_index[2];
+
+  /* NDPI_PROTOCOL_QUIC */
+  u_int8_t *quic_reasm_buf;
+  u_int32_t quic_reasm_buf_len;
 };
 
 /* ************************************************** */
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index 00ebb1cc6..1a4f0aef9 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -4158,6 +4158,11 @@ void ndpi_free_flow_data(struct ndpi_flow_struct* flow) {
       if(flow->l4.tcp.tls.message.buffer)
 	ndpi_free(flow->l4.tcp.tls.message.buffer);
     }
+
+    if(flow->l4_proto == IPPROTO_UDP) {
+      if(flow->l4.udp.quic_reasm_buf)
+	ndpi_free(flow->l4.udp.quic_reasm_buf);
+    }
   }
 }
 
diff --git a/src/lib/protocols/quic.c b/src/lib/protocols/quic.c
index 437968df4..8e3c21278 100644
--- a/src/lib/protocols/quic.c
+++ b/src/lib/protocols/quic.c
@@ -1006,16 +1006,99 @@ static uint8_t *decrypt_initial_packet(struct ndpi_detection_module_struct *ndpi
 #endif /* HAVE_LIBGCRYPT */
 
 
+static int __reassemble(struct ndpi_flow_struct *flow, const u_int8_t *frag,
+                        uint64_t frag_len, uint64_t frag_offset,
+                        const u_int8_t **buf, u_int64_t *buf_len)
+{
+  const int max_quic_reasm_buffer_len = 4096; /* Let's say a couple of full-MTU packets... */
+
+  /* TODO: at the moment, this function is only a little more than a stub.
+     We should reassemble the fragments, but nDPI lacks any proper generic
+     reassembler code. So, to keep the code simple here, try reassembling
+     the simplest case: only in-order fragments using a fixed-size buffer (i.e. no
+     retransmissions, no out-of-order, no overlapping...)
+  */
+
+  if(!flow->l4.udp.quic_reasm_buf) {
+    flow->l4.udp.quic_reasm_buf = ndpi_malloc(max_quic_reasm_buffer_len);
+    if(!flow->l4.udp.quic_reasm_buf)
+      return -1; /* Memory error */
+    flow->l4.udp.quic_reasm_buf_len = 0;
+  }
+  if(flow->l4.udp.quic_reasm_buf_len != frag_offset)
+    return -2; /* Out-of-order, retransmission, overlapping */
+  if(frag_offset + frag_len > max_quic_reasm_buffer_len)
+    return -3; /* Buffer too small */
+
+  memcpy(&flow->l4.udp.quic_reasm_buf[flow->l4.udp.quic_reasm_buf_len],
+	 frag, frag_len);
+  flow->l4.udp.quic_reasm_buf_len += frag_len;
+
+  *buf = flow->l4.udp.quic_reasm_buf;
+  *buf_len = flow->l4.udp.quic_reasm_buf_len;
+  return 0;
+}
+static int is_ch_complete(const u_int8_t *buf, uint64_t buf_len)
+{
+  uint32_t msg_len;
+
+  if(buf_len >= 4) {
+    msg_len = (buf[1] << 16) + (buf[2] << 8) + buf[3];
+    if (4 + msg_len == buf_len) {
+      return 1;
+    }
+  }
+  return 0;
+}
+static int is_ch_reassembler_pending(struct ndpi_flow_struct *flow)
+{
+  return flow->l4.udp.quic_reasm_buf != NULL &&
+         !is_ch_complete(flow->l4.udp.quic_reasm_buf,
+			 flow->l4.udp.quic_reasm_buf_len);
+}
+static const uint8_t *get_reassembled_crypto_data(struct ndpi_detection_module_struct *ndpi_struct,
+                                                  struct ndpi_flow_struct *flow,
+						  const u_int8_t *frag,
+						  uint64_t frag_offset, uint64_t frag_len,
+						  uint64_t *crypto_data_len)
+{
+  const u_int8_t *crypto_data;
+  int rc;
+
+  NDPI_LOG_DBG2(ndpi_struct, "frag %d/%d\n", frag_offset, frag_len);
+
+  /* Fast path: no need of reassembler stuff */
+  if(frag_offset == 0 &&
+     is_ch_complete(frag, frag_len)) {
+    NDPI_LOG_DBG2(ndpi_struct, "Complete CH (fast path)\n");
+    *crypto_data_len = frag_len;
+    return frag;
+  }
+
+  rc = __reassemble(flow, frag, frag_len, frag_offset,
+                    &crypto_data, crypto_data_len);
+  if(rc == 0) {
+    if(is_ch_complete(crypto_data, *crypto_data_len)) {
+      NDPI_LOG_DBG2(ndpi_struct, "Reassembler completed!\n");
+      return crypto_data;
+    }
+    NDPI_LOG_DBG2(ndpi_struct, "CH not yet completed\n");
+  } else {
+    NDPI_LOG_DBG(ndpi_struct, "Reassembler error: %d\n", rc);
+  }
+  return NULL;
+}
+
 static const uint8_t *get_crypto_data(struct ndpi_detection_module_struct *ndpi_struct,
 				      struct ndpi_flow_struct *flow,
 				      uint32_t version,
 				      u_int8_t *clear_payload, uint32_t clear_payload_len,
 				      uint64_t *crypto_data_len)
 {
-  const u_int8_t *crypto_data;
+  const u_int8_t *crypto_data = NULL;
   uint32_t counter;
   uint8_t first_nonzero_payload_byte, offset_len;
-  uint64_t unused, offset;
+  uint64_t unused, frag_offset, frag_len;
 
   counter = 0;
   while(counter < clear_payload_len && clear_payload[counter] == 0)
@@ -1054,6 +1137,13 @@ static const uint8_t *get_crypto_data(struct ndpi_detection_module_struct *ndpi_
     counter += 2 + offset_len;
     *crypto_data_len = gquic_get_u16(&clear_payload[counter], version);
     counter += 2;
+    if(*crypto_data_len + counter > clear_payload_len) {
+#ifdef QUIC_DEBUG
+      NDPI_LOG_ERR(ndpi_struct, "Invalid length %lu + %d > %d version 0x%x\n",
+		   (unsigned long)*crypto_data_len, counter, clear_payload_len, version);
+#endif
+      return NULL;
+    }
     crypto_data = &clear_payload[counter];
 
   } else if(version == V_Q050 || version == V_T050 || version == V_T051) {
@@ -1075,41 +1165,68 @@ static const uint8_t *get_crypto_data(struct ndpi_detection_module_struct *ndpi_
       return NULL;
     counter += quic_len(&clear_payload[counter], &unused);
     counter += quic_len(&clear_payload[counter], crypto_data_len);
+    if(*crypto_data_len + counter > clear_payload_len) {
+#ifdef QUIC_DEBUG
+      NDPI_LOG_ERR(ndpi_struct, "Invalid length %lu + %d > %d version 0x%x\n",
+		   (unsigned long)*crypto_data_len, counter, clear_payload_len, version);
+#endif
+      return NULL;
+    }
     crypto_data = &clear_payload[counter];
 
   } else {  /* All other versions */
-    if(first_nonzero_payload_byte != 0x06) {
-      if(first_nonzero_payload_byte != 0x02 &&
-         first_nonzero_payload_byte != 0x1C) {
-#ifdef QUIC_DEBUG
-        NDPI_LOG_ERR(ndpi_struct, "Unexpected frame 0x%x\n", first_nonzero_payload_byte);
-#endif
-      } else {
-        NDPI_LOG_DBG(ndpi_struct, "Unexpected ACK/CC frame\n");
+    while(counter < clear_payload_len) {
+      uint8_t frame_type = clear_payload[counter];
+      switch(frame_type) {
+      case 0x00:
+        NDPI_LOG_DBG2(ndpi_struct, "PADDING frame\n");
+        while(counter < clear_payload_len &&
+              clear_payload[counter] == 0)
+          counter += 1;
+        break;
+      case 0x01:
+        NDPI_LOG_DBG2(ndpi_struct, "PING frame\n");
+        counter += 1;
+        break;
+      case 0x06:
+        NDPI_LOG_DBG2(ndpi_struct, "CRYPTO frame\n");
+        counter += 1;
+        if(counter > clear_payload_len ||
+           counter + quic_len_buffer_still_required(clear_payload[counter]) > clear_payload_len)
+          return NULL;
+        counter += quic_len(&clear_payload[counter], &frag_offset);
+        if(counter > clear_payload_len ||
+           counter + quic_len_buffer_still_required(clear_payload[counter]) > clear_payload_len)
+          return NULL;
+        counter += quic_len(&clear_payload[counter], &frag_len);
+        if(frag_len + counter > clear_payload_len) {
+          NDPI_LOG_DBG(ndpi_struct, "Invalid crypto frag length %lu + %d > %d version 0x%x\n",
+                       (unsigned long)frag_len, counter, clear_payload_len, version);
+          return NULL;
+        }
+        crypto_data = get_reassembled_crypto_data(ndpi_struct, flow,
+                                                  &clear_payload[counter],
+                                                  frag_offset, frag_len,
+                                                  crypto_data_len);
+        if(crypto_data) {
+          return crypto_data;
+	}
+        NDPI_LOG_DBG(ndpi_struct, "Crypto reassembler pending\n");
+        counter += frag_len;
+        break;
+      case 0x1C: /* CC */
+      case 0x02: /* ACK */
+        NDPI_LOG_DBG2(ndpi_struct, "Unexpected CC/ACK frame\n");
+        return NULL;
+      default:
+        NDPI_LOG_DBG(ndpi_struct, "Unexpected frame 0x%x\n", frame_type);
+	return NULL;
       }
-      return NULL;
     }
-    counter += 1;
-    if(counter + 8 + 8 >= clear_payload_len) /* quic_len reads 8 bytes, at most */
-      return NULL;
-    counter += quic_len(&clear_payload[counter], &offset);
-    if(offset != 0) {
-#ifdef QUIC_DEBUG
-      NDPI_LOG_ERR(ndpi_struct, "Unexpected crypto stream offset 0x%x\n",
-		   offset);
-#endif
+    if(counter > clear_payload_len) {
+      NDPI_LOG_DBG(ndpi_struct, "Error parsing frames %d %d\n", counter, clear_payload_len);
       return NULL;
     }
-    counter += quic_len(&clear_payload[counter], crypto_data_len);
-    crypto_data = &clear_payload[counter];
-  }
-
-  if(*crypto_data_len + counter > clear_payload_len) {
-#ifdef QUIC_DEBUG
-    NDPI_LOG_ERR(ndpi_struct, "Invalid length %lu + %d > %d version 0x%x\n",
-		 (unsigned long)*crypto_data_len, counter, clear_payload_len, version);
-#endif
-    return NULL;
   }
   return crypto_data;
 }
@@ -1385,12 +1502,16 @@ static int may_be_initial_pkt(struct ndpi_detection_module_struct *ndpi_struct,
 static int eval_extra_processing(struct ndpi_detection_module_struct *ndpi_struct,
 				 struct ndpi_flow_struct *flow, u_int32_t version)
 {
-  /* For the time being we need extra processing only to detect Snapchat calls,
-     i.e. RTP/RTCP multiplxed with QUIC.
-     We noticed that Snapchat uses Q046, without any SNI */
+  /* For the time being we need extra processing in two cases only:
+     1) to detect Snapchat calls, i.e. RTP/RTCP multiplxed with QUIC.
+        We noticed that Snapchat uses Q046, without any SNI.
+     2) to reassemble CH fragments on multiple UDP packets.
+     These two cases are mutually exclusive
+   */
 
-  if(version == V_Q046 &&
-     flow->protos.tls_quic_stun.tls_quic.client_requested_server_name[0] == '\0') {
+  if((version == V_Q046 &&
+      flow->protos.tls_quic_stun.tls_quic.client_requested_server_name[0] == '\0') ||
+     is_ch_reassembler_pending(flow)) {
     NDPI_LOG_DBG2(ndpi_struct, "We have further work to do\n");
     return 1;
   }
@@ -1403,17 +1524,30 @@ static int is_valid_rtp_payload_type(uint8_t type)
   return type <= 34 || (type >= 96 && type <= 127);
 }
 
+static void ndpi_search_quic(struct ndpi_detection_module_struct *ndpi_struct,
+			     struct ndpi_flow_struct *flow);
 static int ndpi_search_quic_extra(struct ndpi_detection_module_struct *ndpi_struct,
 				  struct ndpi_flow_struct *flow)
 {
   struct ndpi_packet_struct *packet = &flow->packet;
 
   /* We are elaborating a packet following the initial CHLO/ClientHello.
-     Mutiplexing QUIC with RTP/RTCP should be quite generic, but
-     for the time being, we known only NDPI_PROTOCOL_SNAPCHAT_CALL having such behaviour */
+     Two cases:
+     1) Mutiplexing QUIC with RTP/RTCP. It should be quite generic, but
+        for the time being, we known only NDPI_PROTOCOL_SNAPCHAT_CALL having
+	such behaviour
+     2) CH reasssembling is going on */
+  /* TODO: could we unify ndpi_search_quic() and ndpi_search_quic_extra() somehow? */
 
   NDPI_LOG_DBG(ndpi_struct, "search QUIC extra func\n");
 
+  if (is_ch_reassembler_pending(flow)) {
+    ndpi_search_quic(ndpi_struct, flow);
+    return is_ch_reassembler_pending(flow);
+  }
+
+  /* RTP/RTCP stuff */
+
   /* If this packet is still a Q046 one we need to keep going */
   if(packet->payload[0] & 0x40) {
     NDPI_LOG_DBG(ndpi_struct, "Still QUIC\n");
@@ -1441,8 +1575,8 @@ static int ndpi_search_quic_extra(struct ndpi_detection_module_struct *ndpi_stru
   return 0;
 }
 
-void ndpi_search_quic(struct ndpi_detection_module_struct *ndpi_struct,
-		      struct ndpi_flow_struct *flow)
+static void ndpi_search_quic(struct ndpi_detection_module_struct *ndpi_struct,
+			     struct ndpi_flow_struct *flow)
 {
   u_int32_t version;
   u_int8_t *clear_payload;
@@ -1505,33 +1639,30 @@ void ndpi_search_quic(struct ndpi_detection_module_struct *ndpi_struct,
   crypto_data = get_crypto_data(ndpi_struct, flow, version,
 				clear_payload, clear_payload_len,
 				&crypto_data_len);
-  if(!crypto_data) {
-    NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
-    if(is_version_with_encrypted_header(version)) {
-      ndpi_free(clear_payload);
-    }
-    return;
-  }
 
   /*
-   * 6) Process ClientHello/CHLO from the Crypto Data
+   * 6) Process ClientHello/CHLO from the Crypto Data (if any)
    */
-  if(!is_version_with_tls(version)) {
-    process_chlo(ndpi_struct, flow, crypto_data, crypto_data_len);
-  } else {
-    process_tls(ndpi_struct, flow, crypto_data, crypto_data_len, version);
+  if(crypto_data) {
+    if(!is_version_with_tls(version)) {
+      process_chlo(ndpi_struct, flow, crypto_data, crypto_data_len);
+    } else {
+      process_tls(ndpi_struct, flow, crypto_data, crypto_data_len, version);
+    }
   }
   if(is_version_with_encrypted_header(version)) {
     ndpi_free(clear_payload);
   }
 
   /*
-   * 7) We need to process other packets than ClientHello/CHLO?
+   * 7) We need to process other packets than (the first) ClientHello/CHLO?
    */
   if(eval_extra_processing(ndpi_struct, flow, version)) {
     flow->check_extra_packets = 1;
     flow->max_extra_packets_to_check = 24; /* TODO */
     flow->extra_packets_func = ndpi_search_quic_extra;
+  } else if(!crypto_data) {
+    NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
   }
 }
 
diff --git a/tests/pcap/quic_frags_ch_in_multiple_packets.pcapng b/tests/pcap/quic_frags_ch_in_multiple_packets.pcapng
new file mode 100644
index 000000000..d88a0b23f
--- /dev/null
+++ b/tests/pcap/quic_frags_ch_in_multiple_packets.pcapng
diff --git a/tests/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng b/tests/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng
new file mode 100644
index 000000000..0e33ed186
--- /dev/null
+++ b/tests/pcap/quic_frags_ch_out_of_order_same_packet_craziness.pcapng
diff --git a/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out b/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out
new file mode 100644
index 000000000..5e570d147
--- /dev/null
+++ b/tests/result/quic_frags_ch_in_multiple_packets.pcapng.out
@@ -0,0 +1,8 @@
+QUIC	4	3998	1
+
+JA3 Host Stats: 
+		 IP Address                  	 # JA3C     
+	1	 ::1                      	 1      
+
+
+	1	UDP [::1]:58822 <-> [::1]:4443 [proto: 188/QUIC][cat: Web/5][2 pkts/2588 bytes <-> 2 pkts/1410 bytes][Goodput ratio: 95/91][0.01 sec][ALPN: h3-34;hq-34;h3-33;hq-33;h3-32;hq-32;h3-31;hq-31;h3-29;hq-29;h3-30;hq-30;h3-28;hq-28;h3-27;hq-27;h3;hq-interop][TLS Supported Versions: TLSv1.3;TLSv1.3 (draft);TLSv1.3 (draft);TLSv1.3 (draft)][Risk: ** SNI TLS extension was missing **][Risk Score: 50][TLSv1.3][JA3C: 0299b052ace53a14c3a04aceb5efd247][Plen Bins: 0,25,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,75,0,0,0,0,0,0,0,0,0]
diff --git a/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out b/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
new file mode 100644
index 000000000..d046744cd
--- /dev/null
+++ b/tests/result/quic_frags_ch_out_of_order_same_packet_craziness.pcapng.out
@@ -0,0 +1,125 @@
+Google	6	8352	2
+QUIC	169	235248	110
+GoogleServices	4	5568	1
+
+JA3 Host Stats: 
+		 IP Address                  	 # JA3C     
+	1	 147.196.90.42            	 1      
+	2	 168.144.64.5             	 1      
+	3	 52.187.20.175            	 1      
+	4	 159.117.176.124          	 1      
+
+
+	1	UDP 52.187.20.175:49880 -> 208.229.157.81:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.12 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	2	UDP 52.187.20.175:50588 -> 208.229.157.81:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.09 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	3	UDP 52.187.20.175:51619 -> 208.229.157.81:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.11 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	4	UDP 52.187.20.175:52512 -> 196.245.61.64:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.10 sec][PLAIN TEXT (2 x@/q)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	5	UDP 52.187.20.175:53260 -> 102.194.207.179:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.12 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	6	UDP 52.187.20.175:57066 -> 108.171.138.182:443 [proto: 188.239/QUIC.GoogleServices][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.11 sec][ALPN: h3-29][TLS Supported Versions: TLSv1.3][User-Agent: dev Chrome/92.0.4503.5 Windows NT 10.0; Win64; x64][TLSv1.3][Client: clientservices.googleapis.com][JA3C: 8b979b020e67a82c4f1f7f3932805dbb][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	7	UDP 52.187.20.175:61089 -> 99.42.133.245:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.13 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	8	UDP 52.187.20.175:61286 -> 198.74.29.79:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.12 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	9	UDP 52.187.20.175:61484 -> 202.152.155.121:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.10 sec][PLAIN TEXT (BWtJ6@)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	10	UDP 52.187.20.175:62114 -> 198.74.29.79:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.12 sec][PLAIN TEXT (yiCNDi1)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	11	UDP 133.205.75.230:56528 -> 208.229.157.81:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.11 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	12	UDP 147.196.90.42:61647 -> 177.86.46.206:443 [proto: 188.126/QUIC.Google][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][1.93 sec][ALPN: h3-29][TLS Supported Versions: TLSv1.3][User-Agent: dev Chrome/92.0.4503.5 Windows NT 10.0; Win64; x64][TLSv1.3][Client: sb-ssl.google.com][JA3C: 8b979b020e67a82c4f1f7f3932805dbb][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	13	UDP 159.117.176.124:49521 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.10 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	14	UDP 159.117.176.124:49867 -> 198.74.29.79:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.10 sec][PLAIN TEXT (apK ctL)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	15	UDP 159.117.176.124:58337 -> 208.229.157.81:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.11 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	16	UDP 159.117.176.124:61202 -> 198.74.29.79:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.10 sec][PLAIN TEXT (AQ07rt)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	17	UDP 159.117.176.124:64134 -> 207.121.63.92:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][2.10 sec][ALPN: h3-29][TLS Supported Versions: TLSv1.3][User-Agent: dev Chrome/92.0.4503.5 Windows NT 10.0; Win64; x64][TLSv1.3][Client: www.google.com][JA3C: 8b979b020e67a82c4f1f7f3932805dbb][PLAIN TEXT (lKQALj)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	18	UDP 168.144.64.5:50224 -> 126.3.93.89:443 [proto: 188/QUIC][cat: Web/5][4 pkts/5568 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.34 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	19	UDP 52.187.20.175:63507 -> 121.209.126.161:443 [proto: 188/QUIC][cat: Web/5][3 pkts/4176 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][1.53 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	20	UDP 168.144.64.5:58351 -> 193.68.169.100:443 [proto: 188/QUIC][cat: Web/5][3 pkts/4176 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.23 sec][ALPN: h3-29][TLS Supported Versions: TLSv1.3][User-Agent: dev Chrome/92.0.4503.3 Windows NT 6.1; Win64; x64][TLSv1.3][Client: www.gstatic.com][JA3C: 169051af8572ac08ea1ddeee0db208bc][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	21	UDP 52.187.20.175:58123 -> 118.89.218.46:443 [proto: 188.126/QUIC.Google][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][1.11 sec][ALPN: h3-29][TLS Supported Versions: TLSv1.3][User-Agent: dev Chrome/92.0.4503.5 Windows NT 10.0; Win64; x64][TLSv1.3][Client: accounts.google.com][JA3C: 8b979b020e67a82c4f1f7f3932805dbb][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	22	UDP 168.144.64.5:51053 -> 241.138.147.133:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.30 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	23	UDP 168.144.64.5:53431 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.07 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	24	UDP 168.144.64.5:55376 -> 212.22.246.243:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.33 sec][PLAIN TEXT (aUOvTUU)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	25	UDP 168.144.64.5:59827 -> 37.47.218.224:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.30 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	26	UDP 168.144.64.5:62719 -> 31.219.210.96:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.30 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	27	UDP 168.144.64.5:64964 -> 133.202.76.105:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.30 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	28	UDP 192.168.254.11:35124 -> 168.78.153.39:443 [proto: 188/QUIC][cat: Web/5][2 pkts/2784 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][0.29 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	29	UDP 10.117.78.100:44252 -> 251.236.18.198:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	30	UDP 10.117.78.100:55273 -> 202.152.155.121:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	31	UDP 159.117.176.124:51856 -> 16.205.123.234:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	32	UDP 168.144.64.5:49153 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	33	UDP 168.144.64.5:49217 -> 185.186.183.185:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	34	UDP 168.144.64.5:49324 -> 35.194.157.47:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	35	UDP 168.144.64.5:49860 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	36	UDP 168.144.64.5:49926 -> 103.179.40.184:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	37	UDP 168.144.64.5:50023 -> 76.231.104.92:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][PLAIN TEXT (TJdZNR)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	38	UDP 168.144.64.5:50073 -> 152.128.87.238:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	39	UDP 168.144.64.5:50423 -> 144.237.113.58:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	40	UDP 168.144.64.5:50482 -> 121.209.126.161:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	41	UDP 168.144.64.5:50540 -> 99.45.60.254:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	42	UDP 168.144.64.5:50552 -> 108.171.138.182:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	43	UDP 168.144.64.5:51248 -> 99.42.133.245:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	44	UDP 168.144.64.5:51296 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	45	UDP 168.144.64.5:51456 -> 102.194.207.179:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	46	UDP 168.144.64.5:52273 -> 244.214.160.219:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	47	UDP 168.144.64.5:52387 -> 143.52.137.18:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	48	UDP 168.144.64.5:52396 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	49	UDP 168.144.64.5:52942 -> 93.100.151.221:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	50	UDP 168.144.64.5:53127 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][PLAIN TEXT (R/maht)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	51	UDP 168.144.64.5:53404 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	52	UDP 168.144.64.5:54016 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	53	UDP 168.144.64.5:54120 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	54	UDP 168.144.64.5:54449 -> 102.194.207.179:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	55	UDP 168.144.64.5:55066 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	56	UDP 168.144.64.5:55479 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	57	UDP 168.144.64.5:55561 -> 35.194.157.47:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	58	UDP 168.144.64.5:55572 -> 117.148.117.30:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	59	UDP 168.144.64.5:55637 -> 169.81.163.225:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	60	UDP 168.144.64.5:55844 -> 112.1.105.138:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	61	UDP 168.144.64.5:56384 -> 117.148.117.30:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	62	UDP 168.144.64.5:56425 -> 125.136.204.4:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	63	UDP 168.144.64.5:56488 -> 177.86.46.206:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	64	UDP 168.144.64.5:56683 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	65	UDP 168.144.64.5:56844 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	66	UDP 168.144.64.5:57319 -> 7.71.118.27:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	67	UDP 168.144.64.5:57398 -> 137.238.249.2:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	68	UDP 168.144.64.5:57565 -> 217.254.108.174:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	69	UDP 168.144.64.5:57735 -> 137.238.249.2:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	70	UDP 168.144.64.5:57767 -> 76.83.40.87:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	71	UDP 168.144.64.5:58414 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][PLAIN TEXT (rAnq62)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	72	UDP 168.144.64.5:58429 -> 38.57.8.121:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	73	UDP 168.144.64.5:58703 -> 93.100.151.221:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	74	UDP 168.144.64.5:58832 -> 117.148.117.30:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	75	UDP 168.144.64.5:58956 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	76	UDP 168.144.64.5:59206 -> 76.231.104.92:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	77	UDP 168.144.64.5:59327 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	78	UDP 168.144.64.5:59622 -> 153.98.28.78:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	79	UDP 168.144.64.5:59680 -> 117.148.117.30:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][PLAIN TEXT (xqgfA/)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	80	UDP 168.144.64.5:59785 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	81	UDP 168.144.64.5:59965 -> 22.12.150.194:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	82	UDP 168.144.64.5:60342 -> 93.100.151.221:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	83	UDP 168.144.64.5:60551 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	84	UDP 168.144.64.5:60809 -> 9.65.169.252:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][PLAIN TEXT (XDlJUg)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	85	UDP 168.144.64.5:60896 -> 45.228.175.189:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	86	UDP 168.144.64.5:60919 -> 53.101.228.200:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	87	UDP 168.144.64.5:60934 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	88	UDP 168.144.64.5:60936 -> 9.65.169.252:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	89	UDP 168.144.64.5:60949 -> 185.186.183.185:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	90	UDP 168.144.64.5:61209 -> 35.194.157.47:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	91	UDP 168.144.64.5:61341 -> 16.232.218.117:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	92	UDP 168.144.64.5:61886 -> 65.33.51.74:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	93	UDP 168.144.64.5:62047 -> 136.125.67.96:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	94	UDP 168.144.64.5:62652 -> 158.146.215.30:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	95	UDP 168.144.64.5:62818 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	96	UDP 168.144.64.5:63136 -> 9.65.169.252:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	97	UDP 168.144.64.5:63163 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	98	UDP 168.144.64.5:63736 -> 213.188.47.247:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	99	UDP 168.144.64.5:63925 -> 39.227.72.32:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	100	UDP 168.144.64.5:64497 -> 102.194.207.179:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	101	UDP 168.144.64.5:64693 -> 113.250.137.243:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	102	UDP 168.144.64.5:64700 -> 16.232.218.117:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][PLAIN TEXT (gjom@g)][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	103	UDP 168.144.64.5:64976 -> 220.80.126.73:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	104	UDP 168.144.64.5:65186 -> 9.65.169.252:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	105	UDP 168.144.64.5:65360 -> 65.33.51.74:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	106	UDP 168.144.64.5:65391 -> 128.248.24.1:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	107	UDP 192.168.254.11:38331 -> 93.100.151.221:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	108	UDP 192.168.254.11:43427 -> 98.251.203.81:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	109	UDP 192.168.254.11:45652 -> 170.196.90.126:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	110	UDP 192.168.254.11:49689 -> 87.179.155.149:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	111	UDP 192.168.254.11:51075 -> 117.148.117.30:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	112	UDP 192.168.254.11:54692 -> 171.182.169.23:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]
+	113	UDP 192.168.254.11:59048 -> 251.236.18.198:443 [proto: 188/QUIC][cat: Web/5][1 pkts/1392 bytes -> 0 pkts/0 bytes][Goodput ratio: 97/0][< 1 sec][Plen Bins: 0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,100,0,0,0,0,0]